Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/5gWsNKrnHj-HIJsHblKwT3R_Ncs.roa
File: 5gWsNKrnHj-HIJsHblKwT3R_Ncs.roa (raw, json)
Hash identifier: 05IUIiLF0QQx24AF8zruqg1pQmJJNJO4qEYqmTt9nlc=
Subject key identifier: E6:05:AC:34:AA:E7:1E:3F:87:20:9B:07:6E:52:B0:4F:74:7F:35:CB
Certificate issuer: /CN=166dcaf076c3ec103117deaa67990c968bcd644d
Certificate serial: 0185728C77354350ED6EE5232421D57FD7FF
Authority key identifier: 16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/5gWsNKrnHj-HIJsHblKwT3R_Ncs.roa
Signing time: Mon 02 Jan 2023 12:54:46 +0000
ROA not before: Mon 02 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34661
IP address blocks: 109.122.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:77:35:43:50:ed:6e:e5:23:24:21:d5:7f:d7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166dcaf076c3ec103117deaa67990c968bcd644d
Validity
Not Before: Jan 2 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e605ac34aae71e3f87209b076e52b04f747f35cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:48:5b:da:f6:63:cd:04:5e:92:15:f3:9c:59:
5c:91:43:6a:d6:f7:d8:92:bf:f9:75:8f:72:41:ac:
08:43:64:e6:b1:93:44:fc:6d:2c:10:31:87:4b:7d:
34:ec:13:92:ac:84:28:a3:74:75:7e:d3:48:5b:bd:
c8:03:8a:0f:38:0e:65:2f:39:ec:7e:98:c1:a9:20:
75:1f:1f:ac:7a:f8:81:d5:8a:61:2b:51:fe:08:0e:
c7:c1:60:02:fd:5e:cd:cc:0c:28:73:8f:b7:4e:80:
1b:c4:68:9a:8a:00:09:d6:a0:13:07:99:55:c8:47:
c8:ab:67:6d:86:be:ee:ce:91:4d:35:bd:b9:ee:da:
ed:ec:c4:85:66:f4:59:d2:96:45:49:73:fe:2b:d3:
2f:1c:e9:68:c1:02:55:5e:bf:1e:00:3d:c8:76:00:
2c:f5:97:e6:07:52:3a:cf:27:f6:c2:87:c1:af:bb:
ec:8c:9a:ea:bd:22:e9:65:00:22:c9:d4:7e:db:ac:
4b:63:2d:61:2f:44:92:41:8b:e8:9a:d5:a5:49:4a:
20:be:6a:3c:af:01:6f:05:1e:cf:75:ae:c0:b5:0a:
0a:e0:79:0c:ea:22:08:7b:00:62:bd:b3:59:56:e6:
37:0f:fd:dc:a0:14:dd:0a:4b:63:e8:6a:6d:48:62:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:AC:34:AA:E7:1E:3F:87:20:9B:07:6E:52:B0:4F:74:7F:35:CB
X509v3 Authority Key Identifier:
keyid:16:6D:CA:F0:76:C3:EC:10:31:17:DE:AA:67:99:0C:96:8B:CD:64:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm3K8HbD7BAxF96qZ5kMlovNZE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/5gWsNKrnHj-HIJsHblKwT3R_Ncs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3af1e6-7f6d-4ac8-a022-fab9bab2f894/1/Fm3K8HbD7BAxF96qZ5kMlovNZE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.0.0/19
Signature Algorithm: sha256WithRSAEncryption
32:ef:0e:da:cd:84:e3:de:82:0b:4b:f4:90:60:55:42:ca:a5:
09:fb:7d:e6:95:78:1b:78:63:17:29:19:61:db:e2:03:a0:20:
00:55:ae:82:88:5c:3e:fc:2c:fb:96:3b:b9:19:cf:eb:0e:38:
b6:91:6f:07:20:92:4f:c8:5d:b8:27:a9:eb:73:cd:2f:55:97:
07:0f:32:6b:43:30:17:33:42:f2:a1:ec:9d:51:bd:ac:36:ad:
79:15:e1:93:e0:8b:45:d9:9e:8f:58:6c:7c:33:e5:ae:cd:ae:
95:73:59:73:20:19:1a:5b:ed:20:7e:c4:ac:aa:3e:42:ef:d9:
4f:90:b0:3a:df:f7:18:8a:f9:fa:36:8f:46:f9:f9:ac:8b:a1:
31:5e:84:4b:27:b6:e3:36:88:aa:96:08:93:0c:9d:ef:60:21:
30:3a:98:58:b6:75:ce:df:d4:9c:5d:7e:71:ca:11:c5:46:1b:
49:f8:3e:f3:ce:e3:94:aa:cf:ef:ef:7e:ae:04:a3:0e:d6:93:
2f:d4:28:22:1e:75:84:31:7a:00:96:de:f6:a0:cd:01:a7:f8:
58:3e:99:dd:0b:40:71:ab:02:31:75:46:09:26:8f:0e:5a:2c:
6a:c1:42:88:2e:d2:13:4f:62:5e:15:d9:e8:dc:70:b0:db:e9:
00:90:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:47 2025 by rpki-client