Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/qBcRrf4G0kDcjcVRJLn7hUvGjGY.roa
File: qBcRrf4G0kDcjcVRJLn7hUvGjGY.roa (raw, json)
Hash identifier: cs2jwzinT1vNTAhEmok3ACiapP6HPBA8urSaC/CS0SY=
Subject key identifier: A8:17:11:AD:FE:06:D2:40:DC:8D:C5:51:24:B9:FB:85:4B:C6:8C:66
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 01824005E110208D624DBBA53FB566E3FBEC
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/qBcRrf4G0kDcjcVRJLn7hUvGjGY.roa
Signing time: Wed 27 Jul 2022 14:18:23 +0000
ROA not before: Wed 27 Jul 2022 14:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61975
IP address blocks: 109.121.178.0/24 maxlen: 24
109.121.177.0/24 maxlen: 24
109.121.179.0/24 maxlen: 24
109.121.182.0/24 maxlen: 24
109.121.181.0/24 maxlen: 24
109.121.183.0/24 maxlen: 24
109.121.185.0/24 maxlen: 24
109.121.186.0/24 maxlen: 24
109.121.180.0/24 maxlen: 24
109.121.188.0/24 maxlen: 24
109.121.190.0/24 maxlen: 24
109.121.189.0/24 maxlen: 24
109.121.191.0/24 maxlen: 24
109.121.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:05:e1:10:20:8d:62:4d:bb:a5:3f:b5:66:e3:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jul 27 14:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a81711adfe06d240dc8dc55124b9fb854bc68c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:ed:f3:85:43:32:7f:89:f4:98:54:83:2d:
7a:6e:7f:2d:d6:b9:c4:a6:2d:e9:4a:06:73:28:6a:
42:d1:f4:bb:3c:5b:c9:ae:79:d9:c5:0f:2f:6c:df:
a9:c8:04:7e:31:55:4b:74:bb:d8:ec:3b:4d:60:85:
18:1c:38:0e:24:13:8d:6a:14:ad:66:11:02:ef:13:
0f:b3:56:b5:19:f4:b8:96:1a:4a:50:69:c8:0a:0d:
53:f2:b0:a2:cf:17:b3:55:26:95:5f:22:0f:7c:8c:
88:7d:48:b9:d8:9f:73:4a:3d:e4:a1:25:4c:5e:dd:
ce:8d:92:c5:9c:b0:e0:5d:bf:2b:0a:9e:4a:7e:c4:
57:c8:62:08:c5:79:60:1c:2f:9e:d3:cf:72:3f:64:
31:88:a7:71:ff:a2:52:a2:a8:42:01:87:e3:e7:d3:
7a:fb:22:14:5b:e2:64:8e:b9:85:f1:dd:ab:56:09:
b5:72:e3:0e:d2:e3:a0:3d:9d:ff:0d:6a:a2:80:c9:
c4:72:cd:95:4f:6c:ee:60:e9:82:a1:6a:84:e5:b1:
f3:36:a5:14:03:b2:97:ee:bc:33:dd:91:f7:e1:a0:
c5:d6:41:c5:94:77:9c:7b:e6:34:3e:04:55:d2:03:
20:20:02:68:9e:bd:8f:d5:4d:20:a1:b2:e7:bb:da:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:11:AD:FE:06:D2:40:DC:8D:C5:51:24:B9:FB:85:4B:C6:8C:66
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/qBcRrf4G0kDcjcVRJLn7hUvGjGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.177.0-109.121.183.255
109.121.185.0-109.121.191.255
Signature Algorithm: sha256WithRSAEncryption
5f:50:f3:e4:9b:c3:fd:fd:31:25:7b:d9:98:03:8e:fd:36:3d:
c8:4b:d3:45:9d:54:e7:5a:91:0e:b4:b8:67:ed:fc:19:72:b2:
ce:81:8a:71:a0:1d:45:1f:09:8d:a5:aa:97:2b:cf:4d:1f:11:
62:72:1e:08:6e:3f:a8:02:7b:bb:01:ce:ba:cc:86:ad:a5:37:
c0:7d:5a:4c:e5:c2:57:b2:3c:d6:9a:10:c6:5f:b1:04:3f:d4:
c3:e3:64:98:ef:ca:61:55:1c:a1:d0:62:f0:81:9b:40:25:d1:
29:f9:8a:50:af:bd:5a:ba:e4:09:08:be:10:af:1b:88:1a:10:
a2:d1:35:ba:ee:e3:f4:50:10:d6:5a:36:18:a2:13:15:b0:35:
e3:34:29:3c:b4:68:fa:bc:de:7e:c5:fb:03:41:ec:31:c3:80:
76:0a:6e:a4:3b:08:7a:7a:cc:88:a0:59:55:3c:4b:a7:98:fc:
da:04:09:9a:0f:83:53:60:0f:84:80:c5:14:d1:01:a3:2f:49:
f5:b4:14:78:39:37:b4:a0:3a:5c:51:a1:78:3d:d7:10:09:02:
f0:94:d2:bb:01:88:cc:df:2e:fe:3d:ea:83:d4:cb:44:3b:7b:
9d:a3:a5:de:72:73:d3:6f:eb:1a:29:ae:d4:3d:7e:41:93:90:
ff:f0:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org