Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/9knC9RtB0-_v6bVUvoBxBmAsSnw.roa
File: 9knC9RtB0-_v6bVUvoBxBmAsSnw.roa (raw, json)
Hash identifier: jsP98i2YT3rrYLM2+Kj2IKjA/Ihs1I7GzT+3MzzahpU=
Subject key identifier: F6:49:C2:F5:1B:41:D3:EF:EF:E9:B5:54:BE:80:71:06:60:2C:4A:7C
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 30E5F77B
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/9knC9RtB0-_v6bVUvoBxBmAsSnw.roa
Signing time: Sat 01 Jan 2022 10:55:37 +0000
ROA not before: Sat 01 Jan 2022 10:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61975
IP address blocks: 109.121.176.0/24 maxlen: 24
109.121.176.0/20 maxlen: 20
109.121.178.0/24 maxlen: 24
109.121.177.0/24 maxlen: 24
109.121.182.0/24 maxlen: 24
109.121.181.0/24 maxlen: 24
109.121.183.0/24 maxlen: 24
109.121.185.0/24 maxlen: 24
109.121.184.0/24 maxlen: 24
109.121.186.0/24 maxlen: 24
109.121.180.0/24 maxlen: 24
109.121.188.0/24 maxlen: 24
109.121.191.0/24 maxlen: 24
109.121.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820377467 (0x30e5f77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jan 1 10:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f649c2f51b41d3efefe9b554be807106602c4a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:6f:16:cf:1b:3e:5d:06:44:5e:15:3c:28:
fa:f0:98:39:bc:eb:c9:e2:ce:11:63:a1:73:93:39:
1c:a3:14:99:b4:0a:64:e0:20:84:3a:0f:d7:9c:d2:
12:15:8b:b0:ae:3a:0c:93:8f:a1:f9:3a:dc:3d:b4:
90:dd:cd:78:6a:1f:ea:cb:e8:86:13:e1:2b:ac:72:
be:a1:31:83:ad:74:10:76:d2:88:d3:a8:2c:e1:91:
d4:18:6c:40:64:1a:17:ff:c2:21:6a:04:56:c6:d8:
a4:a3:20:ce:ba:2d:40:fb:3f:61:73:b0:79:b7:14:
f4:d5:c8:8c:46:cf:12:e4:10:73:79:ef:5c:b9:b5:
c6:89:d3:e4:71:ba:d9:26:d1:98:ec:a7:82:27:e2:
49:5b:e0:50:63:b7:93:c3:c3:07:58:c7:b2:64:9b:
bf:84:6d:7a:f2:f9:af:71:f7:4a:ff:56:0d:4d:14:
69:83:f0:84:91:8a:b0:16:b7:cc:e5:af:ef:ae:e1:
96:45:8c:bf:e9:cd:12:e1:a6:34:b2:d0:ac:02:77:
c0:42:80:61:40:07:a8:7d:3c:f4:3e:0b:24:a7:32:
1f:79:60:f8:8c:5d:60:eb:88:a6:92:63:42:5b:a9:
87:d5:04:6c:97:ae:c7:fb:2f:57:f2:2e:5e:fc:eb:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:C2:F5:1B:41:D3:EF:EF:E9:B5:54:BE:80:71:06:60:2C:4A:7C
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/9knC9RtB0-_v6bVUvoBxBmAsSnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:60:5a:bd:13:76:24:d5:13:03:14:cb:bf:45:64:43:9e:37:
4d:4f:d7:91:08:0f:5e:0c:5e:68:6c:80:79:c4:05:1e:97:7f:
40:fd:19:69:ef:b0:72:20:a8:3a:05:8e:ae:2a:0c:5d:f6:b8:
c7:06:1e:08:d5:06:04:7d:f8:7b:45:4b:34:e5:8f:15:9d:ea:
81:fe:99:a6:ea:9b:93:1c:12:78:48:56:f0:3b:81:1c:19:94:
57:ec:fb:9a:8e:a3:bb:33:ea:3f:89:2e:69:23:0a:57:ad:24:
c2:84:ba:ed:86:62:cf:70:1a:b1:30:1b:73:98:2b:cb:27:0a:
65:f2:b7:b0:79:2c:b5:32:de:dd:61:35:1a:29:4f:ba:7e:e8:
30:75:6c:d4:13:03:d5:ec:64:a9:fd:49:3b:9d:be:b0:86:05:
96:9d:0f:51:e9:b4:d3:bd:58:6e:71:5b:18:ca:06:3a:da:c8:
03:a8:6b:7d:72:d5:cb:d1:4f:c9:5a:9b:e5:d3:9b:7c:2e:02:
0d:3f:b7:de:2e:b4:16:84:63:6c:62:05:a6:12:20:52:61:e4:
b7:56:54:c8:8e:96:a0:0d:14:bc:8f:a1:f9:58:2a:29:80:43:
20:49:74:71:ad:9a:10:a1:5a:78:5b:6e:9d:0c:bf:db:ad:78:
83:ee:d9:00
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMOX3ezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGQyZTliM2E0ZDdiMjRiM2E2YWExNGYzZWRhM2YxNGZhMjljNzZiMB4XDTIyMDEw
MTEwNTUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjY0OWMyZjUxYjQx
ZDNlZmVmZTliNTU0YmU4MDcxMDY2MDJjNGE3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOlbxbPGz5dBkReFTwo+vCYObzryeLOEWOhc5M5HKMUmbQK
ZOAghDoP15zSEhWLsK46DJOPofk63D20kN3NeGof6svohhPhK6xyvqExg610EHbS
iNOoLOGR1BhsQGQaF//CIWoEVsbYpKMgzrotQPs/YXOwebcU9NXIjEbPEuQQc3nv
XLm1xonT5HG62SbRmOyngifiSVvgUGO3k8PDB1jHsmSbv4RtevL5r3H3Sv9WDU0U
aYPwhJGKsBa3zOWv767hlkWMv+nNEuGmNLLQrAJ3wEKAYUAHqH089D4LJKcyH3lg
+IxdYOuIppJjQluph9UEbJeux/svV/IuXvzrdAUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT2ScL1G0HT7+/ptVS+gHEGYCxKfDAfBgNVHSMEGDAWgBRt0umzpNeySzpq
oU8+2j8U+inHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JkTHBzNlRYc2tzNmFxRlBQdG9fRlBvcHgycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvY2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8x
LzlrbkM5UnRCMC1fdjZiVlV2b0J4Qm1Bc1Nudy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Y2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8xL2JkTHBzNlRYc2tz
NmFxRlBQdG9fRlBvcHgycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG15sDANBgkqhkiG9w0BAQsFAAOC
AQEAqGBavRN2JNUTAxTLv0VkQ543TU/XkQgPXgxeaGyAecQFHpd/QP0Zae+wciCo
OgWOrioMXfa4xwYeCNUGBH34e0VLNOWPFZ3qgf6ZpuqbkxwSeEhW8DuBHBmUV+z7
mo6juzPqP4kuaSMKV60kwoS67YZiz3AasTAbc5gryycKZfK3sHkstTLe3WE1GilP
un7oMHVs1BMD1exkqf1JO52+sIYFlp0PUem0071YbnFbGMoGOtrIA6hrfXLVy9FP
yVqb5dObfC4CDT+33i60FoRjbGIFphIgUmHkt1ZUyI6WoA0UvI+h+VgqKYBDIEl0
ca2aEKFaeFtunQy/2614g+7ZAA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org