Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/eKdG3c2vUbkEdmiXt6KcTY6Xr3I.roa
File: eKdG3c2vUbkEdmiXt6KcTY6Xr3I.roa (raw, json)
Hash identifier: oy03/f9sIfsoxUuv8nNrlDvuYuLlk/0i++I4kQuaVZg=
Subject key identifier: 78:A7:46:DD:CD:AF:51:B9:04:76:68:97:B7:A2:9C:4D:8E:97:AF:72
Certificate issuer: /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial: 0185710BE17B5F8D8AF406371CC5DB982ADD
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/eKdG3c2vUbkEdmiXt6KcTY6Xr3I.roa
Signing time: Mon 02 Jan 2023 05:54:41 +0000
ROA not before: Mon 02 Jan 2023 05:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34661
IP address blocks: 109.122.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:e1:7b:5f:8d:8a:f4:06:37:1c:c5:db:98:2a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
Validity
Not Before: Jan 2 05:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78a746ddcdaf51b904766897b7a29c4d8e97af72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:d2:39:6b:34:9a:31:b5:06:ea:25:e2:d5:
b5:aa:49:85:b2:82:87:7e:9f:cf:3b:b7:55:41:b5:
4d:7d:96:2f:1e:2b:30:c9:2b:69:f7:cc:30:82:cb:
c3:91:b9:6b:fe:bc:65:0e:4f:2e:8a:b3:7c:05:5f:
7d:3c:eb:0c:9f:f7:5e:fe:6e:07:ca:e1:c3:76:5d:
be:a3:f0:89:9e:93:ec:22:67:de:42:ad:25:ec:7f:
1a:03:91:98:95:05:03:16:68:02:00:56:a7:ee:c0:
53:a6:63:53:09:53:cb:c3:df:78:a4:eb:d9:42:97:
46:30:32:e1:df:d0:52:ee:e9:1e:1c:05:bf:82:2b:
1b:b5:06:30:dd:06:0f:28:60:aa:92:7c:62:5a:e9:
0b:8f:29:96:20:ab:88:6d:3b:36:41:c8:e6:59:07:
82:89:8e:1c:52:f1:e1:44:8b:f8:6d:a8:82:84:7b:
d1:de:d2:4c:26:9b:22:1e:c8:ef:36:74:cc:50:a3:
f2:08:82:ae:a8:08:7b:ef:b0:dd:ff:07:4d:33:d9:
29:37:2e:30:74:3d:e8:42:51:e1:ae:58:db:c9:6f:
95:1d:bd:d6:11:b1:cc:7c:66:24:54:0a:d6:1c:a0:
1f:8b:c4:25:03:39:68:5b:5a:83:b1:b8:71:e1:a7:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:46:DD:CD:AF:51:B9:04:76:68:97:B7:A2:9C:4D:8E:97:AF:72
X509v3 Authority Key Identifier:
keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/eKdG3c2vUbkEdmiXt6KcTY6Xr3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.32.0/21
Signature Algorithm: sha256WithRSAEncryption
45:3d:ac:3a:b2:a9:1e:b8:e6:2e:ae:44:c3:50:9a:af:26:d4:
62:5f:01:bf:df:4d:96:74:a0:07:71:eb:fc:7f:a1:7e:c3:3a:
70:6d:85:83:89:2c:94:89:54:9c:41:81:08:08:c9:86:75:85:
b7:8d:b9:b4:1e:7f:a5:48:1d:c8:2b:c5:8f:67:85:01:ed:cf:
01:63:c6:fe:39:56:69:c6:5c:88:c9:51:75:1e:9a:a6:56:27:
bb:67:7b:4e:09:04:51:fa:0d:fa:c4:d1:50:49:c3:e0:da:aa:
29:7d:45:8b:0e:b7:c5:93:cb:97:65:e5:8e:f7:54:ab:6c:0d:
35:8e:62:b4:f8:00:f2:53:e0:f0:20:2e:89:6a:e7:06:cf:a1:
17:8e:a8:57:f1:15:62:04:8a:5c:ee:f8:55:ec:69:80:2f:86:
3a:cf:a8:fc:f4:e1:73:4e:ba:a6:ca:bc:f1:db:21:8d:2a:24:
45:7b:0b:51:a7:d4:76:7e:f6:b2:0a:af:0f:6e:40:ba:fa:d9:
d7:16:19:c3:42:f2:2c:7c:55:90:be:3f:7c:56:34:7d:7a:89:
3b:9f:82:75:65:40:30:6d:0b:5a:e7:df:55:37:d8:74:45:b8:
6f:1c:1f:fe:54:c7:14:33:a0:de:ed:51:1a:96:3d:ed:e1:2e:
85:fa:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 08:00:17 2023 by rpki-client on console-fra.rpki-client.org