Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/eY47-YWHPbQdAqnRq2fnlvFW0yY.roa
File: eY47-YWHPbQdAqnRq2fnlvFW0yY.roa (raw, json)
Hash identifier: czd+sJbmsqNeD4la8GfG0CTELhe8AY2rGUHvwmSGEcs=
Subject key identifier: 79:8E:3B:F9:85:87:3D:B4:1D:02:A9:D1:AB:67:E7:96:F1:56:D3:26
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 9F9B85
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/eY47-YWHPbQdAqnRq2fnlvFW0yY.roa
Signing time: Sat 01 Jan 2022 02:02:07 +0000
ROA not before: Sat 01 Jan 2022 02:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15596
IP address blocks: 109.122.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10460037 (0x9f9b85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Jan 1 02:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=798e3bf985873db41d02a9d1ab67e796f156d326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:5a:5b:0a:f1:3f:e3:92:1d:1e:76:27:6d:
65:28:12:44:b8:1e:2f:4d:ee:2c:aa:05:58:f2:7e:
8d:cf:a2:84:43:cf:de:55:3b:ec:b7:5e:c4:3f:cc:
ac:b0:33:fa:97:e4:4b:8a:78:dc:29:a8:4b:f5:04:
6f:a4:77:8b:0c:42:6b:a8:75:f2:f8:1a:25:ce:62:
33:4a:6a:88:94:70:52:2a:a0:2e:5f:ef:c4:78:2d:
5a:af:43:73:45:5d:96:ee:e4:5c:74:2a:42:88:29:
5e:20:a1:74:b8:9d:df:f1:17:34:9f:ce:c1:ca:10:
52:55:bd:97:53:3f:56:8a:63:04:1b:31:b5:34:ef:
6f:f1:c7:4a:77:58:db:60:b9:f9:27:08:be:49:a6:
d5:02:76:6e:17:38:55:7a:0c:8c:53:11:da:fd:cf:
6c:60:97:66:bc:3a:d9:3e:d4:47:9e:16:d7:2b:9c:
42:62:3f:da:ac:49:ec:ab:7b:c0:6e:7a:95:8b:b0:
32:0c:0c:33:54:10:2f:21:07:2a:52:fb:6f:72:57:
2e:90:25:ba:f0:f1:25:4d:f9:97:38:89:b7:4f:0c:
a8:18:ff:e2:8e:97:fc:5f:fd:04:c0:d5:d0:c3:38:
31:94:d5:f9:33:69:ec:70:ac:0b:1d:e4:d9:42:54:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:3B:F9:85:87:3D:B4:1D:02:A9:D1:AB:67:E7:96:F1:56:D3:26
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/eY47-YWHPbQdAqnRq2fnlvFW0yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:fe:47:c8:d4:23:3f:3d:02:9f:23:2d:04:68:02:99:b4:4a:
a1:dc:0d:73:80:29:c9:9d:d4:13:fe:48:5f:0a:4d:68:e2:00:
e2:4f:0e:e7:09:87:d8:b0:bd:b0:37:4b:43:91:8e:17:d6:0a:
2e:d6:91:76:ca:99:c6:10:b6:8a:32:0b:ab:f1:73:83:8f:dd:
50:13:cc:dd:8f:af:42:cf:61:19:9a:7d:98:0e:a7:14:e8:3b:
ab:7f:39:98:c7:6b:2a:36:d4:38:2d:30:e2:ae:3c:dc:08:be:
ac:14:7f:1f:05:d6:e8:64:a2:d8:35:87:2f:e6:47:3c:f3:84:
90:7a:2d:bf:e2:1b:52:d3:58:5b:04:62:96:4b:14:fe:9d:d5:
8c:61:92:3d:96:22:8a:1d:44:dd:6d:6f:6b:44:cf:d0:d3:ad:
f4:66:9e:f8:52:11:8f:10:4a:5f:c9:55:ba:38:12:aa:fd:2f:
a4:0f:94:1f:a7:f2:bb:80:a4:a1:4e:33:97:0a:5c:45:c1:52:
e7:77:65:68:ad:57:a7:6a:aa:96:0d:fc:14:d8:80:01:8a:9c:
8e:23:a5:eb:75:8b:15:c6:fb:3d:59:bc:f4:be:52:ad:e3:c8:
7d:3b:e6:10:c6:d6:a1:6c:d3:50:91:f8:9e:f1:cf:49:39:89:
72:e6:8a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:51 2025 by rpki-client