Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/CjlmBTXAQbAQjLNcXeuFxCijs9Y.roa
File: CjlmBTXAQbAQjLNcXeuFxCijs9Y.roa (raw, json)
Hash identifier: v9hh7816WT7K5IQsPEWggEsH4GrrOGL5bDHQuHN+EHo=
Subject key identifier: 0A:39:66:05:35:C0:41:B0:10:8C:B3:5C:5D:EB:85:C4:28:A3:B3:D6
Certificate issuer: /CN=3e11d369e713505e609cfcbf31823030afff0a59
Certificate serial: 030BFF34
Authority key identifier: 3E:11:D3:69:E7:13:50:5E:60:9C:FC:BF:31:82:30:30:AF:FF:0A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhHTaecTUF5gnPy_MYIwMK__Clk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/CjlmBTXAQbAQjLNcXeuFxCijs9Y.roa
Signing time: Sat 01 Jan 2022 08:57:47 +0000
ROA not before: Sat 01 Jan 2022 08:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62290
IP address blocks: 212.102.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51117876 (0x30bff34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e11d369e713505e609cfcbf31823030afff0a59
Validity
Not Before: Jan 1 08:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a39660535c041b0108cb35c5deb85c428a3b3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:21:55:5a:f8:62:bd:e3:fa:cd:1b:9e:d5:
96:4d:e7:d8:f9:55:45:9c:5e:4c:9b:06:b5:69:7e:
bb:9b:b0:b8:c2:b1:f6:7b:84:ce:f1:80:20:bf:c2:
01:dc:7a:b7:6d:e1:4c:76:a6:6b:4c:a8:36:a0:00:
91:5a:4e:d4:10:d8:78:6e:a6:6a:f8:18:cf:e2:70:
48:a8:cd:ef:0a:ce:9d:fe:a5:3a:a4:7a:a6:91:e6:
b7:4e:9b:07:97:3d:58:c3:be:ab:d9:da:0b:30:f8:
fc:41:bb:f2:2a:53:20:57:f9:85:b7:60:7b:5b:4a:
d1:61:75:a0:e0:2a:21:73:26:79:e5:be:6b:83:c0:
11:6d:20:a4:d9:ec:58:be:0b:7d:39:d3:65:9d:41:
f3:95:87:a8:97:87:e3:17:10:9b:8f:b2:7e:a5:86:
30:a3:cb:21:37:10:2b:24:d7:2f:59:ac:1f:cf:c0:
96:d3:a9:3e:0d:d8:de:bc:85:c1:2a:36:f7:6c:c3:
b5:d5:f9:b3:58:91:ab:f6:31:21:b0:8a:96:33:2d:
82:a0:5d:0f:34:fd:65:a7:ef:f3:b2:fe:1f:06:a7:
86:93:c9:a3:e2:57:2c:03:94:0a:9c:68:83:53:98:
0d:f3:84:bb:5e:2b:d1:b5:2e:20:7f:22:a1:2a:cc:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:66:05:35:C0:41:B0:10:8C:B3:5C:5D:EB:85:C4:28:A3:B3:D6
X509v3 Authority Key Identifier:
keyid:3E:11:D3:69:E7:13:50:5E:60:9C:FC:BF:31:82:30:30:AF:FF:0A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhHTaecTUF5gnPy_MYIwMK__Clk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/CjlmBTXAQbAQjLNcXeuFxCijs9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/PhHTaecTUF5gnPy_MYIwMK__Clk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a7:d2:b0:a6:af:51:4e:7f:ce:fc:f5:f3:47:b0:df:c3:67:
a2:b9:dc:48:5c:58:9f:c9:bc:f1:c7:fe:7b:c8:9f:44:9b:b7:
f7:1c:de:55:8b:dd:c3:0a:87:93:e1:b6:92:b7:40:44:1d:c0:
f1:85:19:e5:98:3f:e0:8c:9d:d9:23:dd:b0:26:63:dc:a3:b5:
17:01:b7:46:7a:b7:fd:5b:dc:f3:db:42:24:56:12:f1:ef:84:
a7:58:af:69:d2:1d:71:a2:f3:d1:b2:06:c6:da:e9:8e:5e:49:
0e:19:3c:92:5f:4e:2a:2c:d8:3c:05:64:80:66:04:75:b5:75:
91:f9:d5:16:c0:6a:3f:63:18:f8:97:10:9c:81:85:e8:d2:cc:
60:a7:3c:1f:72:18:7c:29:5b:e5:80:0c:62:53:53:59:4e:da:
da:e5:f8:7e:a1:ab:98:a9:92:5a:35:4a:69:98:3e:8a:34:63:
0e:7b:53:2b:99:bb:d9:60:24:33:83:b9:fd:30:fb:67:81:37:
80:f3:4b:1d:8c:bb:3c:23:79:83:cd:92:29:e9:e3:03:94:6e:
80:6d:fc:9c:38:ad:5b:68:1b:d5:13:fa:48:6d:8d:00:ac:f3:
ec:aa:96:f3:e1:c4:10:82:75:ac:68:54:94:1e:b8:2e:fd:87:
1a:cf:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:57 2024 by rpki-client on console-ams.rpki-client.org