Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/ecIcWD3EZ5Z1Cc_fdBeWdnCFOYE.roa
File: ecIcWD3EZ5Z1Cc_fdBeWdnCFOYE.roa (raw, json)
Hash identifier: 2D8m7biyzPUruix+elhQ3TpJTAuF8UzP1QFxoWsf8Qc=
Subject key identifier: 79:C2:1C:58:3D:C4:67:96:75:09:CF:DF:74:17:96:76:70:85:39:81
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01850FA470A8E0550384CBE8639D499F5CFC
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/ecIcWD3EZ5Z1Cc_fdBeWdnCFOYE.roa
Signing time: Wed 14 Dec 2022 07:58:33 +0000
ROA not before: Wed 14 Dec 2022 07:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:a4:70:a8:e0:55:03:84:cb:e8:63:9d:49:9f:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 14 07:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79c21c583dc467967509cfdf7417967670853981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:ea:86:4a:37:81:39:a0:5b:46:87:86:3e:
15:0b:96:e0:27:25:8d:27:1e:a8:9a:69:5c:3b:eb:
e2:91:6c:7c:58:3b:ed:3f:79:96:db:23:55:e7:bd:
6d:88:de:b7:97:5e:b2:b6:6f:d0:49:04:c2:8b:94:
e0:1d:dc:71:d7:4b:a1:c0:39:3d:d7:df:84:ff:de:
7e:5e:a6:cc:d7:60:7c:b5:cf:07:84:00:78:97:ac:
4b:ad:70:fe:bc:bc:79:b4:3c:96:03:78:29:15:1e:
09:5a:19:8c:a3:8f:fb:74:b6:88:37:bd:1d:57:21:
20:17:90:43:24:90:84:65:42:88:d1:d5:9d:d8:06:
ac:c6:0c:86:89:6d:f5:25:17:74:d0:ae:8c:11:c5:
35:3a:e3:f5:28:0a:98:95:17:3f:ed:32:07:39:e4:
ab:a4:c5:54:27:50:3f:d5:76:2b:32:ed:b4:0f:40:
61:bb:5f:b9:66:01:4b:11:d3:b6:9c:e2:d9:22:c2:
7f:3b:f7:1c:66:54:51:79:fd:f8:79:c8:5c:2e:81:
21:7f:61:31:d6:5d:a5:d4:f9:bf:af:8d:d1:3e:7d:
85:af:dd:af:c3:48:1f:be:0f:4c:69:51:c8:08:25:
52:16:dd:3d:c4:d4:a3:c0:e1:2b:12:3f:7c:26:e5:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C2:1C:58:3D:C4:67:96:75:09:CF:DF:74:17:96:76:70:85:39:81
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/ecIcWD3EZ5Z1Cc_fdBeWdnCFOYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
Signature Algorithm: sha256WithRSAEncryption
84:50:a0:d9:26:6a:94:c8:8a:62:bf:ba:53:ca:cb:49:93:c9:
f1:f9:95:e5:22:23:1a:23:f7:68:24:fb:86:5e:04:d6:27:df:
53:52:c3:d9:b1:1d:af:21:9e:4b:5d:af:d9:ad:ac:5b:c0:dc:
02:a1:e1:e1:04:2e:62:18:c8:ea:da:b0:d7:78:9d:1f:09:37:
f8:b3:c7:d0:7c:19:39:e3:3a:ac:20:a8:06:d8:c6:be:c7:03:
c9:39:ef:d5:13:61:8d:61:1f:1b:b0:29:93:d9:58:39:97:42:
db:af:f0:95:f3:8e:ca:77:fc:fd:48:1c:fc:6d:c2:28:c5:7a:
69:a2:b2:48:3d:e1:db:80:b3:7d:02:3e:47:e7:cd:6c:e0:2e:
a5:e5:bd:6f:c4:c7:41:51:c2:6b:fd:0a:0e:fb:b5:5a:d7:e9:
74:9f:fd:11:d2:b0:54:83:ab:be:68:50:19:a7:3b:1e:75:aa:
10:99:00:1c:b3:c9:9d:ce:36:74:bb:9a:78:b2:ab:c1:eb:25:
89:83:6f:d1:26:71:ff:85:ca:7a:fa:d0:37:3a:18:c8:d4:c5:
62:2e:00:02:14:08:61:13:f1:6f:94:fe:0a:ab:41:fa:ae:99:
96:52:d8:da:1e:00:e9:be:af:14:93:4e:80:ab:58:68:b8:16:
d3:d4:d0:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUPpHCo4FUDhMvoY51Jn1z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIxMjE0MDc1ODMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWMyMWM1ODNkYzQ2Nzk2NzUwOWNmZGY3NDE3OTY3NjcwODUzOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+3qhko3gTmgW0aHhj4VC5bgJyWN
Jx6ommlcO+vikWx8WDvtP3mW2yNV571tiN63l16ytm/QSQTCi5TgHdxx10uhwDk9
19+E/95+XqbM12B8tc8HhAB4l6xLrXD+vLx5tDyWA3gpFR4JWhmMo4/7dLaIN70d
VyEgF5BDJJCEZUKI0dWd2AasxgyGiW31JRd00K6MEcU1OuP1KAqYlRc/7TIHOeSr
pMVUJ1A/1XYrMu20D0Bhu1+5ZgFLEdO2nOLZIsJ/O/ccZlRRef34echcLoEhf2Ex
1l2l1Pm/r43RPn2Fr92vw0gfvg9MaVHICCVSFt09xNSjwOErEj98JuXc3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnCHFg9xGeWdQnP33QXlnZwhTmBMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvZWNJY1dEM0VaNVoxQ2NfZmRCZVdkbkNGT1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbW/1MA0G
CSqGSIb3DQEBCwUAA4IBAQCEUKDZJmqUyIpiv7pTystJk8nx+ZXlIiMaI/doJPuG
XgTWJ99TUsPZsR2vIZ5LXa/ZraxbwNwCoeHhBC5iGMjq2rDXeJ0fCTf4s8fQfBk5
4zqsIKgG2Ma+xwPJOe/VE2GNYR8bsCmT2Vg5l0Lbr/CV847Kd/z9SBz8bcIoxXpp
orJIPeHbgLN9Aj5H581s4C6l5b1vxMdBUcJr/QoO+7Va1+l0n/0R0rBUg6u+aFAZ
pzsedaoQmQAcs8mdzjZ0u5p4sqvB6yWJg2/RJnH/hcp6+tA3OhjI1MViLgACFAhh
E/FvlP4Kq0H6rpmWUtjaHgDpvq8Uk06Aq1houBbT1NDm
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net