Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/lFiCQ7voM9FWQTUj2CoGqEc81RI.roa
File: lFiCQ7voM9FWQTUj2CoGqEc81RI.roa (raw, json)
Hash identifier: T6DbptgzCf3nYJgNiZ4X8ST0O5ciCWbTX4sUkjnv7bI=
Subject key identifier: 94:58:82:43:BB:E8:33:D1:56:41:35:23:D8:2A:06:A8:47:3C:D5:12
Certificate issuer: /CN=9ed40182815a34979fbc68e30c4008bf99b421bf
Certificate serial: 01856F6FE956C593AA4DC636E2E88A29FCFE
Authority key identifier: 9E:D4:01:82:81:5A:34:97:9F:BC:68:E3:0C:40:08:BF:99:B4:21:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntQBgoFaNJefvGjjDEAIv5m0Ib8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/lFiCQ7voM9FWQTUj2CoGqEc81RI.roa
Signing time: Sun 01 Jan 2023 22:24:43 +0000
ROA not before: Sun 01 Jan 2023 22:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 109.205.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:e9:56:c5:93:aa:4d:c6:36:e2:e8:8a:29:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed40182815a34979fbc68e30c4008bf99b421bf
Validity
Not Before: Jan 1 22:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94588243bbe833d156413523d82a06a8473cd512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:d6:ed:70:f2:9a:01:69:f3:34:46:6e:36:
93:49:04:c0:24:99:e7:f7:e5:8c:ab:3f:00:b6:d9:
10:92:19:64:0e:32:de:d8:53:da:6f:4c:55:79:e8:
70:cc:bf:63:bb:c8:9d:ec:95:95:4a:da:91:6a:bb:
ce:51:6a:bf:ef:cf:11:d5:b2:b6:f6:d8:33:40:32:
51:f8:06:72:43:7e:75:cc:ea:9c:97:9b:a4:88:18:
18:8f:bc:f6:e6:e5:c0:79:fa:15:de:6f:a5:51:17:
95:cd:f7:80:84:97:f5:93:61:7d:b2:36:46:29:12:
f1:dd:d7:f5:7b:a7:f6:20:52:19:49:dc:ea:f3:58:
53:c1:bf:0a:50:2a:20:b5:43:ed:bc:08:6f:9d:6c:
61:f1:c5:b4:1e:28:a1:d7:7c:f7:79:89:fc:81:ae:
11:0b:12:1d:bb:22:eb:85:6a:0f:c2:ba:f3:65:52:
31:c5:08:7a:cb:b0:e1:75:c3:25:46:12:a2:f3:35:
0c:71:d6:0d:1b:bd:34:19:07:07:40:6e:74:a7:a6:
82:89:a8:8c:3d:a5:53:d5:0f:e2:6b:5a:5f:06:24:
f6:2e:b2:31:92:88:44:97:ca:1d:9d:ce:0a:1d:91:
8a:52:73:a8:70:3d:3e:74:ec:46:cd:f6:3f:2c:f3:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:82:43:BB:E8:33:D1:56:41:35:23:D8:2A:06:A8:47:3C:D5:12
X509v3 Authority Key Identifier:
keyid:9E:D4:01:82:81:5A:34:97:9F:BC:68:E3:0C:40:08:BF:99:B4:21:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntQBgoFaNJefvGjjDEAIv5m0Ib8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/lFiCQ7voM9FWQTUj2CoGqEc81RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8e516a-f205-4869-ad74-abc76df32d29/1/ntQBgoFaNJefvGjjDEAIv5m0Ib8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e9:3c:b0:47:94:f7:48:6b:7e:ae:55:ed:9a:8e:50:f4:ad:
5d:5d:a2:a6:ba:28:6f:aa:ca:92:4e:2f:9f:e8:4e:2e:a0:d0:
4c:09:9f:ee:ca:1c:65:36:46:69:62:04:aa:81:4a:73:aa:d3:
4c:63:78:43:75:9b:fc:55:ae:b1:21:97:ee:dc:af:b2:83:ac:
60:66:ba:9e:43:4f:5f:43:98:56:a0:47:91:9f:44:e8:be:a8:
36:03:c1:64:77:c1:dd:08:19:07:49:2a:73:4d:d3:9b:46:35:
c7:c0:9a:05:b5:e0:98:55:61:9c:24:b6:ad:0d:d0:79:cf:52:
dd:3c:b0:29:7a:37:a6:a1:a3:35:57:78:56:a4:1e:2f:09:81:
61:8e:1a:68:45:66:1b:85:74:5d:f2:e7:a7:f0:b0:3e:b0:88:
8a:e1:72:c2:e5:ff:ff:89:74:85:eb:9b:1f:e2:0b:06:ee:09:
35:48:3f:2d:12:5c:38:da:ce:42:c5:c3:03:fa:d8:e9:45:6c:
c1:c0:8d:19:fe:f3:39:e2:b2:6f:c2:8e:f3:3f:6f:53:7f:2d:
1d:2f:95:b5:f1:7c:34:df:f1:82:40:12:e1:f0:76:24:62:18:
2b:d2:94:7f:5f:b0:08:7a:8b:12:8f:91:6e:7b:f5:7f:94:6f:
cd:20:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org