Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/472197-88bd-4b1b-86d3-81e88554f8ab/1/BHl34x3xGfqeKjN5fWJcSi_3jNI.roa
File: BHl34x3xGfqeKjN5fWJcSi_3jNI.roa (raw, json)
Hash identifier: vzY2jCZLuicRIRA+PZU6JooidW3Sxk90KfXqBm14ktM=
Subject key identifier: 04:79:77:E3:1D:F1:19:FA:9E:2A:33:79:7D:62:5C:4A:2F:F7:8C:D2
Certificate issuer: /CN=13d7258383f38dbfe6225ea4671bce2f0537f324
Certificate serial: 018570E7681A81F6098CDABD3201CD466858
Authority key identifier: 13:D7:25:83:83:F3:8D:BF:E6:22:5E:A4:67:1B:CE:2F:05:37:F3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9clg4Pzjb_mIl6kZxvOLwU38yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/472197-88bd-4b1b-86d3-81e88554f8ab/1/BHl34x3xGfqeKjN5fWJcSi_3jNI.roa
Signing time: Mon 02 Jan 2023 05:14:51 +0000
ROA not before: Mon 02 Jan 2023 05:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 109.107.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:68:1a:81:f6:09:8c:da:bd:32:01:cd:46:68:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d7258383f38dbfe6225ea4671bce2f0537f324
Validity
Not Before: Jan 2 05:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=047977e31df119fa9e2a33797d625c4a2ff78cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:68:57:be:c7:9d:13:99:fa:f1:e0:0d:c0:
74:64:d5:68:2e:b0:10:e3:c9:27:10:89:a6:75:7f:
09:2a:95:e1:65:51:49:05:b4:d8:7a:9c:2c:24:b1:
4e:a1:b8:cc:45:0a:f7:e7:4a:7d:d1:e8:99:3f:3e:
d2:fe:bc:bb:f0:65:5b:2c:9c:ec:88:b5:ab:57:8f:
3e:aa:ff:7e:7d:4e:9c:0b:df:c5:de:4b:c4:51:39:
67:4f:2a:1f:50:f2:dd:f3:a1:a8:c1:f6:08:37:98:
3e:36:ed:7f:54:6b:02:c6:3b:ff:90:eb:97:0a:4d:
86:0a:1d:45:dd:10:ba:a4:ec:17:61:b6:5b:a2:6d:
d6:6d:b9:ee:29:d4:0b:61:e1:fa:f1:3a:89:6d:70:
10:89:b1:d1:f0:cb:13:18:27:02:93:ed:00:5b:ae:
d6:57:7c:56:6c:45:dc:ea:6d:e7:e5:21:69:d6:23:
f4:fc:71:1b:61:9f:fe:ef:ea:8a:23:ab:89:3c:72:
cd:41:3a:b1:22:51:60:ad:4b:11:e4:0c:e1:8b:03:
9c:c8:0c:ba:67:8f:a2:f9:02:f2:85:fb:74:0e:75:
3f:d2:6f:f6:57:d1:d3:4f:1e:ae:3d:ae:dc:ba:04:
3e:0d:8a:61:fa:ad:84:68:14:11:19:9d:84:e2:16:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:77:E3:1D:F1:19:FA:9E:2A:33:79:7D:62:5C:4A:2F:F7:8C:D2
X509v3 Authority Key Identifier:
keyid:13:D7:25:83:83:F3:8D:BF:E6:22:5E:A4:67:1B:CE:2F:05:37:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9clg4Pzjb_mIl6kZxvOLwU38yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/472197-88bd-4b1b-86d3-81e88554f8ab/1/BHl34x3xGfqeKjN5fWJcSi_3jNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/472197-88bd-4b1b-86d3-81e88554f8ab/1/E9clg4Pzjb_mIl6kZxvOLwU38yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0e:24:72:ac:8f:6f:13:b9:f9:9d:e1:33:9b:6b:7d:df:53:
0a:11:fc:50:68:d1:18:a5:89:63:04:b3:ea:9b:a7:4c:4f:10:
d8:a2:95:eb:44:2e:37:ce:c8:7c:5e:bc:2e:4f:b0:11:a6:c5:
da:4c:d2:ba:5c:2a:5d:8e:50:fe:9e:2f:5b:67:05:16:29:83:
4d:7c:d3:35:45:cd:41:3c:82:a2:33:b7:ff:11:cb:1e:c8:f0:
ee:2b:3c:23:25:b0:83:85:b1:cc:65:f4:98:e2:7c:25:1e:83:
01:bb:3a:8c:c4:f3:76:a9:dc:d3:d8:2f:8b:e4:65:71:fb:20:
ae:c8:13:ca:02:7d:04:10:a8:69:4c:51:71:c7:33:43:22:6d:
a5:f1:69:f8:28:ed:5e:cc:71:5e:e3:6c:8b:5d:19:93:90:13:
bf:4c:a8:f6:13:2b:7c:0c:47:c5:3f:9e:4f:96:81:d9:e1:c5:
ef:c1:85:cc:32:0e:3c:e3:21:44:ce:0c:17:87:a8:2c:11:69:
2a:3b:72:05:7f:7f:29:13:40:f8:e1:44:66:fc:d4:c4:05:88:
88:e0:53:f5:94:7b:25:72:7d:86:e4:f0:cb:5f:17:ec:04:91:
e9:6c:37:1e:67:f9:23:6c:7a:6e:f5:26:44:19:ac:fd:57:b4:
e6:8f:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 11:31:01 2023 by rpki-client on console-ams.rpki-client.org