Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/g7THY07wSxtdp6yZ3nTnEC4UsDk.roa
File: g7THY07wSxtdp6yZ3nTnEC4UsDk.roa (raw, json)
Hash identifier: aRGluoIK5LpPprTOwlB7BzshbG8FwjXEgKhZnbHLZIg=
Subject key identifier: 83:B4:C7:63:4E:F0:4B:1B:5D:A7:AC:99:DE:74:E7:10:2E:14:B0:39
Certificate issuer: /CN=c93182d9666e419e667de860d544a50361b3223a
Certificate serial: 02404C
Authority key identifier: C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/g7THY07wSxtdp6yZ3nTnEC4UsDk.roa
Signing time: Thu 10 Feb 2022 10:28:32 +0000
ROA not before: Thu 10 Feb 2022 10:28:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41528
IP address blocks: 109.235.175.0/24 maxlen: 24
109.235.174.0/24 maxlen: 24
2a00:1968::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147532 (0x2404c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93182d9666e419e667de860d544a50361b3223a
Validity
Not Before: Feb 10 10:28:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83b4c7634ef04b1b5da7ac99de74e7102e14b039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:88:ea:35:5d:3d:2e:2d:66:13:5f:3f:db:
0d:68:33:22:53:ad:91:8d:c8:a0:71:ed:3a:68:2a:
63:47:19:f5:03:f3:e4:ad:3c:e1:ac:8f:cd:4b:b9:
ca:13:a4:67:ab:39:e3:a8:b8:1e:d4:c3:df:5a:df:
0b:ff:c8:ff:24:72:66:94:fe:fc:3d:20:78:23:ae:
bc:07:92:1d:1d:5a:e3:46:37:26:22:3b:b7:f8:6d:
57:2c:64:82:15:82:2b:8e:a8:82:25:c8:fd:53:4c:
cf:41:49:e9:7a:6f:08:5a:22:bc:fd:5e:85:82:dc:
58:4b:3c:62:7f:d9:f6:36:50:77:4c:f0:ca:45:1a:
fd:d2:c7:dc:b2:fb:9a:8a:db:32:fd:b9:fd:c2:aa:
1e:fd:74:83:79:e5:4f:87:52:6a:79:f0:21:f4:7d:
f9:6d:73:51:07:c0:26:59:b5:59:b0:c4:b2:c9:03:
0f:30:1d:28:57:b3:3a:e2:9d:d4:fc:fa:77:a1:e4:
0f:0a:41:ca:cd:59:ac:ed:f6:d3:f9:c0:ae:16:26:
19:5f:e0:60:7f:35:18:4e:e2:67:d0:92:c3:be:f8:
47:e2:7c:e3:84:48:3b:ca:32:c2:27:0b:56:13:0c:
2b:11:65:0c:7b:5d:37:95:57:1d:f3:d3:15:3a:79:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B4:C7:63:4E:F0:4B:1B:5D:A7:AC:99:DE:74:E7:10:2E:14:B0:39
X509v3 Authority Key Identifier:
keyid:C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/g7THY07wSxtdp6yZ3nTnEC4UsDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/yTGC2WZuQZ5mfehg1USlA2GzIjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.174.0/23
IPv6:
2a00:1968::/48
Signature Algorithm: sha256WithRSAEncryption
41:cf:d8:c2:8a:cb:d5:82:9a:49:b7:de:08:34:80:79:bb:81:
12:27:f9:fd:d3:9e:73:92:db:44:c5:82:7f:94:ba:9e:f4:21:
0f:4c:d1:75:95:8b:ed:af:52:60:ff:78:82:46:ce:e1:eb:2b:
e1:59:5b:88:9c:b7:6c:65:3d:82:6f:a7:84:2e:ca:84:dd:ed:
c2:cf:d5:63:63:21:8a:64:0c:29:a8:d1:13:b7:59:21:82:89:
46:22:18:1e:21:52:08:c0:61:af:0f:da:6f:10:53:1c:cb:09:
08:40:6d:64:05:e3:09:bc:83:dd:3f:80:d1:eb:29:c4:84:41:
cc:28:19:2e:5f:aa:b9:bc:da:e1:ff:f6:44:a4:09:18:12:a4:
4c:f7:01:44:ba:a5:04:00:42:4c:6a:60:dd:c8:f8:73:05:79:
e1:b6:1d:97:8e:24:b4:a6:42:1b:da:93:d1:07:65:45:36:76:
70:dc:a6:c7:fc:34:b5:78:ae:f8:fe:2c:23:17:e6:fb:b9:6c:
00:15:31:4f:ed:7e:16:55:22:a9:3f:9b:0c:27:19:55:db:4f:
6f:fe:13:08:52:6d:4b:ab:0c:d2:49:5b:94:b0:c7:69:e1:6b:
8d:db:35:45:d6:b3:08:66:36:90:88:d1:f6:ca:79:81:5c:d9:
42:ad:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:18 2025 by rpki-client