Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/9W3r73fxloeldREn0CProVikKfg.roa
File: 9W3r73fxloeldREn0CProVikKfg.roa (raw, json)
Hash identifier: m6f2VO0q7nznpFfPsjMt1WMbCCMGE9WwQb+Rhz/MKQM=
Subject key identifier: F5:6D:EB:EF:77:F1:96:87:A5:75:11:27:D0:23:EB:A1:58:A4:29:F8
Certificate issuer: /CN=16779914bbc57b5eb908027a9d68b31017db8a0c
Certificate serial: 0189F39446E6E5671095CF8E6AAE02160B91
Authority key identifier: 16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/9W3r73fxloeldREn0CProVikKfg.roa
Signing time: Mon 14 Aug 2023 10:25:28 +0000
ROA not before: Mon 14 Aug 2023 10:25:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207300
IP address blocks: 109.205.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:94:46:e6:e5:67:10:95:cf:8e:6a:ae:02:16:0b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16779914bbc57b5eb908027a9d68b31017db8a0c
Validity
Not Before: Aug 14 10:25:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f56debef77f19687a5751127d023eba158a429f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:43:aa:30:f4:43:4e:aa:63:8e:c6:08:67:
db:98:60:d5:3d:a3:ad:70:77:31:66:bb:48:aa:3d:
03:32:88:b7:88:d1:0f:05:ce:1d:f3:83:7a:de:e8:
0c:96:0e:a7:6f:4a:ef:c9:6e:bf:18:be:eb:0c:24:
10:45:52:79:60:9f:76:65:09:1e:78:3a:0d:e8:57:
35:8e:ce:f3:c2:b7:45:de:6b:5d:a8:5e:1f:f7:fe:
a0:7d:35:6e:ab:61:a8:c2:bd:84:37:41:57:b3:82:
66:2e:93:b9:66:5e:33:fe:13:e8:20:2c:4b:d9:05:
72:f0:3b:f2:50:4e:68:03:f9:25:39:13:9b:22:fc:
ec:f4:55:61:a8:74:9c:ad:db:0b:72:81:53:9a:8a:
8b:68:19:5f:d4:87:5d:9f:c6:55:04:2e:09:6e:d2:
15:8d:53:2b:d3:65:0a:d0:07:3b:fd:9a:f9:92:b6:
d4:b6:40:19:9a:8d:b4:3b:45:27:a1:18:e5:f0:be:
f3:8c:e6:24:b8:37:4a:ba:6d:8a:47:07:df:8f:d5:
2c:d3:b4:ee:c8:65:35:a8:f5:a1:60:ed:99:c9:d3:
10:99:b1:f8:e0:e5:05:c4:cf:c7:fd:10:a7:27:50:
a8:38:b1:b4:4b:c6:71:81:91:da:b6:bf:16:33:91:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:EB:EF:77:F1:96:87:A5:75:11:27:D0:23:EB:A1:58:A4:29:F8
X509v3 Authority Key Identifier:
keyid:16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/9W3r73fxloeldREn0CProVikKfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/FneZFLvFe165CAJ6nWizEBfbigw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.190.0/24
Signature Algorithm: sha256WithRSAEncryption
62:77:bc:79:87:4c:87:57:84:0b:8c:b6:dc:3d:f9:ed:1c:ce:
17:c3:8a:f0:c3:39:ed:50:c9:c8:44:cf:37:bc:54:3c:13:f6:
35:55:99:01:f7:c3:6b:4e:93:f5:21:0a:17:c9:10:ca:3c:20:
1b:75:58:4f:1d:d7:f1:3d:ee:90:cf:bc:33:1d:f1:fb:30:65:
27:63:b1:ef:6e:e5:fc:8d:00:c9:5b:e1:1b:99:7d:27:c8:81:
d8:62:d7:53:45:8c:32:bc:d9:b0:7b:8f:b6:8c:54:68:14:09:
1d:5b:bf:34:86:16:51:06:18:77:bc:d3:4e:58:62:05:7a:7e:
04:e6:16:d9:6b:77:a8:d6:b5:54:fb:97:4b:0f:01:3c:f8:c0:
c2:21:f3:7d:e9:e3:a7:6d:38:71:74:29:3a:72:01:e0:d4:82:
5a:d1:53:a6:e2:23:f4:b9:93:e0:32:f4:70:e6:93:48:93:d7:
18:a5:ad:59:cd:4d:02:20:e4:29:0c:3e:b9:40:1a:d5:04:d6:
b6:b8:5e:85:9e:f0:80:df:73:17:2a:f9:a9:e6:4a:50:a6:dd:
d8:d4:b7:0e:4b:f0:fc:b7:89:b0:43:58:f0:91:54:df:5e:a0:
32:c3:77:43:9a:1b:b6:35:e6:09:2f:68:21:b8:ed:df:d7:e1:
7a:9b:dd:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnzlEbm5WcQlc+Oaq4CFguRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzc5OTE0YmJjNTdiNWViOTA4MDI3YTlkNjhiMzEwMTdk
YjhhMGMwHhcNMjMwODE0MTAyNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTZkZWJlZjc3ZjE5Njg3YTU3NTExMjdkMDIzZWJhMTU4YTQyOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5ZDqjD0Q06qY47GCGfbmGDVPaOt
cHcxZrtIqj0DMoi3iNEPBc4d84N63ugMlg6nb0rvyW6/GL7rDCQQRVJ5YJ92ZQke
eDoN6Fc1js7zwrdF3mtdqF4f9/6gfTVuq2Gowr2EN0FXs4JmLpO5Zl4z/hPoICxL
2QVy8DvyUE5oA/klORObIvzs9FVhqHScrdsLcoFTmoqLaBlf1Iddn8ZVBC4JbtIV
jVMr02UK0Ac7/Zr5krbUtkAZmo20O0UnoRjl8L7zjOYkuDdKum2KRwffj9Us07Tu
yGU1qPWhYO2ZydMQmbH44OUFxM/H/RCnJ1CoOLG0S8ZxgZHatr8WM5EbHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPVt6+938ZaHpXURJ9Aj66FYpCn4MB8GA1UdIwQY
MBaAFBZ3mRS7xXteuQgCep1osxAX24oMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5lWkZMdkZlMTY1Q0FKNm5XaXpFQmZiaWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85YTMzMWYtZGRhYi00ZDI1LWE2ZDct
YTM1YzAyNWZkMTIyLzEvOVczcjczZnhsb2VsZFJFbjBDUHJvVmlrS2ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85YTMzMWYtZGRhYi00ZDI1LWE2ZDctYTM1YzAyNWZkMTIy
LzEvRm5lWkZMdkZlMTY1Q0FKNm5XaXpFQmZiaWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc2+MA0G
CSqGSIb3DQEBCwUAA4IBAQBid7x5h0yHV4QLjLbcPfntHM4Xw4rwwzntUMnIRM83
vFQ8E/Y1VZkB98NrTpP1IQoXyRDKPCAbdVhPHdfxPe6Qz7wzHfH7MGUnY7HvbuX8
jQDJW+EbmX0nyIHYYtdTRYwyvNmwe4+2jFRoFAkdW780hhZRBhh3vNNOWGIFen4E
5hbZa3eo1rVU+5dLDwE8+MDCIfN96eOnbThxdCk6cgHg1IJa0VOm4iP0uZPgMvRw
5pNIk9cYpa1ZzU0CIOQpDD65QBrVBNa2uF6FnvCA33MXKvmp5kpQpt3Y1LcOS/D8
t4mwQ1jwkVTfXqAyw3dDmhu2NeYJL2ghuO3f1+F6m930
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org