Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/T5jqCgp4NQCBdwTNHUkzzJsjWh0.roa
File: T5jqCgp4NQCBdwTNHUkzzJsjWh0.roa (raw, json)
Hash identifier: LtTf+zo4LM54I44ILDWIbKd9wgjjHKWEENy7ZRVw2XQ=
Subject key identifier: 4F:98:EA:0A:0A:78:35:00:81:77:04:CD:1D:49:33:CC:9B:23:5A:1D
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 325F67D3
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/T5jqCgp4NQCBdwTNHUkzzJsjWh0.roa
Signing time: Wed 15 Jun 2022 10:37:45 +0000
ROA not before: Wed 15 Jun 2022 10:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41313
IP address blocks: 109.121.164.0/23 maxlen: 23
109.121.166.0/24 maxlen: 24
109.121.162.0/24 maxlen: 24
109.121.160.0/23 maxlen: 23
109.121.160.0/22 maxlen: 22
109.121.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845113299 (0x325f67d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jun 15 10:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f98ea0a0a783500817704cd1d4933cc9b235a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:2f:29:8d:6d:c8:bd:be:ed:09:0d:d5:31:
d6:e8:55:c9:23:66:b7:f5:77:30:37:97:b5:c0:85:
07:91:2a:b9:e4:45:b9:03:17:a3:97:d0:34:1f:46:
11:fa:5c:ab:b1:74:25:ee:ed:1b:71:25:e7:82:77:
3b:6b:d9:7b:12:99:1c:fa:64:ef:9a:1b:65:54:5e:
2e:90:d2:0a:53:bb:d8:f2:c1:77:a2:e3:1a:93:9d:
a9:5c:85:0e:cf:c3:7d:8d:90:21:24:50:6d:7b:58:
42:91:da:29:d6:d5:81:78:d7:46:bd:30:e0:97:9f:
cb:0c:82:4c:42:c4:80:03:be:59:05:ca:49:ea:00:
c4:40:28:f4:6d:51:74:99:79:d9:7f:7d:10:46:e5:
8d:7d:89:c6:29:7e:77:d6:6d:f9:65:51:7b:af:24:
67:50:e3:d1:28:e6:68:9d:98:fc:10:88:fb:73:f1:
8d:88:50:c8:b0:7f:05:63:2f:cd:64:f3:aa:4e:50:
7d:35:1e:55:0e:fb:8f:0c:17:ec:b4:30:5c:d6:11:
43:82:d4:7c:18:d5:82:c4:db:9b:ad:1e:35:5b:62:
9f:fc:04:90:a9:34:d0:62:23:ba:9a:32:f3:53:b2:
75:5d:6f:cd:e2:b7:ba:fd:b1:da:4e:6c:41:d8:bf:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:EA:0A:0A:78:35:00:81:77:04:CD:1D:49:33:CC:9B:23:5A:1D
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/T5jqCgp4NQCBdwTNHUkzzJsjWh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.160.0/21
Signature Algorithm: sha256WithRSAEncryption
25:bf:a7:45:d6:a0:29:22:b5:75:d9:61:07:a1:10:7a:15:4e:
bc:75:a7:75:23:55:f7:7b:73:d1:5b:5c:d4:c7:6d:e6:be:e9:
e1:3a:e5:51:9d:e0:4f:37:26:37:11:e5:b1:b4:30:26:b3:b9:
f9:22:46:eb:2c:a3:12:86:b5:e5:bd:9f:f2:80:8a:6c:c5:e9:
dc:d4:a7:3e:50:65:d4:4c:05:b6:65:2f:18:a9:80:86:6a:42:
6e:e7:ab:b5:a9:c0:83:d5:d4:6a:58:61:d6:a1:34:2a:a6:55:
2c:c3:21:b3:09:5f:75:04:7f:4c:d7:80:94:df:b4:19:82:ea:
24:54:9e:08:cf:32:7f:45:bc:01:17:f9:84:87:e5:4f:f0:1f:
fb:81:b3:a0:a4:16:72:e3:93:84:0b:4e:91:39:b6:9d:9e:3d:
ef:d4:2d:61:64:5d:02:0b:44:c6:b1:fb:24:7c:07:58:fc:0f:
72:fc:49:04:4e:e3:1d:d2:c7:9b:51:41:52:89:b4:39:5f:d8:
d3:9c:71:05:26:53:ec:6f:bc:14:49:92:c3:9b:57:d5:e0:ae:
62:40:94:8a:3a:2b:a4:07:98:33:96:ca:5b:43:65:5a:31:da:
41:45:dd:43:9d:a1:65:25:31:d4:39:80:f1:6d:86:c2:2a:3d:
71:74:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org