Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/b6CE8KwSAeVTv_H5gHw7p73_nPs.roa
File: b6CE8KwSAeVTv_H5gHw7p73_nPs.roa (raw, json)
Hash identifier: HQHC5eriB+xcXfn80Nnw2oDYjmy7CD7NzzGXd30Jhbw=
Subject key identifier: 6F:A0:84:F0:AC:12:01:E5:53:BF:F1:F9:80:7C:3B:A7:BD:FF:9C:FB
Certificate issuer: /CN=8cbe6bd758b24bebae2e4a51a5544cfad7ed314a
Certificate serial: 05B6C66A
Authority key identifier: 8C:BE:6B:D7:58:B2:4B:EB:AE:2E:4A:51:A5:54:4C:FA:D7:ED:31:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL5r11iyS-uuLkpRpVRM-tftMUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/b6CE8KwSAeVTv_H5gHw7p73_nPs.roa
Signing time: Sat 01 Jan 2022 15:58:55 +0000
ROA not before: Sat 01 Jan 2022 15:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48408
IP address blocks: 109.233.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95864426 (0x5b6c66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbe6bd758b24bebae2e4a51a5544cfad7ed314a
Validity
Not Before: Jan 1 15:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fa084f0ac1201e553bff1f9807c3ba7bdff9cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:44:d5:cf:cd:2a:73:45:c2:72:cb:41:fa:
4d:3a:7f:f3:18:73:b0:2d:8a:2a:86:63:a2:87:10:
b1:a9:7a:e7:db:1e:2b:56:f1:af:a1:93:29:02:be:
34:8a:e2:b4:11:10:77:66:f0:b3:09:a0:6f:10:9b:
4e:1b:30:69:27:d4:02:a5:d0:76:dd:b7:27:a3:a0:
a0:19:a4:c0:2b:f5:cc:a4:b0:c2:03:95:89:5c:b9:
1a:1a:42:63:71:f5:31:5d:41:6d:a5:db:9c:80:95:
56:af:41:86:e2:7d:8e:55:80:e9:ae:2e:d6:5c:7a:
78:9d:ab:70:93:1a:f3:fa:33:38:4a:6b:3c:10:bb:
45:d5:79:5e:7a:7b:c9:2a:d5:76:dd:08:df:51:97:
a4:63:88:97:f1:1b:e6:42:0f:8c:12:be:f3:40:e6:
99:49:6b:8f:de:c5:21:01:5d:c8:cd:98:5a:fb:85:
d5:ba:23:34:7d:ac:99:cd:a2:b6:ec:f3:c2:d9:6e:
fa:b8:49:79:32:fe:90:a3:03:2b:72:18:26:c7:d4:
4a:97:6b:a0:fe:5c:6d:3d:0e:c4:10:ee:a5:30:be:
7f:f2:d8:66:bd:28:ba:40:e6:fd:41:be:94:fc:a0:
e9:93:10:c9:41:f4:5c:5f:a4:6a:b5:93:b0:38:2c:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:84:F0:AC:12:01:E5:53:BF:F1:F9:80:7C:3B:A7:BD:FF:9C:FB
X509v3 Authority Key Identifier:
keyid:8C:BE:6B:D7:58:B2:4B:EB:AE:2E:4A:51:A5:54:4C:FA:D7:ED:31:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL5r11iyS-uuLkpRpVRM-tftMUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/b6CE8KwSAeVTv_H5gHw7p73_nPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/jL5r11iyS-uuLkpRpVRM-tftMUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:a9:b4:0e:c8:f0:ed:34:b8:53:a0:b1:d2:dc:89:35:f4:0a:
3a:b0:46:f2:09:0a:d3:0b:8e:b3:c0:e5:e9:02:8e:a0:81:d8:
d3:85:b1:0a:5c:10:f5:69:ad:d3:10:4f:d2:31:17:d3:92:75:
b0:23:be:42:ed:12:8d:dc:24:8c:ea:46:fa:40:69:68:43:9d:
4f:db:01:8e:eb:36:91:ec:b2:62:80:e4:33:05:fd:fb:b1:e8:
2c:0a:31:7a:c9:0e:dd:2c:27:a3:83:08:64:11:e5:77:8a:f3:
c5:d8:60:9b:6b:f1:23:ce:64:0b:2c:ec:d1:c8:9c:59:4b:d8:
fe:4f:4d:60:42:04:cf:aa:cc:33:15:d1:9b:02:d4:c8:dc:f5:
0e:21:5e:bc:58:20:66:9c:b0:97:7a:04:52:b2:e9:07:a3:7e:
d5:32:3d:b7:b0:6e:ec:dc:41:fa:8a:f0:7e:90:f3:9c:8a:70:
7b:62:5b:5e:03:d4:3e:8b:71:4e:d9:2c:04:69:23:69:ec:fc:
89:b2:01:14:d2:a1:ac:8a:97:69:e4:7f:43:61:53:97:37:b5:
ef:c4:4b:da:c7:23:d8:93:43:b8:57:3d:1a:5f:86:be:4e:aa:
a2:e2:67:8a:e8:bb:b8:42:0a:34:b4:ef:5c:9e:20:98:fb:1a:
78:f5:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:41 2024 by rpki-client on console-ams.rpki-client.org