Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/htiRAq0N7bWN453mXJqR1q3ZZbg.roa
File: htiRAq0N7bWN453mXJqR1q3ZZbg.roa (raw, json)
Hash identifier: mO9aXP1wWUWAbQ8CwluYdO0XOzPKChxntsrSCcsdpSI=
Subject key identifier: 86:D8:91:02:AD:0D:ED:B5:8D:E3:9D:E6:5C:9A:91:D6:AD:D9:65:B8
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 3142D3AB
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/htiRAq0N7bWN453mXJqR1q3ZZbg.roa
Signing time: Tue 08 Feb 2022 09:57:52 +0000
ROA not before: Tue 08 Feb 2022 09:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61975
IP address blocks: 109.121.176.0/24 maxlen: 24
109.121.176.0/20 maxlen: 20
109.121.178.0/24 maxlen: 24
109.121.177.0/24 maxlen: 24
109.121.179.0/24 maxlen: 24
109.121.182.0/24 maxlen: 24
109.121.181.0/24 maxlen: 24
109.121.183.0/24 maxlen: 24
109.121.185.0/24 maxlen: 24
109.121.184.0/24 maxlen: 24
109.121.186.0/24 maxlen: 24
109.121.180.0/24 maxlen: 24
109.121.188.0/24 maxlen: 24
109.121.190.0/24 maxlen: 24
109.121.189.0/24 maxlen: 24
109.121.191.0/24 maxlen: 24
109.121.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826463147 (0x3142d3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Feb 8 09:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86d89102ad0dedb58de39de65c9a91d6add965b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:77:86:c5:f6:dc:c2:23:30:db:22:24:16:
a7:0d:df:3c:06:70:13:9b:29:86:d4:34:a2:1c:fe:
9d:77:ab:bb:6f:e5:11:ad:4c:6c:05:80:da:3d:0d:
73:19:81:c9:be:e8:f9:15:09:3b:ef:08:90:9a:e7:
55:f4:2e:6d:ec:51:bb:91:4f:11:c6:e2:cd:72:60:
86:ed:ad:28:b1:5e:06:82:d9:be:cc:3c:ed:4d:c1:
a9:d1:f2:c5:57:09:c4:a0:ed:1e:9b:c8:86:be:e8:
90:e4:b6:89:37:fe:ba:03:e4:8f:1a:0d:70:9c:a2:
69:c8:ea:25:5d:94:91:d2:c7:0f:dc:be:b7:0c:62:
7c:f2:1d:27:41:a2:b5:40:f1:46:b7:23:cf:42:8f:
47:03:df:c7:57:74:f8:2d:1f:39:0c:2d:d6:5f:b0:
7a:8b:dd:9b:ab:5f:8a:19:b1:8a:f6:24:80:41:bc:
61:42:73:6e:18:53:58:33:0e:a0:5c:21:a9:7b:ed:
cc:8c:e8:c9:da:ba:69:5a:80:f9:84:f2:e9:4b:a7:
a6:d5:f9:3a:bf:28:50:5a:b8:49:4a:92:37:67:65:
22:b8:b7:98:9a:9f:1e:52:7e:b5:ef:58:9e:64:86:
a6:47:41:b8:ec:6f:ad:66:f6:29:df:c1:e0:7a:88:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:91:02:AD:0D:ED:B5:8D:E3:9D:E6:5C:9A:91:D6:AD:D9:65:B8
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/htiRAq0N7bWN453mXJqR1q3ZZbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.176.0/20
Signature Algorithm: sha256WithRSAEncryption
54:86:51:15:11:40:08:1c:17:06:68:81:b3:6b:34:fc:da:a7:
35:34:e2:ee:06:1a:bc:c6:5d:a6:af:2f:6b:9e:8c:6a:54:27:
a2:fd:87:d0:27:06:1d:c2:6d:60:e9:4a:3a:8b:09:c6:83:76:
bc:ef:50:86:ab:e9:ac:ce:6d:aa:0e:c0:f2:15:df:9c:ac:79:
ba:f7:53:d7:66:0f:be:18:d3:2a:f7:20:d7:e4:9f:a5:18:b9:
cc:6d:d3:dc:2d:52:54:91:bf:c0:9d:94:15:3f:ca:0b:47:c9:
c9:29:67:fa:1b:4b:e7:f3:99:fd:2a:d8:2a:c3:9d:43:cd:0a:
54:94:c2:6f:ca:e9:41:dc:49:45:10:38:b7:51:4c:fb:12:ec:
c8:fa:53:74:8e:4b:85:6f:5a:18:9d:90:8c:71:76:5f:ff:a3:
1f:3e:a8:e8:06:27:93:94:7c:1e:a9:96:1a:91:93:a9:c2:22:
77:6c:43:b7:57:c5:7d:99:31:9c:aa:20:40:a1:78:48:ab:7e:
a1:10:61:a4:d9:7b:03:ba:d9:b7:12:d9:da:3f:11:43:f9:2b:
e3:5b:be:50:58:27:4c:12:a0:2c:90:1c:b2:17:a0:13:2b:7e:
a4:8b:2b:87:8a:19:30:b6:64:8a:6c:77:09:d4:07:72:54:b3:
15:9a:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org