Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/8fOMsVEAAc3d4escem1vlPIQyEM.roa
File: 8fOMsVEAAc3d4escem1vlPIQyEM.roa (raw, json)
Hash identifier: ppHjry2yDgIu2iD/dPU2W3ekDetcMMS6prflmDAJ9so=
Subject key identifier: F1:F3:8C:B1:51:00:01:CD:DD:E1:EB:1C:7A:6D:6F:94:F2:10:C8:43
Certificate issuer: /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial: 37112BFE
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/8fOMsVEAAc3d4escem1vlPIQyEM.roa
Signing time: Sat 01 Jan 2022 07:58:50 +0000
ROA not before: Sat 01 Jan 2022 07:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49931
IP address blocks: 109.164.0.0/17 maxlen: 25
109.164.116.0/22 maxlen: 24
109.164.121.0/24 maxlen: 25
109.164.120.0/24 maxlen: 25
2a03:3a01::/32 maxlen: 56
2a03:3a00::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923872254 (0x37112bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Validity
Not Before: Jan 1 07:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1f38cb1510001cddde1eb1c7a6d6f94f210c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:15:a4:d1:2a:1d:9c:9d:88:a1:08:44:86:
f9:48:ec:01:27:f0:70:53:a4:a5:c3:2a:b4:4c:fa:
f3:eb:2b:99:71:21:45:78:15:8a:d3:67:e8:eb:4d:
56:4a:ab:8e:29:46:f8:c1:2e:9e:f7:71:e5:f7:5a:
8c:43:4e:8a:09:a5:33:d8:ba:01:62:07:85:a2:08:
54:ca:21:24:0b:64:2b:2e:9b:33:09:80:1c:27:f3:
a0:df:15:d1:74:fa:e0:09:f8:2a:d9:ad:ed:7c:40:
c8:4a:b0:28:ab:c5:a3:71:93:4d:16:f3:b2:20:59:
63:4f:84:7e:49:b4:69:18:4c:d4:0a:20:2b:80:24:
f7:2e:d1:06:b6:a5:cb:e7:f2:c6:38:43:13:6f:25:
e5:91:38:4a:e2:10:22:f1:3a:70:7a:42:95:36:b6:
18:f9:53:5e:4e:40:0d:27:01:16:64:4f:8f:c8:25:
44:da:4b:09:f0:93:46:27:3e:64:2e:32:ff:79:87:
14:51:0e:3e:82:8d:18:4f:1a:75:23:b6:ed:a3:e0:
78:98:93:bd:c7:e9:e0:b5:76:91:cd:55:f2:f8:33:
04:3d:23:6c:b8:4d:e6:be:96:95:43:5b:d6:21:50:
1d:e1:ae:c3:b0:9a:24:ec:84:c6:6f:b3:15:2f:41:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:8C:B1:51:00:01:CD:DD:E1:EB:1C:7A:6D:6F:94:F2:10:C8:43
X509v3 Authority Key Identifier:
keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/8fOMsVEAAc3d4escem1vlPIQyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.0.0/17
IPv6:
2a03:3a00::/31
Signature Algorithm: sha256WithRSAEncryption
a9:fe:5f:04:a4:fa:26:a4:36:b9:42:35:f9:3e:8a:c0:94:ea:
45:f1:cd:f1:44:1d:68:25:c1:d6:89:e7:1b:72:fd:d2:dc:10:
b2:53:ee:00:21:e1:26:02:52:f7:a2:d8:17:62:38:56:cd:59:
94:a7:2b:0a:a0:08:ce:04:d3:33:fd:74:08:db:d6:33:7f:2f:
c5:48:35:b9:6b:36:b6:30:ef:9a:c6:51:eb:a5:26:d8:54:6a:
92:44:73:bd:2c:d3:be:4f:d9:07:de:b6:00:51:0d:7c:30:32:
94:43:a2:26:d6:bb:e1:c9:bd:38:d2:e7:ac:09:63:1b:73:bd:
cf:09:50:00:10:e8:ef:a0:2e:af:b1:34:e8:77:8d:b1:e1:bd:
2f:08:68:49:fa:00:d4:57:b0:df:cf:11:1f:3e:78:ae:0f:b2:
33:e8:4b:46:b2:91:d8:17:b5:76:44:9b:42:9b:8e:7f:e0:fe:
f1:87:73:ae:de:51:08:27:ea:d4:a0:7e:1a:b1:d9:2f:68:36:
ef:63:3c:91:43:d2:b2:5c:d3:d6:bb:9b:a8:89:38:56:14:2d:
44:ad:9b:b0:15:93:df:c2:19:7f:40:57:e2:89:16:af:fb:c0:
77:c8:15:eb:7d:40:9e:fe:62:da:fb:e4:e1:cb:21:95:86:76:
f0:37:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:38 2024 by rpki-client on console-ams.rpki-client.org