Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/XoXb77K6tJqct4OpfPb0lvUA740.roa
File: XoXb77K6tJqct4OpfPb0lvUA740.roa (raw, json)
Hash identifier: wQmwbLcmC/61VbX/qo9Dj8so0LisB8lPqBd/aWjdz6o=
Subject key identifier: 5E:85:DB:EF:B2:BA:B4:9A:9C:B7:83:A9:7C:F6:F4:96:F5:00:EF:8D
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 30E0F5AA
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/XoXb77K6tJqct4OpfPb0lvUA740.roa
Signing time: Sat 01 Jan 2022 10:55:36 +0000
ROA not before: Sat 01 Jan 2022 10:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39396
IP address blocks: 109.121.136.0/21 maxlen: 21
109.121.144.0/23 maxlen: 23
109.121.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820049322 (0x30e0f5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jan 1 10:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e85dbefb2bab49a9cb783a97cf6f496f500ef8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:49:be:62:19:6e:11:cc:02:92:30:ec:0f:
85:28:2c:49:3e:de:33:20:e7:31:1b:8d:3f:84:1f:
7a:c4:c4:96:0e:a3:c0:d5:17:ae:c6:0d:11:f6:df:
36:fe:c2:44:ba:a5:d4:39:f9:5c:46:36:3c:8a:3c:
f7:ca:2d:5e:bf:95:27:91:f1:e4:39:30:bc:ed:56:
44:c9:5b:f5:62:73:12:bf:6e:34:10:72:79:26:4c:
d3:73:fa:e4:4c:a0:ce:a4:d4:f5:33:7e:cf:bc:15:
ce:0b:76:da:87:4f:64:39:0e:e6:ef:cd:82:97:c8:
8e:da:9f:84:59:b6:ec:a1:ca:0a:2b:41:f6:94:a9:
15:06:6f:97:5a:2e:58:d2:8e:17:be:a0:38:4b:27:
ca:a9:45:74:b9:33:fb:19:5c:c0:0a:c5:c1:f1:4a:
2b:52:3d:f9:5c:9c:a2:be:14:97:13:51:4d:d4:bb:
c3:13:cc:9e:b0:85:39:c3:55:a7:f5:7b:18:f9:bc:
f5:3f:f4:0e:7c:8d:7b:19:8f:f3:42:d3:79:e2:81:
7b:22:56:a8:7a:05:8c:46:a5:ea:f2:b4:c8:27:37:
f5:1f:be:cf:eb:3a:d5:d9:65:e5:70:a9:28:e7:65:
b5:5c:e8:dc:c5:5f:dc:7c:2b:7a:45:d1:25:f7:e9:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:DB:EF:B2:BA:B4:9A:9C:B7:83:A9:7C:F6:F4:96:F5:00:EF:8D
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/XoXb77K6tJqct4OpfPb0lvUA740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.136.0-109.121.145.255
109.121.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e1:a5:9a:89:fc:e5:92:4b:17:25:aa:c5:a1:67:fb:e3:7b:
4f:15:85:76:19:38:92:c2:b3:f1:69:91:4d:51:3a:33:07:6c:
1e:42:52:56:d1:07:86:3e:0d:10:f0:63:53:24:72:88:96:8b:
c7:9a:11:d4:e8:e6:e8:b4:4e:d1:4f:26:32:2c:b3:ee:f5:b4:
25:c2:15:41:3a:db:ad:03:f2:8c:70:26:cf:ff:54:83:ba:26:
cd:9d:29:85:a7:50:41:fc:5f:6c:d0:0b:7c:91:14:ba:b7:88:
ee:d2:f8:fc:20:c3:de:67:cd:af:8d:3c:fb:d4:93:43:80:d1:
8e:11:98:78:4e:d6:d8:f0:1c:d5:5d:6b:8c:50:f2:fe:ae:a3:
b2:f0:9d:ba:c0:f0:07:4d:6b:fb:7c:c7:e8:d8:b5:57:0d:d1:
66:e7:5e:c9:d6:2c:d2:83:3b:a5:8d:c2:21:2f:0e:6f:70:b4:
01:65:a7:4b:71:c1:27:63:bc:48:17:5e:ea:ab:10:b3:57:d8:
57:a3:e8:ab:51:84:b5:31:c9:22:52:fa:c0:d3:74:36:57:87:
9a:86:99:51:cb:58:98:8c:5a:56:d9:45:1c:4f:2c:fe:c7:93:
97:c8:20:bf:f2:87:26:66:86:2d:63:61:bd:41:a1:52:5f:56:
38:95:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org