Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/gHNTU6kFm62LpIwp3aBiiCrpqQY.roa
File: gHNTU6kFm62LpIwp3aBiiCrpqQY.roa (raw, json)
Hash identifier: qaoyW03yuGzhsJdzMcO5K9Bk3kEC3G3/4+erKDm9AZE=
Subject key identifier: 80:73:53:53:A9:05:9B:AD:8B:A4:8C:29:DD:A0:62:88:2A:E9:A9:06
Certificate issuer: /CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Certificate serial: 01857246A9F844860B42DE63F4042A80D53B
Authority key identifier: 9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/gHNTU6kFm62LpIwp3aBiiCrpqQY.roa
Signing time: Mon 02 Jan 2023 11:38:31 +0000
ROA not before: Mon 02 Jan 2023 11:38:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39886
IP address blocks: 109.94.32.0/19 maxlen: 24
213.111.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a9:f8:44:86:0b:42:de:63:f4:04:2a:80:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Validity
Not Before: Jan 2 11:38:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80735353a9059bad8ba48c29dda062882ae9a906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9f:b2:0c:a1:6d:8d:9b:16:30:74:51:45:f5:
e5:00:fd:77:59:19:51:db:89:cf:6c:53:89:82:be:
58:d9:2e:ba:57:d8:70:fd:1a:7a:f3:a4:7f:c5:2c:
ad:e7:f9:59:ee:92:53:c7:d8:84:49:d9:c7:7f:d3:
4e:a5:10:01:fb:e1:7c:96:20:17:3f:10:4d:f0:fc:
be:33:2b:ad:c2:a7:b1:41:05:25:16:92:98:79:a9:
d4:d0:89:b0:a6:29:38:f1:85:11:2d:98:1f:55:2c:
32:05:3c:ee:b5:82:bb:29:e7:0c:f5:f6:e9:5e:27:
7f:0d:57:d3:bb:7c:a2:ba:fc:5e:a4:02:ec:78:2b:
a5:86:d9:c1:6a:98:12:c6:6c:22:b6:ee:a4:e6:66:
df:9d:9f:bd:e0:3a:dc:0f:35:bb:da:cb:0c:65:d7:
8b:10:09:d8:a5:0b:8f:51:c2:e2:1f:ce:df:26:95:
ff:99:03:1c:b3:74:a3:b4:3b:a9:5b:89:e0:57:e2:
7b:f2:2d:03:f6:27:23:d6:ec:c9:54:24:2d:3a:d4:
19:d6:a0:4d:e1:0f:49:33:51:2a:2a:6b:76:28:59:
9b:2f:8a:e9:44:ba:e0:0c:6a:4f:fc:dd:d3:04:d3:
42:be:28:be:ed:95:a2:85:df:e1:8e:d2:2d:88:99:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:53:53:A9:05:9B:AD:8B:A4:8C:29:DD:A0:62:88:2A:E9:A9:06
X509v3 Authority Key Identifier:
keyid:9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/gHNTU6kFm62LpIwp3aBiiCrpqQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.32.0/19
213.111.0.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:22:f0:41:48:66:90:70:04:23:f7:08:8f:04:e7:66:d3:96:
f3:2e:f8:1c:fb:c8:9e:0a:66:81:a3:6c:b9:c6:a6:8d:80:8e:
d3:93:82:23:51:b0:eb:36:e7:52:05:8a:d6:38:1a:9e:98:cb:
c5:cd:82:88:4a:3d:9c:4e:0d:46:11:a3:29:97:eb:3b:f0:db:
bc:77:7e:9c:f2:8d:2c:83:e1:9d:26:e8:be:ba:1e:00:03:93:
5c:b5:24:cb:83:81:c2:12:c3:36:00:6d:24:07:31:bc:8a:86:
b2:c9:e3:89:15:97:e2:72:ef:08:65:54:29:49:c1:fd:d4:4f:
85:51:6f:96:7c:1a:63:65:dd:26:2d:7b:81:a6:2f:d0:07:91:
13:4b:93:35:92:69:9e:96:6a:34:c3:69:07:62:d3:24:2e:1e:
df:29:6f:ae:13:53:86:46:7d:87:52:72:5b:6b:82:22:e7:05:
60:b3:00:b7:16:48:c9:4e:14:91:b9:09:1c:7c:d7:f3:47:09:
b9:31:44:01:ed:f3:65:ae:8e:14:1d:66:63:f4:f7:36:fe:5c:
3f:19:b8:35:d6:9c:b9:70:33:80:d4:8b:27:c3:a4:6c:bc:11:
72:09:07:ae:c0:13:37:c2:b2:41:ec:60:93:98:a4:d5:12:42:
62:04:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:50 2024 by rpki-client on console-ams.rpki-client.org