Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/ff9PmIHj8QXHfqYZ8-EnFQSELnU.roa
File: ff9PmIHj8QXHfqYZ8-EnFQSELnU.roa (raw, json)
Hash identifier: Uc9ap/AuI+GTHE4qFqgtJuKwVfXU47CX+1mOxR7t73w=
Subject key identifier: 7D:FF:4F:98:81:E3:F1:05:C7:7E:A6:19:F3:E1:27:15:04:84:2E:75
Certificate issuer: /CN=1b893c6209b7a8018776c5ccad30e240d2cf2d07
Certificate serial: 01856F0B80CAACF069410C8DE9DA5F66988E
Authority key identifier: 1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/ff9PmIHj8QXHfqYZ8-EnFQSELnU.roa
Signing time: Sun 01 Jan 2023 20:35:02 +0000
ROA not before: Sun 01 Jan 2023 20:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 109.234.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:80:ca:ac:f0:69:41:0c:8d:e9:da:5f:66:98:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b893c6209b7a8018776c5ccad30e240d2cf2d07
Validity
Not Before: Jan 1 20:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dff4f9881e3f105c77ea619f3e1271504842e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:66:98:ad:bc:fe:39:d7:8a:06:b3:89:ea:
62:3c:9f:e2:4f:46:0f:b3:40:38:3c:9f:92:09:5f:
93:0a:39:ce:ba:d7:fb:f2:39:cb:07:56:42:48:b1:
d1:ff:db:a7:af:77:43:64:56:f2:16:5e:63:d9:e9:
07:2d:95:ec:b3:92:37:db:80:05:43:fe:82:16:4a:
25:6a:3b:39:09:c4:bf:29:8f:4f:52:be:ae:f6:c8:
b1:e6:a8:22:b0:22:f8:00:06:60:af:13:2d:51:1f:
6e:74:ba:19:24:4d:17:48:08:28:0a:4d:e3:0a:4d:
b9:fa:79:03:1a:13:0e:1d:6b:34:4a:a0:3d:c3:84:
53:e7:e3:eb:e9:12:33:ed:e9:cc:00:aa:ff:96:f2:
1a:12:e0:c6:b9:68:f0:44:be:23:58:6f:6f:0d:88:
ed:95:5f:f8:b6:78:d9:69:f4:30:a4:f3:3a:f0:2a:
45:e8:1d:ff:c7:65:4e:e3:d7:53:a0:ba:e6:7b:c9:
5b:cb:8e:0d:1a:e2:95:09:07:f1:35:7d:05:4d:3b:
b4:0d:e1:80:f3:b4:46:91:6c:50:75:8c:f9:e4:3d:
dc:fc:48:e9:b0:a9:5c:2e:b0:17:82:59:21:bc:6a:
46:ee:01:92:a6:f9:42:bf:d3:a5:79:92:ad:e4:64:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:4F:98:81:E3:F1:05:C7:7E:A6:19:F3:E1:27:15:04:84:2E:75
X509v3 Authority Key Identifier:
keyid:1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/ff9PmIHj8QXHfqYZ8-EnFQSELnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.74.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5b:e1:7e:c0:ec:89:df:26:15:9f:ef:4f:51:79:24:e8:24:
f4:a4:fd:d5:11:8f:1a:45:2e:a3:c8:50:20:59:77:44:fc:87:
b9:4f:81:66:cc:00:61:f0:1b:a9:9c:9f:25:5a:ea:0f:83:f1:
31:e7:30:5d:b1:42:f7:9e:f8:42:4c:cd:8f:c0:fa:7e:af:a6:
68:00:3a:23:29:52:79:97:9e:68:82:0b:24:ae:47:2d:18:c1:
68:ad:c5:6d:69:29:b8:c6:a7:5f:40:30:8d:ce:b9:46:9a:68:
f3:8f:72:bb:f2:c5:83:83:b9:87:c9:eb:f7:b8:b0:3f:03:d0:
87:aa:06:69:ff:d5:ad:a7:73:69:58:44:eb:88:20:0e:80:5a:
10:87:d0:b2:fb:ab:0e:b0:56:94:cd:d8:64:f9:75:25:c5:aa:
cd:b6:b7:3b:c9:ee:47:f6:bc:16:e6:51:09:a0:f0:71:06:08:
ae:26:00:58:59:c8:50:21:e4:d9:51:39:6a:d3:44:de:6d:1c:
d1:1d:61:49:5a:92:b6:cb:5e:6e:00:ba:4a:a8:05:f1:91:83:
50:4f:d9:41:6e:fd:d9:93:af:6f:37:6d:ce:78:95:b3:d3:91:
ee:16:c7:8c:05:94:45:68:af:55:e2:95:98:05:7d:8c:f2:d7:
c0:2f:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 14:21:12 2023 by rpki-client on console-fra.rpki-client.org