Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/pIXSEAOyLZR33dQNQic4gZH-D9g.roa
File: pIXSEAOyLZR33dQNQic4gZH-D9g.roa (raw, json)
Hash identifier: 3GLa9GWq1BIMqmNVuNxPK9ixNfB6LZNmr/lt10/qCFY=
Subject key identifier: A4:85:D2:10:03:B2:2D:94:77:DD:D4:0D:42:27:38:81:91:FE:0F:D8
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 30E1F8EF
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/pIXSEAOyLZR33dQNQic4gZH-D9g.roa
Signing time: Sat 01 Jan 2022 10:55:37 +0000
ROA not before: Sat 01 Jan 2022 10:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41292
IP address blocks: 109.121.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820115695 (0x30e1f8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jan 1 10:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a485d21003b22d9477ddd40d4227388191fe0fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:27:98:d3:07:ac:e5:5a:ec:a7:5c:06:0e:
69:a1:45:fc:ea:d0:bd:4a:68:aa:79:09:52:f5:1c:
84:01:37:d3:b8:d9:6c:7e:7c:d2:fb:c7:8e:ba:72:
5c:91:5a:b2:7e:fa:cc:49:de:af:44:64:ea:9b:ad:
ff:6a:64:45:eb:a9:ae:53:9f:18:4e:1e:05:3e:3c:
f6:00:63:58:19:53:8a:d6:d4:2d:02:54:ea:ad:0a:
a0:ee:f4:4c:31:ba:4a:8a:8d:ac:f5:c3:94:f5:dc:
f9:7f:36:1e:7c:ef:71:c9:da:ac:b6:7f:dc:bb:c6:
ef:e4:4e:af:0c:4b:36:07:8c:33:b2:38:68:23:0a:
d4:64:b9:67:38:a9:ee:17:9f:00:ef:e4:fb:67:b3:
02:46:ed:61:a1:f0:9e:ae:29:22:c1:37:2b:68:40:
a3:a6:39:7a:7e:03:85:14:64:72:99:ba:f7:6c:ad:
26:ad:45:a2:fa:d0:24:3c:df:c1:da:03:2e:bd:7c:
77:2d:11:9d:ad:77:c1:33:53:ed:0d:97:e8:67:72:
07:ab:2d:a2:fd:2d:e8:59:83:3d:d7:5f:0c:fd:d3:
d4:26:43:e9:73:fe:50:87:83:3f:eb:48:b2:27:fa:
bf:60:9e:4e:8f:ac:ba:53:d6:09:ee:24:1f:37:aa:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:D2:10:03:B2:2D:94:77:DD:D4:0D:42:27:38:81:91:FE:0F:D8
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/pIXSEAOyLZR33dQNQic4gZH-D9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.159.0/24
Signature Algorithm: sha256WithRSAEncryption
28:83:41:43:4f:d6:b0:84:25:e5:4d:8f:2b:8c:ba:d3:bf:4b:
d6:a1:f0:2d:a4:65:2a:79:d6:45:9a:37:28:48:ac:be:0d:da:
cd:33:15:21:a4:e3:5a:8e:a0:e3:96:d5:5a:89:7c:75:96:5f:
b9:57:7f:d4:7b:e1:1f:31:73:e9:bc:13:d9:80:0a:c5:5b:9c:
fa:9a:60:c7:e7:b0:19:79:97:53:f7:7f:03:fb:e0:c2:63:da:
8f:5b:bb:85:7b:4b:e8:0f:7d:1c:1a:36:6a:3a:d3:4c:5b:e1:
f6:e9:1a:09:f9:3d:56:08:54:d6:bc:15:07:89:a7:02:51:85:
94:a5:3e:37:84:c4:50:fa:64:e8:30:89:ef:f7:fa:2d:58:e0:
01:af:7f:d1:d0:5e:57:b2:0d:02:8f:c8:e5:4e:de:35:21:1d:
7b:53:63:9b:9e:e5:db:25:aa:a7:e3:3b:2b:47:95:45:74:ae:
bc:18:b9:11:1d:da:c9:17:92:91:6a:16:34:4d:35:b3:af:65:
05:84:6b:9c:24:14:5b:65:91:5d:e7:69:1f:58:e2:9d:c8:e9:
6d:42:20:95:6d:50:fc:ba:95:c7:b8:a9:e9:ef:e6:b3:d1:64:
83:d6:b2:d2:df:76:94:32:81:7a:9e:fb:ca:91:ca:fe:bb:f1:
ff:53:59:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMOH47zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGQyZTliM2E0ZDdiMjRiM2E2YWExNGYzZWRhM2YxNGZhMjljNzZiMB4XDTIyMDEw
MTEwNTUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQ4NWQyMTAwM2Iy
MmQ5NDc3ZGRkNDBkNDIyNzM4ODE5MWZlMGZkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3fJ5jTB6zlWuynXAYOaaFF/OrQvUpoqnkJUvUchAE307jZ
bH580vvHjrpyXJFasn76zEner0Rk6put/2pkReuprlOfGE4eBT489gBjWBlTitbU
LQJU6q0KoO70TDG6SoqNrPXDlPXc+X82HnzvccnarLZ/3LvG7+ROrwxLNgeMM7I4
aCMK1GS5Zzip7hefAO/k+2ezAkbtYaHwnq4pIsE3K2hAo6Y5en4DhRRkcpm692yt
Jq1FovrQJDzfwdoDLr18dy0Rna13wTNT7Q2X6GdyB6stov0t6FmDPddfDP3T1CZD
6XP+UIeDP+tIsif6v2CeTo+sulPWCe4kHzeqJ2ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSkhdIQA7ItlHfd1A1CJziBkf4P2DAfBgNVHSMEGDAWgBRt0umzpNeySzpq
oU8+2j8U+inHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JkTHBzNlRYc2tzNmFxRlBQdG9fRlBvcHgycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvY2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8x
L3BJWFNFQU95TFpSMzNkUU5RaWM0Z1pILUQ5Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Y2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8xL2JkTHBzNlRYc2tz
NmFxRlBQdG9fRlBvcHgycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG15nzANBgkqhkiG9w0BAQsFAAOC
AQEAKINBQ0/WsIQl5U2PK4y6079L1qHwLaRlKnnWRZo3KEisvg3azTMVIaTjWo6g
45bVWol8dZZfuVd/1HvhHzFz6bwT2YAKxVuc+ppgx+ewGXmXU/d/A/vgwmPaj1u7
hXtL6A99HBo2ajrTTFvh9ukaCfk9VghU1rwVB4mnAlGFlKU+N4TEUPpk6DCJ7/f6
LVjgAa9/0dBeV7INAo/I5U7eNSEde1Njm57l2yWqp+M7K0eVRXSuvBi5ER3ayReS
kWoWNE01s69lBYRrnCQUW2WRXedpH1jincjpbUIglW1Q/LqVx7ip6e/ms9Fkg9ay
0t92lDKBep77ypHK/rvx/1NZeg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org