Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/3u0zIqlkiMAGYZqrgXk4riif0WM.roa
File: 3u0zIqlkiMAGYZqrgXk4riif0WM.roa (raw, json)
Hash identifier: I4NwROdNGP0W8YnR5fNNdzUWIErgv9PAOqaIZB5RLFQ=
Subject key identifier: DE:ED:33:22:A9:64:88:C0:06:61:9A:AB:81:79:38:AE:28:9F:D1:63
Certificate issuer: /CN=c93182d9666e419e667de860d544a50361b3223a
Certificate serial: 01856FCBBB70B37709D5B831A164297C8B4F
Authority key identifier: C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/3u0zIqlkiMAGYZqrgXk4riif0WM.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41528
IP address blocks: 109.235.175.0/24 maxlen: 24
109.235.174.0/24 maxlen: 24
109.235.174.0/23 maxlen: 23
2a00:1968::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:bb:70:b3:77:09:d5:b8:31:a1:64:29:7c:8b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93182d9666e419e667de860d544a50361b3223a
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deed3322a96488c006619aab817938ae289fd163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:ce:77:66:53:4f:cb:68:58:c1:2c:c9:7e:
05:a5:ba:06:c6:69:15:d1:cb:ef:e0:c9:87:c2:ff:
df:ba:6e:f6:a2:39:36:ef:67:c6:83:42:f5:04:75:
a2:5f:92:ea:a1:93:ce:8d:87:b2:a2:20:dc:7e:31:
34:af:68:d8:2f:75:00:98:21:fe:a4:3f:3a:b5:d1:
e5:77:46:f0:fd:a1:32:d5:40:8e:ec:80:5a:b3:23:
04:28:47:60:0c:e2:fc:95:fd:36:d8:b7:8d:04:09:
1c:fe:64:70:f5:78:ac:71:be:81:d1:e4:85:0a:b3:
3b:dd:33:01:d0:fa:98:a3:41:3a:e3:ce:ef:a9:d7:
04:82:0c:81:a7:9a:4d:2e:f9:92:91:68:fb:6d:f2:
21:4b:9f:30:a9:d9:57:7c:e9:d5:1a:2b:8b:a0:d0:
b9:63:28:3b:46:57:93:ba:0a:d7:1c:db:bb:21:4a:
2e:fe:83:e9:50:6d:6c:b1:89:b0:a7:ec:b6:6e:e8:
7d:f5:a4:e4:a8:fb:ce:ca:90:60:db:f0:8c:71:2c:
5f:5c:4a:cc:c2:b7:90:4c:36:b7:07:3d:55:f1:73:
92:6b:58:64:18:36:83:8c:fb:db:b1:06:83:78:e4:
22:fc:da:73:d5:65:18:bb:6c:62:59:9e:6b:e3:2f:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:ED:33:22:A9:64:88:C0:06:61:9A:AB:81:79:38:AE:28:9F:D1:63
X509v3 Authority Key Identifier:
keyid:C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/3u0zIqlkiMAGYZqrgXk4riif0WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/yTGC2WZuQZ5mfehg1USlA2GzIjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.174.0/23
IPv6:
2a00:1968::/48
Signature Algorithm: sha256WithRSAEncryption
54:2a:38:0b:c5:ad:fe:f0:d5:95:05:8f:65:f5:de:65:bf:c1:
38:fa:c5:ef:5d:58:99:7a:0f:a7:00:a2:8a:1d:4c:92:cb:c2:
2b:10:88:2e:af:a5:d2:a2:83:18:a5:1a:ca:8c:99:cc:02:e3:
a7:8e:45:6b:0f:99:4d:a6:c5:fb:30:cb:43:2e:bd:fa:d6:6d:
dd:82:5f:f4:42:c2:18:fe:d1:0a:1f:5d:a8:d0:2c:2c:04:50:
4f:6b:d0:16:81:77:b5:7d:c3:6a:20:a4:0f:9f:f5:0a:50:fb:
8d:79:7a:0d:cc:95:b1:96:b8:27:e3:04:6e:8a:b8:a1:17:4c:
74:23:4e:c2:91:83:e0:ff:31:bb:dd:35:55:6a:a6:a8:c6:d1:
09:44:7b:cb:36:2f:78:b0:74:5e:d5:d3:f9:02:2a:70:69:8b:
ad:e6:43:01:85:74:08:d6:46:16:d9:1f:70:46:b6:be:8a:81:
27:67:64:ae:75:2e:ce:d8:19:8b:5a:7b:2e:1e:0d:c0:f7:ed:
45:93:ec:9b:ce:85:47:99:4a:ce:16:eb:15:89:d5:42:af:cb:
90:47:88:0f:38:63:d9:93:a5:88:38:ff:e7:89:31:50:5f:81:
5d:47:ea:33:da:31:fd:3b:a2:72:df:27:0b:29:dd:e9:3d:fb:
a7:49:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org