Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/x3K-SPM8BaUptOM4RFd917lFC5k.roa
File: x3K-SPM8BaUptOM4RFd917lFC5k.roa (raw, json)
Hash identifier: LNalY8xOuyZ0hKOKo3VZ0/QUwntTYYFfEc49UCf3MMQ=
Subject key identifier: C7:72:BE:48:F3:3C:05:A5:29:B4:E3:38:44:57:7D:D7:B9:45:0B:99
Certificate issuer: /CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Certificate serial: 0243569A
Authority key identifier: AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/x3K-SPM8BaUptOM4RFd917lFC5k.roa
Signing time: Tue 28 Jun 2022 20:43:02 +0000
ROA not before: Tue 28 Jun 2022 20:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 109.107.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37967514 (0x243569a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Validity
Not Before: Jun 28 20:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c772be48f33c05a529b4e33844577dd7b9450b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:e8:1a:b5:a9:be:df:83:4f:fc:67:67:ab:
8a:cd:24:b1:fe:21:39:4a:f8:f0:ee:99:95:9b:cb:
33:05:b5:e0:55:bb:19:d2:46:3f:9c:5f:09:9d:66:
d9:f9:30:7c:4d:e7:f5:9a:a9:9d:d1:5a:5f:50:5f:
5c:1b:77:eb:1d:75:47:d5:e9:8e:34:5d:7c:c2:05:
de:ba:90:bb:7a:ad:f0:4b:4f:8b:20:70:81:1d:a0:
2f:26:d5:07:36:a6:75:16:23:b0:12:cb:eb:4a:8c:
0a:fb:01:bd:20:e6:f4:a0:f8:48:98:a6:d3:5d:ac:
cb:31:d4:b1:cf:6d:4d:7f:e5:6b:a5:a7:13:71:86:
ed:d8:2b:ae:69:e4:22:2a:77:04:8e:e0:53:5f:f3:
df:08:c2:71:53:64:48:7c:3d:f1:ac:49:9e:77:46:
4b:ea:69:6e:4e:16:72:7c:55:e6:d4:f4:b5:99:e7:
51:14:08:2b:f2:94:42:60:ea:f5:2d:6a:29:5f:e7:
94:5e:2f:83:ed:c6:be:b2:91:b8:2b:bc:6e:19:0f:
ca:27:f1:45:8f:e3:02:cb:74:a7:01:d6:e4:1c:30:
9a:37:ae:1a:6c:07:42:f9:f0:4d:d1:c7:2e:87:5d:
58:e7:ac:be:a5:a7:03:e4:b3:b9:f8:c2:96:db:c0:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:BE:48:F3:3C:05:A5:29:B4:E3:38:44:57:7D:D7:B9:45:0B:99
X509v3 Authority Key Identifier:
keyid:AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/x3K-SPM8BaUptOM4RFd917lFC5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/rs3YvuJLNCsDnWEM48DAxHGaO_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.135.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3e:97:e3:8f:82:42:f9:d8:95:91:85:02:2b:eb:10:0c:7b:
13:a6:b2:66:d1:ce:71:ef:0a:b7:11:d3:0b:97:b3:a5:f2:1c:
5f:b6:f0:9e:9e:de:cb:8d:9a:69:30:5d:a0:53:8a:97:f9:fb:
05:e1:01:73:c7:6c:f0:72:a4:15:16:b6:fc:14:e0:22:f2:f4:
b9:fe:86:88:32:86:ac:af:59:c8:6c:6e:88:82:4b:be:b7:61:
2c:4b:e3:9d:ca:ae:90:c3:11:ad:9a:9c:ca:ea:30:6e:d1:a5:
1f:6f:05:52:65:b6:af:36:e1:fe:bd:eb:c1:2f:fa:f4:e1:c5:
94:4b:f8:af:c6:7f:a7:a7:fa:39:7e:1c:2b:5a:1f:0c:d8:64:
99:e8:0f:31:bb:b4:99:ba:5d:d1:e6:1f:72:fb:5d:14:73:66:
85:6b:a4:4b:33:78:f3:ed:36:1b:68:d5:c8:bd:20:df:bb:22:
95:9f:37:59:1b:8f:91:b4:52:79:49:ee:10:e9:01:2d:fb:9c:
43:71:7d:31:65:4c:be:d8:62:db:c7:8f:c7:ae:68:83:79:ae:
5b:c1:6d:6f:f3:00:9d:d0:57:bd:4d:88:55:ad:fb:46:28:ab:
63:f0:64:63:ee:24:86:b3:69:09:ec:01:d1:a9:93:cb:c1:1f:
d6:64:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-fra.rpki-client.org