Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/x99mYkeMavvRLBX_X7xW_H6gLRw.roa
File: x99mYkeMavvRLBX_X7xW_H6gLRw.roa (raw, json)
Hash identifier: ii3KnW7jYX5Tl3G8eNv50WlecsDtEMF3INgmamtSeuk=
Subject key identifier: C7:DF:66:62:47:8C:6A:FB:D1:2C:15:FF:5F:BC:56:FC:7E:A0:2D:1C
Certificate issuer: /CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Certificate serial: 01856FF054B6997F695B5B31D576A532B639
Authority key identifier: 2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/x99mYkeMavvRLBX_X7xW_H6gLRw.roa
Signing time: Mon 02 Jan 2023 00:44:59 +0000
ROA not before: Mon 02 Jan 2023 00:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212756
IP address blocks: 109.107.155.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:54:b6:99:7f:69:5b:5b:31:d5:76:a5:32:b6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Validity
Not Before: Jan 2 00:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7df6662478c6afbd12c15ff5fbc56fc7ea02d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:d2:23:2a:44:52:2d:8f:88:39:ed:50:7b:
a6:2c:3a:82:2c:ae:e4:43:80:94:f8:93:8f:b9:88:
bf:50:d4:c1:98:61:02:72:78:5f:0f:17:1c:fb:e2:
c0:a4:b2:c7:2f:c3:11:ac:f1:0e:79:3c:74:a2:e8:
00:cb:48:07:2e:f0:2b:cd:b7:dd:01:48:05:09:7d:
4a:1d:81:54:36:67:13:77:fa:77:b1:53:9a:6a:d3:
9f:41:87:55:06:a5:47:be:cf:5a:14:45:7a:9d:e6:
44:e2:7a:4c:23:d7:a5:ee:51:20:1a:25:4e:e6:4f:
99:a7:27:d4:d6:b8:84:17:8a:6e:a6:82:33:a1:47:
b9:42:4d:93:74:81:95:09:7b:23:05:a3:64:95:c4:
be:28:83:e3:dd:5e:29:56:3d:0b:e7:a9:28:70:75:
87:b5:6e:c5:88:7f:b3:97:cc:35:9b:83:38:06:69:
74:bd:92:51:02:01:4f:91:04:65:36:58:2f:04:52:
e5:e8:66:51:ec:9a:12:98:d9:c7:89:f0:56:d3:1e:
4d:be:0b:6b:80:d8:6c:3c:09:c1:6d:94:a4:f4:60:
19:73:32:1d:3d:6a:7d:fb:bd:20:cb:0b:db:f8:b2:
b6:07:51:73:1a:1f:a8:5d:97:00:36:b8:6f:a6:b8:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DF:66:62:47:8C:6A:FB:D1:2C:15:FF:5F:BC:56:FC:7E:A0:2D:1C
X509v3 Authority Key Identifier:
keyid:2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/x99mYkeMavvRLBX_X7xW_H6gLRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.155.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9c:9f:e8:ab:a6:df:3d:af:0b:3f:d8:89:5f:0d:f2:d2:37:
02:6a:06:49:f6:63:3d:dd:32:d3:d8:d3:df:88:ef:62:c8:23:
72:2c:68:fb:34:86:4d:fc:c7:b7:7f:17:93:8a:fe:6f:be:ed:
84:6b:76:3f:2d:19:48:6a:34:80:39:cd:05:19:1a:a6:15:b4:
0d:4a:f1:f5:0b:07:b1:58:b1:df:c3:2e:93:60:8a:3b:b9:98:
ea:04:72:8a:a4:80:e1:03:50:06:fe:ab:94:54:5e:63:42:bf:
08:f7:66:70:e2:16:38:71:b3:ff:8d:8f:cb:5b:ab:a5:0a:ef:
07:32:a3:66:f7:00:a7:84:17:6e:d9:77:29:34:55:8d:3c:42:
6e:63:9c:95:5b:c0:6c:03:90:d2:50:c8:43:f7:41:63:46:30:
7f:b4:df:ee:40:0d:bf:27:f6:f2:ae:f7:8e:0e:b0:0b:ee:7a:
85:ca:38:a3:bb:84:3c:e2:a1:b9:d4:7e:14:62:9f:24:66:ab:
55:51:fc:c3:f5:aa:77:22:3d:b1:95:36:08:6a:c8:68:61:6d:
cb:f2:77:eb:19:6c:74:cf:54:5e:d0:79:a2:1c:be:e7:65:5e:
43:b3:6e:11:ae:3f:25:46:49:53:76:69:54:2b:4c:04:80:7d:
95:19:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:37 2024 by rpki-client on console-ams.rpki-client.org