Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/tYRUYXvTCcn98uiw4BaKFRrIW6g.roa
File: tYRUYXvTCcn98uiw4BaKFRrIW6g.roa (raw, json)
Hash identifier: Ql5iy2Ttj0ItAvg6sAE1cr5cINyrzNCgJxIw7gYsMx4=
Subject key identifier: B5:84:54:61:7B:D3:09:C9:FD:F2:E8:B0:E0:16:8A:15:1A:C8:5B:A8
Certificate issuer: /CN=7368829f60ad997182dff3f8c2230edc3f5dcadc
Certificate serial: 01856C2ECBE7EBA47F7FF8C6CC331A787EE0
Authority key identifier: 73:68:82:9F:60:AD:99:71:82:DF:F3:F8:C2:23:0E:DC:3F:5D:CA:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iCn2CtmXGC3_P4wiMO3D9dytw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/tYRUYXvTCcn98uiw4BaKFRrIW6g.roa
Signing time: Sun 01 Jan 2023 07:14:44 +0000
ROA not before: Sun 01 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 109.107.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:cb:e7:eb:a4:7f:7f:f8:c6:cc:33:1a:78:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368829f60ad997182dff3f8c2230edc3f5dcadc
Validity
Not Before: Jan 1 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b58454617bd309c9fdf2e8b0e0168a151ac85ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:cf:93:44:12:c6:91:c8:ef:87:4a:4e:d0:
58:7b:67:f8:35:81:6c:8b:1a:ba:33:e2:30:03:f8:
e3:ce:cc:c3:66:9c:ce:1e:09:47:8f:4a:96:18:59:
e4:05:53:e8:74:0f:5d:5c:29:a1:51:78:1d:7a:00:
9d:a3:28:6f:29:03:04:47:bf:03:2c:e8:c7:ed:1e:
aa:6e:28:cd:1a:59:c1:7e:44:5b:6a:85:2f:71:38:
be:e7:28:7f:01:4e:f9:e2:3d:eb:48:21:b8:c3:67:
5e:70:ea:64:f3:cd:08:be:88:73:24:0d:0c:85:57:
a3:55:4c:ac:e1:75:7a:7c:1b:e1:b6:fc:ba:32:03:
18:f3:6d:08:0a:10:79:e7:e2:c0:d8:c7:99:3b:b7:
f6:57:9b:42:5d:74:cd:a1:cc:c9:a5:09:03:f9:f7:
be:3c:af:15:1a:fb:2d:93:87:2b:32:32:8a:62:a7:
80:f1:d6:b8:d2:3f:69:cc:0d:e6:4b:fb:81:ea:6e:
c4:e1:b4:74:a8:90:15:33:47:47:77:f4:10:09:cc:
72:fa:4c:c4:71:f1:11:73:cb:a5:d4:9c:0d:5f:1f:
e4:16:27:e5:84:17:bb:ec:71:71:1f:37:5d:ea:a5:
aa:ed:09:17:d9:a6:d3:3b:19:d7:ae:b5:a5:c2:6e:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:54:61:7B:D3:09:C9:FD:F2:E8:B0:E0:16:8A:15:1A:C8:5B:A8
X509v3 Authority Key Identifier:
keyid:73:68:82:9F:60:AD:99:71:82:DF:F3:F8:C2:23:0E:DC:3F:5D:CA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iCn2CtmXGC3_P4wiMO3D9dytw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/tYRUYXvTCcn98uiw4BaKFRrIW6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/c2iCn2CtmXGC3_P4wiMO3D9dytw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:08:1f:f4:15:3f:97:be:08:79:ca:d7:60:26:f2:7b:cb:cf:
3e:30:2d:21:60:6a:63:d9:c7:48:dc:98:b4:d1:70:30:cf:95:
1e:50:72:b9:23:e0:4a:93:24:82:79:8f:c1:2d:44:a9:4d:63:
92:10:bb:a0:25:fb:a6:4d:bd:9d:05:b5:4f:da:88:56:34:16:
0b:c3:91:e3:57:ab:c1:16:65:0b:5e:4a:08:cf:7c:b9:1a:5e:
e4:33:cf:6d:4d:d3:47:c3:71:c7:6d:47:a9:dd:1b:f4:60:7b:
60:08:11:d2:b4:16:e6:29:95:d8:88:d4:53:74:fe:a5:5d:a3:
26:7d:1d:16:30:19:40:c5:d2:49:3a:57:2a:ef:c1:06:0c:0e:
b1:4c:6f:8b:d5:7f:ab:7d:34:f7:6d:e7:b2:05:15:73:c5:4b:
98:6a:5b:e4:1a:3b:85:6e:cb:c6:65:a0:28:f8:9d:12:32:9e:
83:a3:e2:15:81:18:7f:c4:80:f7:c2:fc:4e:76:3c:48:cd:df:
3e:b9:4f:ea:8f:33:0a:2d:22:b7:9a:0d:1d:ff:44:fd:e0:03:
32:cd:68:ea:01:5d:2f:a0:1c:e6:32:1a:42:9a:c0:5b:d2:99:
7b:83:4b:29:c0:65:9c:1c:e6:71:60:a2:83:88:e1:90:c8:f3:
c7:62:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:29 2024 by rpki-client on console-ams.rpki-client.org