Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Ty2N8nxF1pJA5ZPIwcAUOw_ZMdg.roa
File: Ty2N8nxF1pJA5ZPIwcAUOw_ZMdg.roa (raw, json)
Hash identifier: LRfeNvyhu7GwrHQ7CqTwuifN114vLx02vrPn/HuhdqU=
Subject key identifier: 4F:2D:8D:F2:7C:45:D6:92:40:E5:93:C8:C1:C0:14:3B:0F:D9:31:D8
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0188352D5B1813CDB7AE9542B0176098EBFB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Ty2N8nxF1pJA5ZPIwcAUOw_ZMdg.roa
Signing time: Fri 19 May 2023 18:02:24 +0000
ROA not before: Fri 19 May 2023 18:02:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:2d:5b:18:13:cd:b7:ae:95:42:b0:17:60:98:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 19 18:02:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2d8df27c45d69240e593c8c1c0143b0fd931d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:c1:e4:6d:86:45:49:f9:ff:91:55:3b:21:
0f:d0:9f:f3:ba:f8:b6:da:31:8e:0c:bf:28:88:34:
d4:5e:11:d9:66:3c:f7:fa:47:9b:ee:2e:1e:e4:48:
c6:9b:a7:4a:ef:a7:89:7d:70:56:1f:11:2e:bb:ed:
d3:db:1a:5b:5c:02:6f:e6:b2:63:7c:cf:6c:31:93:
cc:97:54:59:63:36:c0:1c:40:b0:ac:86:af:0d:48:
b6:28:c2:a3:ca:a0:75:cc:46:f7:4c:2d:3d:70:20:
67:56:e9:45:2d:3f:0c:70:86:70:0d:82:f2:33:b2:
b3:46:57:92:4b:bc:bb:db:d1:a9:b1:95:2c:03:8c:
0f:c4:13:b2:b6:72:ec:bd:e0:bb:b8:8b:2b:ed:36:
fc:16:0f:f1:81:8c:48:2d:b6:db:d1:62:fe:5c:3f:
ed:e6:e5:c5:b3:ba:3d:1f:dd:75:27:b0:c5:f9:8e:
b6:73:e4:42:60:0a:81:1c:23:53:0c:bd:fb:3e:8c:
a4:65:ed:09:f7:66:de:98:35:97:17:f6:cf:cc:e1:
23:f1:c9:4b:b9:3f:be:6b:8d:c6:2b:5f:65:52:76:
aa:56:97:06:70:b1:1b:5d:d3:97:a6:96:93:b6:e0:
88:df:20:b9:98:b2:4e:3f:7f:94:2b:f0:da:c4:e5:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2D:8D:F2:7C:45:D6:92:40:E5:93:C8:C1:C0:14:3B:0F:D9:31:D8
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Ty2N8nxF1pJA5ZPIwcAUOw_ZMdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d9:4c:d2:53:c5:42:69:0f:6b:04:0d:be:1e:d7:80:de:5b:
3b:eb:bb:0b:9c:19:35:e5:3d:09:7c:ea:37:3a:a5:6f:f0:61:
88:18:f8:61:4c:af:ed:30:96:fa:2b:b3:48:8b:36:c2:7d:70:
fb:f6:96:0b:f2:53:45:84:06:a8:a0:07:86:19:3c:2b:5f:42:
c8:e8:c0:99:48:96:48:8e:f2:2a:b6:0c:b6:94:d6:b6:e0:93:
37:ff:7b:5c:2f:16:bc:2d:3d:bd:25:4d:58:0a:b8:ab:9c:e7:
c7:75:28:4b:46:71:33:36:2b:b4:09:4a:cc:00:66:1d:33:41:
14:2a:bb:39:b6:5a:76:10:8a:95:51:40:f0:ba:62:6a:ac:c7:
a4:c6:c1:b6:2c:b8:5e:ea:71:b3:fc:e6:c3:ad:dc:42:cc:3a:
87:c2:9b:b1:3b:8c:2b:6a:7f:1b:d0:d4:70:cd:50:c7:06:a8:
54:21:a2:21:35:08:2b:8f:ee:e0:a9:fd:b8:90:72:13:f0:a7:
be:05:32:86:42:50:ea:bd:c5:30:43:49:36:c8:8e:e5:70:1c:
6b:de:7e:88:43:70:d7:2f:a9:d2:8c:33:e0:12:b7:b7:21:eb:
09:bd:6d:33:02:3b:69:61:19:76:92:bf:6b:a0:2f:5c:0e:be:
8c:c5:aa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net