Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/Shm_q_nYMI8N6K7VSkkFED3UXy8.roa
File: Shm_q_nYMI8N6K7VSkkFED3UXy8.roa (raw, json)
Hash identifier: BBzQ1RSEwVEOktWmgh6LA9P7HhyUjKoIcAaRdGfh0dQ=
Subject key identifier: 4A:19:BF:AB:F9:D8:30:8F:0D:E8:AE:D5:4A:49:05:10:3D:D4:5F:2F
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 30E365AE
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/Shm_q_nYMI8N6K7VSkkFED3UXy8.roa
Signing time: Sat 01 Jan 2022 10:55:37 +0000
ROA not before: Sat 01 Jan 2022 10:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41313
IP address blocks: 109.121.146.0/24 maxlen: 24
109.121.164.0/23 maxlen: 23
109.121.166.0/24 maxlen: 24
109.121.160.0/22 maxlen: 22
109.121.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820209070 (0x30e365ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jan 1 10:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a19bfabf9d8308f0de8aed54a4905103dd45f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:22:94:bd:ce:b5:1f:89:41:67:f6:a7:08:
ef:29:fa:73:6b:c4:89:ed:da:9a:61:02:f0:3a:66:
94:53:0e:7b:36:e7:8f:93:64:76:dd:0c:31:eb:de:
fc:a6:d2:ae:8d:a9:9a:ae:24:9e:18:fd:25:61:38:
85:57:84:ac:9e:dd:27:5e:f1:d1:34:e0:05:8f:1a:
d2:d9:78:d8:b0:5a:d1:ef:50:03:d9:da:dd:6a:7c:
ff:a7:ea:07:e9:06:6f:85:26:20:78:5e:da:0d:4c:
ed:ef:1c:c5:f4:cf:a7:8c:10:cd:2b:7e:fe:d4:ae:
aa:3c:a7:7d:e7:3d:78:ce:53:19:09:57:17:7a:83:
73:5e:2b:e4:79:94:c3:5e:97:61:a8:a1:b1:23:75:
2c:15:3c:fe:64:d5:e0:b4:74:93:5a:08:c7:b7:c1:
d0:d3:cc:23:f5:ab:b0:a2:b6:ef:56:83:7c:b0:e6:
a8:78:70:f6:4c:13:33:93:fa:fd:87:59:f0:39:7e:
bc:86:44:3a:ca:cd:bd:71:f8:12:38:a2:11:1d:f9:
3f:fb:1f:20:18:dc:cd:7d:f4:36:ef:50:57:9a:15:
19:f7:dd:5d:d8:5e:3b:91:a8:3c:45:95:ed:f9:dd:
11:f9:88:a7:0b:b6:cb:8a:4c:7d:be:68:3e:0b:92:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:BF:AB:F9:D8:30:8F:0D:E8:AE:D5:4A:49:05:10:3D:D4:5F:2F
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/Shm_q_nYMI8N6K7VSkkFED3UXy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.146.0/24
109.121.160.0/21
Signature Algorithm: sha256WithRSAEncryption
88:77:d2:38:1a:07:5a:4c:a6:fc:cd:44:b3:cc:fe:b9:13:fd:
1a:26:3a:3e:79:7d:4b:dc:8c:a8:9c:d5:1e:86:5e:b7:56:6f:
ab:24:0e:9d:96:71:11:14:1b:13:0d:35:d7:37:eb:8c:87:58:
02:48:d7:55:cd:03:c9:ea:d5:3a:bb:51:91:77:2c:d5:30:e8:
7b:f7:9a:73:29:72:07:42:3c:21:eb:dc:6b:7a:28:41:cf:de:
2d:13:85:60:b5:43:91:f2:fe:c9:d8:0b:43:74:2e:60:55:c2:
ff:d2:51:4a:1f:eb:70:a5:ee:1a:ce:66:7f:e8:a3:89:c2:2d:
f0:8e:2c:0a:c1:a8:45:50:2f:bb:f9:bc:79:7f:f0:d9:a8:5c:
90:1e:a3:09:88:f8:ad:8d:ae:07:dc:01:6d:f7:87:5c:e5:1b:
5e:f2:5a:39:0f:0b:a5:5b:c6:b3:72:e3:50:33:de:8a:91:9d:
c1:66:b1:f0:26:14:6c:65:79:a1:9e:61:40:39:65:df:da:76:
f0:89:d3:4e:54:29:e9:ed:46:b3:3b:e3:aa:91:10:9c:4d:26:
59:94:ff:b9:00:d2:98:e6:02:ca:ec:4b:0a:e3:45:64:52:e5:
ad:8c:c7:98:66:26:b9:30:45:95:b8:16:1f:79:30:90:0a:a0:
24:7d:b8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org