Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c06dd4-6fd2-48b5-a0c6-8134a41acddd/1/Kb3AvGFBqLiayosOzfPxCkjX4S4.roa
File: Kb3AvGFBqLiayosOzfPxCkjX4S4.roa (raw, json)
Hash identifier: rOXYK4wlKx59uOT2RVlKWDdZYJ4cl4jDpJTojk8Rn3A=
Subject key identifier: 29:BD:C0:BC:61:41:A8:B8:9A:CA:8B:0E:CD:F3:F1:0A:48:D7:E1:2E
Certificate issuer: /CN=4c63a1ffefff85f9d0247a729edff5d0fa40b4dc
Certificate serial: 015852
Authority key identifier: 4C:63:A1:FF:EF:FF:85:F9:D0:24:7A:72:9E:DF:F5:D0:FA:40:B4:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGOh_-__hfnQJHpynt_10PpAtNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c06dd4-6fd2-48b5-a0c6-8134a41acddd/1/Kb3AvGFBqLiayosOzfPxCkjX4S4.roa
Signing time: Wed 19 Jan 2022 09:23:51 +0000
ROA not before: Wed 19 Jan 2022 09:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 109.205.185.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88146 (0x15852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c63a1ffefff85f9d0247a729edff5d0fa40b4dc
Validity
Not Before: Jan 19 09:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29bdc0bc6141a8b89aca8b0ecdf3f10a48d7e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:f4:7c:31:83:dc:1d:ef:5c:29:ef:71:c2:
4c:65:9a:4b:d2:2f:8f:a6:d6:6c:8a:15:3f:37:8f:
04:92:76:53:10:ac:71:eb:0f:8a:0d:74:b9:d9:59:
14:c7:a2:4e:49:ba:6d:e4:cf:10:51:02:37:c7:da:
e7:9f:87:59:1e:59:81:11:d4:49:c0:2f:e5:78:a2:
b2:cf:8b:fa:99:78:b8:fb:cb:77:86:78:db:2c:28:
f0:ce:4a:4c:b0:49:fc:cf:8d:70:1c:32:86:e2:9e:
37:c9:5b:3c:a5:88:0a:f7:25:c9:30:7f:61:c1:c8:
02:f7:5f:f1:aa:84:69:8a:7d:9e:ec:72:17:b5:d2:
ea:86:04:b9:be:77:a0:d7:f0:b7:8f:6e:19:d1:e3:
f3:66:c4:ab:61:08:83:d8:4d:e8:9a:76:f5:6f:a2:
3f:14:a7:8f:d2:4e:72:2b:ae:a5:26:bb:9a:59:ba:
26:2d:2e:43:c7:e6:97:0a:f4:6d:df:9e:f7:b8:1d:
f8:a1:b0:a1:70:2c:b9:9b:85:1e:9b:e0:eb:8c:c5:
85:49:92:bd:a8:7b:47:de:15:32:41:c7:f4:0f:be:
69:31:8f:ec:53:4b:79:5d:e9:ed:bc:85:ee:74:b4:
0c:9a:c1:9d:64:22:4c:86:81:43:f4:bb:2e:7a:be:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:C0:BC:61:41:A8:B8:9A:CA:8B:0E:CD:F3:F1:0A:48:D7:E1:2E
X509v3 Authority Key Identifier:
keyid:4C:63:A1:FF:EF:FF:85:F9:D0:24:7A:72:9E:DF:F5:D0:FA:40:B4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGOh_-__hfnQJHpynt_10PpAtNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c06dd4-6fd2-48b5-a0c6-8134a41acddd/1/Kb3AvGFBqLiayosOzfPxCkjX4S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c06dd4-6fd2-48b5-a0c6-8134a41acddd/1/TGOh_-__hfnQJHpynt_10PpAtNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.185.0/24
Signature Algorithm: sha256WithRSAEncryption
35:74:14:ea:b5:25:ec:58:46:d3:ce:88:fd:bd:96:45:30:cb:
c0:b6:f2:dc:aa:82:75:f2:42:23:42:2f:e6:ca:b6:f1:13:9b:
90:c3:20:b8:22:9c:3a:c9:98:4d:e4:d0:43:79:cd:41:e7:9e:
d4:b5:3c:10:e5:41:de:3c:f0:c5:98:a9:9d:84:61:c7:fc:5f:
9d:5c:6c:46:08:f2:4d:b6:ab:e3:9d:ea:ac:12:bf:c5:32:11:
b0:e3:a7:7e:8d:ec:b1:bc:6d:69:ed:ee:c8:d9:f6:0b:f5:fe:
f9:97:c3:f0:58:6b:8f:b7:62:f4:96:dd:2c:c9:b6:fe:ee:0f:
6b:59:ab:54:7a:1b:11:a0:cc:d8:c4:23:8d:ee:3f:30:49:fc:
19:2c:fc:d3:de:a1:8d:98:5d:8b:5d:b1:33:fc:32:1b:f0:9e:
70:0f:26:a9:39:2b:35:38:03:d1:32:4b:9c:f3:01:38:52:32:
6d:78:37:e1:13:51:0f:e3:62:9f:1c:3b:fa:ff:fa:56:79:fc:
59:36:a5:36:41:be:cc:d3:d7:42:df:5d:c2:4f:b5:46:9f:2d:
0f:4d:f6:5c:cc:95:b2:36:25:26:f6:b7:e4:e9:1c:91:be:6c:
69:be:cf:60:f5:84:78:72:7d:89:5a:bc:01:27:0b:7a:21:4b:
a0:1f:f6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:09 2025 by rpki-client