Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/DaMOMCfoS6Grchd41yxPX6sDqAE.roa
File: DaMOMCfoS6Grchd41yxPX6sDqAE.roa (raw, json)
Hash identifier: VucvyS4VjtxlyMYi1aHunzpoIR26RECh9E8WfDkpL/c=
Subject key identifier: 0D:A3:0E:30:27:E8:4B:A1:AB:72:17:78:D7:2C:4F:5F:AB:03:A8:01
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 326978D8
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/DaMOMCfoS6Grchd41yxPX6sDqAE.roa
Signing time: Thu 16 Jun 2022 07:32:44 +0000
ROA not before: Thu 16 Jun 2022 07:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41313
IP address blocks: 109.121.164.0/23 maxlen: 23
109.121.166.0/24 maxlen: 24
109.121.162.0/24 maxlen: 24
109.121.160.0/23 maxlen: 23
109.121.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845773016 (0x326978d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jun 16 07:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0da30e3027e84ba1ab721778d72c4f5fab03a801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:ad:61:4e:a2:e6:ce:b0:9d:d1:f5:43:7d:
24:14:82:e8:60:72:65:7f:a2:03:df:39:e6:1b:d1:
ae:d2:fc:0d:80:e7:a4:f9:fd:27:0c:8f:d4:93:72:
7f:33:6b:b4:6b:63:0a:b8:80:87:d7:c3:4a:f0:fb:
45:16:50:b3:47:3c:b5:fb:f8:35:4b:64:25:41:26:
22:d7:65:fb:32:d7:21:96:b8:4b:e7:6f:f3:4d:4a:
6d:93:70:cd:06:9d:a9:82:bf:d0:9b:8f:63:4b:ab:
9f:e0:50:3b:5d:0b:e5:a7:fa:64:9c:14:be:21:04:
19:63:c9:01:0a:88:98:5a:25:10:ef:c4:cc:6f:fd:
e0:6b:07:ff:9b:6e:a1:07:73:ec:49:41:32:c6:bb:
93:98:ad:91:1f:ab:94:6b:c1:91:8d:a9:4b:c5:61:
26:cb:06:05:46:af:2a:0e:85:1e:1d:ac:27:80:46:
6d:d5:a0:4b:1e:24:79:dc:c6:ad:97:2d:0f:ec:51:
44:3d:31:76:aa:15:66:2e:e2:5e:4d:8c:76:e9:52:
d6:c4:4e:22:1b:08:52:d6:16:77:69:a4:b3:c2:e5:
5b:0e:7f:b6:b1:fb:61:cb:48:1f:db:9a:b0:b4:9e:
29:78:7e:04:31:7b:f5:17:49:c6:4b:59:e1:d3:9a:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A3:0E:30:27:E8:4B:A1:AB:72:17:78:D7:2C:4F:5F:AB:03:A8:01
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/DaMOMCfoS6Grchd41yxPX6sDqAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.160.0-109.121.166.255
Signature Algorithm: sha256WithRSAEncryption
ac:12:73:55:62:61:9e:23:39:08:6c:15:a6:ca:5c:3f:69:37:
35:8e:ba:81:48:bb:2f:a2:c5:ca:67:82:5e:11:ed:52:3a:0f:
0e:eb:b3:f4:16:96:22:0d:9c:24:be:c2:db:26:c6:bf:dc:d3:
67:65:5e:be:96:53:6e:40:10:b2:97:20:5f:37:95:17:c1:69:
6b:af:7f:eb:d1:5d:12:01:36:7f:6f:1e:c3:7f:d4:5d:69:39:
40:13:0a:47:c4:a2:1b:00:a2:b1:0f:59:45:e9:1a:a9:df:ca:
21:43:16:d0:88:79:89:52:a1:cb:81:e9:5f:23:11:b4:d4:c9:
34:0b:0c:67:94:fc:50:79:e1:bf:26:18:46:27:e3:e9:dc:9e:
a5:4e:c8:5e:89:e0:4d:01:39:78:f7:6d:bd:4b:b2:f9:b0:b5:
22:2b:37:d5:d0:35:8c:eb:d8:df:5d:29:38:6e:2a:1e:56:06:
55:c2:06:13:26:a2:56:15:75:d5:70:3f:0c:dd:72:27:a8:c7:
fd:0f:13:ae:07:33:89:8f:2d:7c:1a:93:2e:c7:0d:c0:5f:b4:
38:67:31:29:9c:74:b6:3f:55:2c:df:f8:4b:4f:ff:eb:3b:4b:
29:98:30:45:ab:bc:56:77:61:a3:11:b3:a3:57:21:7b:66:a5:
2d:c0:53:f5
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEMml42DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGQyZTliM2E0ZDdiMjRiM2E2YWExNGYzZWRhM2YxNGZhMjljNzZiMB4XDTIyMDYx
NjA3MzI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGRhMzBlMzAyN2U4
NGJhMWFiNzIxNzc4ZDcyYzRmNWZhYjAzYTgwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJu8rWFOoubOsJ3R9UN9JBSC6GByZX+iA9855hvRrtL8DYDn
pPn9JwyP1JNyfzNrtGtjCriAh9fDSvD7RRZQs0c8tfv4NUtkJUEmItdl+zLXIZa4
S+dv801KbZNwzQadqYK/0JuPY0urn+BQO10L5af6ZJwUviEEGWPJAQqImFolEO/E
zG/94GsH/5tuoQdz7ElBMsa7k5itkR+rlGvBkY2pS8VhJssGBUavKg6FHh2sJ4BG
bdWgSx4kedzGrZctD+xRRD0xdqoVZi7iXk2MdulS1sROIhsIUtYWd2mks8LlWw5/
trH7YctIH9uasLSeKXh+BDF79RdJxktZ4dOaVqUCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQNow4wJ+hLoatyF3jXLE9fqwOoATAfBgNVHSMEGDAWgBRt0umzpNeySzpq
oU8+2j8U+inHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JkTHBzNlRYc2tzNmFxRlBQdG9fRlBvcHgycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvY2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8x
L0RhTU9NQ2ZvUzZHcmNoZDQxeXhQWDZzRHFBRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Y2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8xL2JkTHBzNlRYc2tz
NmFxRlBQdG9fRlBvcHgycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQFbXmgAwQAbXmmMA0GCSqGSIb3
DQEBCwUAA4IBAQCsEnNVYmGeIzkIbBWmylw/aTc1jrqBSLsvosXKZ4JeEe1SOg8O
67P0FpYiDZwkvsLbJsa/3NNnZV6+llNuQBCylyBfN5UXwWlrr3/r0V0SATZ/bx7D
f9RdaTlAEwpHxKIbAKKxD1lF6Rqp38ohQxbQiHmJUqHLgelfIxG01Mk0CwxnlPxQ
eeG/JhhGJ+Pp3J6lTsheieBNATl49229S7L5sLUiKzfV0DWM69jfXSk4bioeVgZV
wgYTJqJWFXXVcD8M3XInqMf9DxOuBzOJjy18GpMuxw3AX7Q4ZzEpnHS2P1Us3/hL
T//rO0spmDBFq7xWd2GjEbOjVyF7ZqUtwFP1
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org