Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/FFp3Epg_sLg-nV88yYrkY7Y9IXA.roa
File: FFp3Epg_sLg-nV88yYrkY7Y9IXA.roa (raw, json)
Hash identifier: NvDQ9ZhjRAGq+KLpCQDICHAc2MrqPQSnIu1t4TXO9Ps=
Subject key identifier: 14:5A:77:12:98:3F:B0:B8:3E:9D:5F:3C:C9:8A:E4:63:B6:3D:21:70
Certificate issuer: /CN=6a07e905daa0c3483d8732a053f5c10828e4e54a
Certificate serial: 9ED3E2
Authority key identifier: 6A:07:E9:05:DA:A0:C3:48:3D:87:32:A0:53:F5:C1:08:28:E4:E5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agfpBdqgw0g9hzKgU_XBCCjk5Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/FFp3Epg_sLg-nV88yYrkY7Y9IXA.roa
Signing time: Sat 01 Jan 2022 01:59:40 +0000
ROA not before: Sat 01 Jan 2022 01:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41155
IP address blocks: 109.107.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10408930 (0x9ed3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a07e905daa0c3483d8732a053f5c10828e4e54a
Validity
Not Before: Jan 1 01:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=145a7712983fb0b83e9d5f3cc98ae463b63d2170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:50:0a:d8:96:d0:13:1f:7e:43:a9:26:17:
5b:ff:3b:f3:f1:7c:c0:25:d1:83:24:7a:76:95:73:
fa:87:90:f4:eb:be:c8:b7:15:3e:f1:ba:19:fb:5b:
14:79:8d:df:10:07:d4:71:0a:98:6e:7e:b2:8f:e2:
e3:26:9a:25:d8:ea:b1:6a:04:97:06:93:70:a5:3c:
3c:1d:3a:49:e2:b0:27:77:3a:16:86:5c:62:b8:50:
77:83:36:96:29:81:be:3b:b6:87:f3:1e:b0:8c:e2:
c6:7d:21:d3:a2:84:3b:d0:81:a8:6b:06:37:89:d2:
87:e0:0c:ab:96:b1:42:9d:29:d6:02:54:1a:2e:dd:
0c:22:87:2e:a2:ec:6a:38:b2:d3:5b:1f:04:27:ec:
3c:da:11:73:32:dc:a7:01:8d:bd:ef:9f:ec:4a:d3:
d0:79:95:d4:52:5d:73:cd:5e:2a:ef:6a:50:1c:65:
f3:a0:2e:7a:7c:47:2c:d8:59:1b:29:e1:ac:76:9b:
eb:62:3a:d8:64:7d:ff:7b:5d:95:3c:c8:0e:25:1c:
ac:db:f4:4c:b5:09:44:b2:6c:d1:37:59:ac:e0:ca:
fa:d6:fe:0f:d8:08:52:88:c2:ca:9b:07:e9:05:42:
ed:3e:e1:a3:e9:9b:ef:15:ca:67:e2:21:bf:14:4b:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5A:77:12:98:3F:B0:B8:3E:9D:5F:3C:C9:8A:E4:63:B6:3D:21:70
X509v3 Authority Key Identifier:
keyid:6A:07:E9:05:DA:A0:C3:48:3D:87:32:A0:53:F5:C1:08:28:E4:E5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agfpBdqgw0g9hzKgU_XBCCjk5Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/FFp3Epg_sLg-nV88yYrkY7Y9IXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1ed00e-03fa-43ef-8aed-a496b964c7de/1/agfpBdqgw0g9hzKgU_XBCCjk5Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:71:6a:6d:e5:fe:4c:2c:a4:c2:fb:38:12:00:e3:4c:0d:51:
e2:36:54:2e:b5:59:54:0c:48:2d:ec:f5:66:7c:55:3c:f2:b3:
3e:b0:4a:88:55:fd:df:20:d3:b1:13:4e:ae:01:62:56:4f:97:
05:c9:6e:fa:51:d3:94:28:99:3e:42:d7:5a:5f:9a:99:3a:18:
07:bc:af:ed:77:33:5b:c4:91:b6:22:a4:62:c3:38:5c:fd:49:
a8:6b:69:ab:d4:f7:3c:1e:6b:29:35:6b:97:92:65:74:1b:1a:
f5:89:f3:5e:e4:49:02:9b:e8:73:d8:4d:45:90:29:60:84:6c:
8e:c1:16:3b:d7:cc:8b:89:d2:d8:ef:85:e6:b3:9e:23:b0:dc:
ad:30:e2:30:92:02:5f:70:37:80:ca:73:2d:e2:f5:00:87:91:
10:c3:82:0d:d0:f1:c9:cf:f7:7e:9a:d0:af:95:2d:fa:11:80:
e4:d2:13:72:63:84:e7:13:95:a9:e2:45:c9:f9:07:0d:80:37:
f5:ae:6c:7d:4f:6a:77:2e:8f:b0:a3:57:df:2b:e4:63:9d:c7:
72:18:b9:be:85:b4:53:8c:1c:b1:08:bc:f8:31:b4:64:22:03:
93:f1:0d:fb:62:67:cf:fb:7f:0e:6d:bc:81:b2:38:61:09:fe:
f7:ec:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:47 2024 by rpki-client on console-fra.rpki-client.org