Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/53Ta55YLDPFpfJIBzSh_gJZjm7c.roa
File: 53Ta55YLDPFpfJIBzSh_gJZjm7c.roa (raw, json)
Hash identifier: iy24iORuQJT9+8sY/xJfg5LES4zNB/Q3F5fbtIYYLqU=
Subject key identifier: E7:74:DA:E7:96:0B:0C:F1:69:7C:92:01:CD:28:7F:80:96:63:9B:B7
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018A172524859F82A3365DCFDD8AD43EB015
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/53Ta55YLDPFpfJIBzSh_gJZjm7c.roa
Signing time: Mon 21 Aug 2023 08:10:24 +0000
ROA not before: Mon 21 Aug 2023 08:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 109.111.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:25:24:85:9f:82:a3:36:5d:cf:dd:8a:d4:3e:b0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 21 08:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e774dae7960b0cf1697c9201cd287f8096639bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:20:fd:28:0b:25:0c:e7:8e:6b:2a:d3:0a:dd:
e9:fa:1d:96:ed:6a:be:c8:35:94:c7:3e:69:64:bb:
de:9b:7e:62:19:dc:cc:7f:e0:85:43:c4:a5:01:57:
21:bd:86:c3:22:57:61:62:b7:fe:3b:28:59:03:78:
80:b0:e9:55:bb:d5:c9:1d:e1:5d:55:90:c4:a5:89:
43:26:80:73:92:b9:a5:36:de:60:54:9e:d9:f1:ee:
1f:4b:af:21:17:75:f8:24:b2:32:fe:1e:d4:c0:04:
14:fe:66:e9:90:75:e3:ab:a8:67:f5:19:8f:b8:5c:
8b:6d:75:97:95:1b:00:ec:9b:d8:7c:8e:c5:d2:a9:
f3:cd:a0:de:86:30:5f:f5:74:8f:a3:4e:50:18:28:
0a:22:77:70:6d:0d:b9:88:ea:b6:b3:65:b9:4c:4f:
dd:97:70:2a:8b:0a:78:7b:39:9e:52:ab:ef:85:52:
5f:8c:5c:9d:fb:3c:4c:d1:6a:59:59:3d:14:5f:5f:
0d:75:0a:1e:33:85:bb:41:f5:a4:13:1e:d6:2a:5a:
20:1e:a6:48:75:5d:76:fb:de:28:53:8d:78:8e:95:
18:9d:2e:23:9e:ad:fd:cd:8b:21:8b:3b:f1:b7:97:
03:00:91:bf:a7:a4:20:49:54:44:66:20:30:61:fc:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:DA:E7:96:0B:0C:F1:69:7C:92:01:CD:28:7F:80:96:63:9B:B7
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/53Ta55YLDPFpfJIBzSh_gJZjm7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.56.0/22
Signature Algorithm: sha256WithRSAEncryption
18:d6:f5:f5:ec:2c:f2:ba:c9:41:55:8a:af:82:86:f9:aa:81:
48:9c:ec:8f:d8:fe:ee:92:8c:ea:16:6a:7b:9a:f9:c0:61:6e:
b9:d1:35:2c:dc:59:38:9a:ef:b9:fc:55:2d:aa:cb:df:08:61:
9d:5d:c6:fa:63:75:35:72:4d:c8:06:09:4d:88:a5:f7:a2:99:
4f:98:09:b4:da:08:ae:aa:a3:84:84:23:c8:18:aa:4d:a5:24:
96:5c:49:5e:b2:65:80:3d:00:a4:c6:94:1b:85:c3:69:12:ee:
25:1b:fb:52:ce:3a:3e:c6:ea:03:fb:62:97:3a:e3:a9:4c:36:
61:45:a4:c7:e0:5d:d5:a3:50:db:5e:7e:0d:ec:61:cd:7d:b6:
04:d5:46:67:cc:bd:1c:80:68:28:38:72:02:ac:61:ff:16:c2:
31:f0:3d:8c:f7:3a:87:ea:c4:de:9f:94:19:7f:f8:1a:64:32:
ef:85:f4:9a:d9:db:cf:34:78:db:b8:a8:4f:27:82:98:62:06:
df:45:a0:43:8c:01:39:f5:2d:3a:dd:8c:1b:e9:d6:c1:b0:73:
a1:3f:0e:ad:e1:c9:49:39:4b:44:8b:4f:f4:a5:72:3b:58:db:
75:7b:ce:94:dc:cb:c9:11:8a:47:a4:51:10:11:83:60:b1:68:
9a:7f:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:06 2025 by rpki-client