Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/H2dEQhZsnQS60U0n5ij9uCbvJpM.roa
File: H2dEQhZsnQS60U0n5ij9uCbvJpM.roa (raw, json)
Hash identifier: Au3EjAsHA5gkIP1v1yHsVSDXLcAVdibnBQpu7RiP2C0=
Subject key identifier: 1F:67:44:42:16:6C:9D:04:BA:D1:4D:27:E6:28:FD:B8:26:EF:26:93
Certificate issuer: /CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Certificate serial: 011B9FF8
Authority key identifier: AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/H2dEQhZsnQS60U0n5ij9uCbvJpM.roa
Signing time: Wed 16 Feb 2022 22:12:10 +0000
ROA not before: Wed 16 Feb 2022 22:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 109.107.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18587640 (0x11b9ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Validity
Not Before: Feb 16 22:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f674442166c9d04bad14d27e628fdb826ef2693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:54:89:fa:14:fc:48:93:1e:3e:d7:36:8e:
46:12:4f:d8:c2:12:cd:6e:e8:7b:7f:91:d0:41:4c:
2a:4d:09:2a:3a:2f:9f:77:dd:d4:16:aa:fd:21:5f:
07:2a:18:35:83:a7:18:79:d5:6b:60:14:82:ff:38:
3a:b4:27:11:dd:a4:7f:7a:93:d7:5a:53:0a:95:4f:
dd:79:54:5c:2b:b4:df:14:da:33:c4:72:6b:58:50:
6c:c1:0f:1e:30:f5:c4:56:8a:9f:bc:b9:74:68:1c:
f2:0c:d6:b4:86:52:6e:60:77:af:09:dd:16:51:6f:
b3:aa:a4:65:ee:a4:55:5b:85:ba:19:d7:c7:7a:03:
2e:fa:29:7a:6b:45:9e:70:13:6d:b0:58:e8:dc:6d:
8c:d0:97:4e:6e:8b:2d:2c:37:fe:c5:02:50:fe:a6:
3b:ce:65:bf:32:22:17:96:b4:1e:1d:d2:95:01:ee:
e9:5c:69:75:d7:ce:94:54:53:7a:0a:3b:cf:19:55:
fa:74:2f:69:66:d8:f4:fe:1d:aa:0b:21:36:c0:54:
d1:16:23:ed:e6:51:66:c4:ec:48:d4:4b:65:e2:1e:
d3:af:8d:28:7b:6c:22:d9:f0:4e:d2:12:f6:ff:1e:
dd:41:f5:49:4f:5b:f4:26:b4:b8:fc:20:7b:91:de:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:44:42:16:6C:9D:04:BA:D1:4D:27:E6:28:FD:B8:26:EF:26:93
X509v3 Authority Key Identifier:
keyid:AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/H2dEQhZsnQS60U0n5ij9uCbvJpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/rs3YvuJLNCsDnWEM48DAxHGaO_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2b:8f:7e:64:8f:ee:95:ea:f0:97:1f:82:8c:50:d8:ee:0f:
0c:c5:ab:d2:77:1c:fc:31:f3:3c:d9:80:7b:0c:0b:17:f9:f0:
eb:25:4c:75:d9:8d:85:81:84:61:e2:a6:59:56:cd:79:87:40:
98:f1:a3:c7:bc:4a:d4:af:69:82:6e:ba:c5:ac:17:b3:d8:04:
4e:f2:b0:b8:04:0f:2d:02:4e:13:d0:63:0c:81:19:da:15:8d:
b7:c4:3f:37:d3:24:85:56:b9:90:f2:e9:5c:bb:60:58:f4:c1:
49:1f:f2:da:57:ca:0b:3f:a8:37:e4:81:7e:f5:21:8b:69:88:
a0:3a:22:2b:2a:40:43:a3:66:6d:0c:f8:61:04:31:b5:4b:19:
e2:0e:49:27:47:87:0a:91:45:f6:77:c6:1f:bb:6d:8e:67:db:
47:0f:8b:4a:9d:bd:cc:53:b6:fb:5b:0a:32:06:2c:07:27:1e:
bb:a1:6d:a3:c0:97:e2:6e:94:ba:75:ed:32:ae:73:05:2c:0a:
eb:a6:8d:1a:f7:78:83:a5:5c:ba:b1:86:8d:ef:38:86:9d:6e:
0e:d3:97:2d:5f:42:f8:3c:ae:e5:03:16:94:92:e1:45:16:18:
6c:31:7e:e2:7a:7d:2c:c0:94:90:51:5c:0e:45:11:a9:9c:24:
80:ce:c5:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARuf+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZWNkZDhiZWUyNGIzNDJiMDM5ZDYxMGNlM2MwYzBjNDcxOWEzYmY5MB4XDTIyMDIx
NjIyMTIxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWY2NzQ0NDIxNjZj
OWQwNGJhZDE0ZDI3ZTYyOGZkYjgyNmVmMjY5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMf6VIn6FPxIkx4+1zaORhJP2MISzW7oe3+R0EFMKk0JKjov
n3fd1Baq/SFfByoYNYOnGHnVa2AUgv84OrQnEd2kf3qT11pTCpVP3XlUXCu03xTa
M8Rya1hQbMEPHjD1xFaKn7y5dGgc8gzWtIZSbmB3rwndFlFvs6qkZe6kVVuFuhnX
x3oDLvopemtFnnATbbBY6NxtjNCXTm6LLSw3/sUCUP6mO85lvzIiF5a0Hh3SlQHu
6VxpddfOlFRTego7zxlV+nQvaWbY9P4dqgshNsBU0RYj7eZRZsTsSNRLZeIe06+N
KHtsItnwTtIS9v8e3UH1SU9b9Ca0uPwge5HeLpcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQfZ0RCFmydBLrRTSfmKP24Ju8mkzAfBgNVHSMEGDAWgBSuzdi+4ks0KwOd
YQzjwMDEcZo7+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JzM1l2dUpMTkNzRG5XRU00OERBeEhHYU9fay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvM2NlN2I2LTE1MzktNGQ5OC05NmQzLTdiOGM5ZjYyOTcyOC8x
L0gyZEVRaFpzblFTNjBVMG41aWo5dUNidkpwTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
M2NlN2I2LTE1MzktNGQ5OC05NmQzLTdiOGM5ZjYyOTcyOC8xL3JzM1l2dUpMTkNz
RG5XRU00OERBeEhHYU9fay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1rhzANBgkqhkiG9w0BAQsFAAOC
AQEAjiuPfmSP7pXq8JcfgoxQ2O4PDMWr0ncc/DHzPNmAewwLF/nw6yVMddmNhYGE
YeKmWVbNeYdAmPGjx7xK1K9pgm66xawXs9gETvKwuAQPLQJOE9BjDIEZ2hWNt8Q/
N9MkhVa5kPLpXLtgWPTBSR/y2lfKCz+oN+SBfvUhi2mIoDoiKypAQ6NmbQz4YQQx
tUsZ4g5JJ0eHCpFF9nfGH7ttjmfbRw+LSp29zFO2+1sKMgYsByceu6Fto8CX4m6U
unXtMq5zBSwK66aNGvd4g6VcurGGje84hp1uDtOXLV9C+Dyu5QMWlJLhRRYYbDF+
4np9LMCUkFFcDkURqZwkgM7Fpw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:00 2025 by rpki-client