Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/SVWRTZ5B5VtmUTPDZmSOUS4tyto.roa
File: SVWRTZ5B5VtmUTPDZmSOUS4tyto.roa (raw, json)
Hash identifier: TN/6ZtGuHrxHQ8MX7EALhM/SbqIrc8IjPyjyxJmejtM=
Subject key identifier: 49:55:91:4D:9E:41:E5:5B:66:51:33:C3:66:64:8E:51:2E:2D:CA:DA
Certificate issuer: /CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Certificate serial: 018571152476E26EF35B963B276979400B16
Authority key identifier: CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/SVWRTZ5B5VtmUTPDZmSOUS4tyto.roa
Signing time: Mon 02 Jan 2023 06:04:49 +0000
ROA not before: Mon 02 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 109.107.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:24:76:e2:6e:f3:5b:96:3b:27:69:79:40:0b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Validity
Not Before: Jan 2 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4955914d9e41e55b665133c366648e512e2dcada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:0c:36:4a:ee:0a:b1:87:1b:aa:5a:73:3d:
ce:16:a3:7b:21:de:38:de:96:bf:28:0a:77:1d:94:
ce:ca:c1:ef:e5:80:4a:bb:4a:b5:f9:aa:09:4e:26:
88:98:1d:61:3f:44:59:df:7a:6b:75:a5:0a:b2:75:
c5:35:4b:fe:19:c4:81:90:14:1b:96:3d:0b:68:58:
72:0e:2f:a0:ea:a8:3a:92:15:13:8e:b5:61:96:1a:
c0:e0:7c:65:20:45:63:da:5a:31:ca:48:6d:62:12:
3c:50:24:57:9d:34:86:94:3b:a3:c4:fe:c5:d7:6d:
4f:e3:b9:bb:f6:48:75:77:88:02:f9:b8:56:e8:e8:
0a:f2:f6:a2:c4:59:5e:90:64:7d:96:5e:ef:f5:11:
e6:59:12:16:cb:a5:6a:c5:55:17:f4:6a:a1:65:08:
9f:09:c1:1d:8f:5d:43:1f:c2:ae:50:0c:f0:f3:c2:
5a:86:fc:68:5c:fe:2c:54:a9:5f:ac:c3:71:a0:ac:
6e:09:20:bc:e1:48:d3:7b:2a:be:59:33:63:fa:a0:
5a:0a:c7:0a:29:1e:0c:9c:84:26:da:6e:4c:0d:27:
ca:78:09:29:02:de:53:d3:a3:2a:47:ed:43:5f:d6:
6b:54:9f:b0:9e:9d:69:fb:b6:c2:5a:5c:bc:46:ad:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:55:91:4D:9E:41:E5:5B:66:51:33:C3:66:64:8E:51:2E:2D:CA:DA
X509v3 Authority Key Identifier:
keyid:CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/SVWRTZ5B5VtmUTPDZmSOUS4tyto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/y2shj2088NsAUcoWoeUtUMbLKxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a5:27:1b:0e:04:e8:3c:7f:8f:bf:4b:25:16:79:c3:e4:f5:
0c:32:5e:11:10:b6:c2:7a:d3:95:ff:93:1b:46:9d:9f:c3:d0:
0a:6c:a6:65:40:6e:19:ae:17:ff:2d:cf:60:7d:18:31:da:6c:
78:ba:3a:a9:b3:c3:8b:d3:3e:79:6e:ff:d5:e9:73:e2:b5:2b:
eb:52:de:be:0d:13:5e:a7:0c:ee:66:ab:38:0c:3d:46:b9:bb:
77:71:74:d9:18:00:ac:77:46:2a:8c:bc:53:23:f7:bc:0c:8b:
0a:10:8f:38:4d:11:29:6e:9a:59:34:ab:58:e0:4c:b1:25:c0:
b1:50:40:77:ff:d3:4c:fa:b2:4c:0c:a5:39:ba:75:62:e9:59:
de:33:2f:89:c5:26:3a:44:ea:4f:d8:33:0b:4b:6e:45:4f:45:
c3:50:b4:b7:34:d2:c0:42:61:f4:44:3f:e3:a9:4a:9d:42:f0:
34:8e:af:71:10:3b:2e:78:ff:58:36:3e:28:0f:69:e9:e5:1e:
eb:d9:28:a7:6d:83:60:4c:c9:87:f8:f2:cf:9c:ea:3f:2b:e5:
e8:eb:a1:90:b7:76:5f:5c:c0:92:0e:0d:ab:2f:68:0b:cd:5d:
78:80:ff:f8:05:6f:0b:f1:ee:4b:ad:57:23:52:db:76:bd:14:
70:6c:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org