Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-K19wnWcDDLSuyIhap0jsQUZPGY.roa
File: 1-K19wnWcDDLSuyIhap0jsQUZPGY.roa (raw, json)
Hash identifier: ZgvlppyOIUdPunN4oncB9oxY6ghU9MppbhWRXfwtMXA=
Subject key identifier: F8:AD:7D:C2:75:9C:0C:32:D2:BB:22:21:6A:9D:23:B1:05:19:3C:66
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183F43F9CA27BF442A3732A3C698DD4609F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-K19wnWcDDLSuyIhap0jsQUZPGY.roa
Signing time: Thu 20 Oct 2022 07:15:52 +0000
ROA not before: Thu 20 Oct 2022 07:15:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.201.0/24 maxlen: 24
109.122.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:3f:9c:a2:7b:f4:42:a3:73:2a:3c:69:8d:d4:60:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 20 07:15:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8ad7dc2759c0c32d2bb22216a9d23b105193c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:29:00:c1:f6:f3:82:dd:6c:9b:63:e7:3a:
99:ca:fd:3a:ad:59:3a:f3:45:61:4d:45:b0:a6:9c:
ba:0a:1c:6c:fe:b8:85:44:22:89:ac:27:52:2a:46:
ff:74:e3:6f:f5:32:0a:0d:2e:2a:22:6e:0f:84:3d:
9c:62:15:ab:96:31:d1:2e:ce:79:97:a0:b5:30:ad:
d0:7f:d3:24:f1:cf:2d:c3:3e:ac:ba:07:4c:cc:ee:
51:68:ff:d0:16:72:0e:b6:ca:74:a6:73:36:39:4b:
00:27:3f:31:cc:ff:f8:38:0b:e6:f9:ad:02:e9:bf:
5c:76:98:e1:cf:29:17:78:af:20:5e:13:d2:d4:4b:
c2:a2:e0:81:e7:92:1e:67:04:b2:11:6e:f9:fa:bf:
5d:a9:5d:0c:aa:f3:81:82:48:df:ef:bc:c4:09:e7:
6c:ac:59:6b:7d:62:11:fc:0e:2b:7b:de:b5:03:56:
59:06:92:ca:7c:2f:1c:d3:69:3a:5c:01:b1:d5:b6:
c8:f4:60:93:96:4a:56:7d:89:d5:22:de:0a:9f:31:
5d:e4:68:9e:66:ac:42:45:6e:7a:0f:ff:86:67:50:
53:8d:e1:41:2c:dc:f2:bd:d6:d8:c1:94:15:11:b5:
4b:84:f6:08:73:de:e7:3d:3d:f1:e6:a4:08:8e:a2:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:7D:C2:75:9C:0C:32:D2:BB:22:21:6A:9D:23:B1:05:19:3C:66
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-K19wnWcDDLSuyIhap0jsQUZPGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.201.0/24
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a5:ba:bc:c9:fe:b2:03:d0:48:67:85:da:00:86:1e:f7:b7:
17:0e:3d:f6:d6:f7:34:65:38:e7:52:a1:e3:ec:db:64:86:bf:
52:5d:a3:ae:12:c6:13:1e:23:0c:94:a1:ad:77:25:0e:5a:16:
ab:e0:16:42:ce:eb:fa:fd:6c:e8:a3:65:28:e1:c8:8d:91:6e:
e1:19:ae:ee:19:0e:a8:61:81:fc:c5:c7:2f:d6:8a:0b:eb:da:
06:4b:0b:2c:e2:89:63:ac:58:33:41:22:83:bd:f1:30:9c:24:
b1:ab:8b:ff:c7:95:24:95:42:87:97:47:f3:ec:4e:21:cc:88:
12:5d:61:55:da:76:1d:a2:d5:13:69:48:e5:55:a9:7f:87:7a:
c8:df:13:15:2c:dd:1a:0b:65:e0:ed:34:cb:26:5a:00:bb:51:
ed:78:a4:bf:b6:25:c8:a7:c4:0e:77:a9:82:0e:91:b4:49:3a:
b1:f6:af:1e:d9:da:d5:dc:b9:23:13:08:e5:0f:2b:6d:f6:f1:
d1:4c:a7:1a:73:63:85:52:59:ad:bd:28:75:b7:6f:82:54:4d:
ba:eb:14:c5:af:14:3e:b1:65:99:7c:26:3a:2d:4d:4e:9f:a0:
2c:78:d6:ba:26:d2:70:2d:1b:cc:18:c2:dd:cc:5d:45:7e:8f:
cc:4b:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org