Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/7aVItk9N7hDTca5yojApcKCYEG0.roa
File: 7aVItk9N7hDTca5yojApcKCYEG0.roa (raw, json)
Hash identifier: 1RpnngbNG34w+QhuEOPbkOoSAWx3/Fnj/GPDeNrWt8E=
Subject key identifier: ED:A5:48:B6:4F:4D:EE:10:D3:71:AE:72:A2:30:29:70:A0:98:10:6D
Certificate issuer: /CN=6a07e905daa0c3483d8732a053f5c10828e4e54a
Certificate serial: 01856BA58D5CF22EAFBBEA45968CC79DDB5D
Authority key identifier: 6A:07:E9:05:DA:A0:C3:48:3D:87:32:A0:53:F5:C1:08:28:E4:E5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agfpBdqgw0g9hzKgU_XBCCjk5Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/7aVItk9N7hDTca5yojApcKCYEG0.roa
Signing time: Sun 01 Jan 2023 04:44:49 +0000
ROA not before: Sun 01 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 109.107.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:8d:5c:f2:2e:af:bb:ea:45:96:8c:c7:9d:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a07e905daa0c3483d8732a053f5c10828e4e54a
Validity
Not Before: Jan 1 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda548b64f4dee10d371ae72a2302970a098106d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:c3:fc:e9:35:8f:e1:9a:bb:bf:49:9c:6a:
1d:c4:b4:9d:4d:a9:d6:0c:78:77:2b:8b:b1:44:00:
e4:57:ff:86:33:4e:ad:d8:dd:0f:ee:d7:77:b4:92:
47:9e:b5:5a:af:c3:a4:a2:5b:af:25:7b:5a:fa:4b:
27:ca:8c:db:46:7c:73:26:83:f8:d3:ed:60:d1:30:
b7:9d:2e:9b:a2:93:21:72:50:7e:bc:83:be:f1:6d:
ae:76:97:51:61:f9:f5:39:6d:ce:55:7b:6b:ee:7a:
83:c3:64:2f:f3:14:57:9e:0f:8f:be:fc:a7:ed:72:
3a:25:16:da:3e:12:bf:c1:77:e6:fe:64:18:38:ba:
9c:fb:7b:a8:a2:a4:ab:56:94:92:bb:56:8d:9a:97:
52:0c:06:a7:c0:0c:f0:ea:9a:8c:5c:ac:3b:fb:e4:
f4:73:83:73:a2:50:2b:b0:5e:6b:28:8f:c5:06:72:
9a:6f:94:81:87:50:95:98:bd:f3:c8:19:c3:4f:ee:
84:37:25:f4:6d:07:a8:ed:ba:10:6b:5b:2f:23:20:
e9:6b:9c:15:13:71:a7:82:82:03:48:c0:9d:19:2c:
f8:ab:3b:66:ff:20:82:a5:7e:26:4f:40:78:db:32:
24:a5:ff:a9:df:59:b4:61:0d:71:a6:8a:7e:36:2a:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:48:B6:4F:4D:EE:10:D3:71:AE:72:A2:30:29:70:A0:98:10:6D
X509v3 Authority Key Identifier:
keyid:6A:07:E9:05:DA:A0:C3:48:3D:87:32:A0:53:F5:C1:08:28:E4:E5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agfpBdqgw0g9hzKgU_XBCCjk5Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/7aVItk9N7hDTca5yojApcKCYEG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/agfpBdqgw0g9hzKgU_XBCCjk5Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:02:4d:0a:05:ee:73:d3:27:02:cd:eb:4f:fa:da:a8:22:c0:
d5:1a:97:53:9a:08:a3:87:ca:9e:e7:39:93:61:dc:45:d6:64:
a0:f5:d7:87:f9:37:4d:8e:76:1d:1b:34:16:e8:8b:b3:07:7d:
30:0b:be:f4:c9:fa:40:4a:c5:6a:bb:db:f4:b9:75:97:b2:96:
4f:a5:c5:01:19:cc:8a:5c:20:6b:ae:37:ce:88:ea:21:5f:c2:
d9:a1:cf:50:71:23:0f:df:6c:9d:8f:c0:68:9f:c3:2f:76:96:
99:a8:6e:7b:82:35:94:70:b6:60:e9:28:4f:86:eb:75:d8:42:
fb:05:cd:c8:0a:75:eb:28:aa:6c:9d:a6:7c:21:73:70:23:e7:
6d:5f:0e:d7:50:ff:fe:b6:26:35:a5:b4:39:64:d5:3c:1d:3a:
ab:0f:4b:95:4a:b6:57:1d:4a:28:5f:c9:5d:cc:fc:94:25:69:
ec:7c:3d:d3:aa:6a:e8:b3:b5:9a:7a:bb:89:7a:be:0d:d5:ca:
ee:6c:67:a2:b1:d2:93:26:5b:d3:ea:61:5d:ff:d9:b3:fa:6b:
60:10:e9:6a:a3:7b:f2:4d:7b:cb:4c:bb:81:82:d1:be:bf:9d:
22:c0:c5:cd:14:95:11:66:23:35:69:7a:fe:b3:5f:d0:88:81:
75:cd:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:47 2024 by rpki-client on console-fra.rpki-client.org