Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1ZNQUMk4xZuaIUBZXgXU4PBAVxw.roa
File: 1ZNQUMk4xZuaIUBZXgXU4PBAVxw.roa (raw, json)
Hash identifier: nS9ChDIjkkFhN5O/js6tA9U52EWSDFbjJlW3DzOmdYI=
Subject key identifier: D5:93:50:50:C9:38:C5:9B:9A:21:40:59:5E:05:D4:E0:F0:40:57:1C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183B1B2A231A54DF6A411322DF593268040
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1ZNQUMk4xZuaIUBZXgXU4PBAVxw.roa
Signing time: Fri 07 Oct 2022 09:06:57 +0000
ROA not before: Fri 07 Oct 2022 09:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:b2:a2:31:a5:4d:f6:a4:11:32:2d:f5:93:26:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 7 09:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5935050c938c59b9a2140595e05d4e0f040571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:f6:29:f9:8e:34:f4:9c:6d:25:b4:91:e2:
4a:cc:d9:86:2f:ab:e4:30:1e:b9:6f:36:77:25:6a:
18:07:51:b1:41:84:6d:69:15:8f:f1:04:88:96:58:
b8:5f:ab:7f:31:94:d1:5c:e0:be:67:81:30:b2:3c:
ae:75:5f:dd:b9:b5:5e:4b:62:ad:db:aa:32:0c:b0:
d5:ad:f8:bb:d5:2b:ee:8f:c1:7d:e4:90:5d:61:30:
a1:f8:98:9a:02:9a:a6:5f:b2:a5:1d:89:46:31:39:
12:41:17:d2:69:83:5f:84:8c:f7:88:8b:96:c7:3e:
01:b3:e4:c6:f6:f5:e8:bd:a7:55:be:1a:b0:39:73:
73:37:94:79:ff:4d:94:52:4e:39:e7:26:34:ec:cd:
e4:36:80:82:ff:d7:91:75:67:e0:e2:00:5c:d6:79:
ae:9f:6b:42:7c:f6:82:ea:fd:9e:8d:54:72:b4:5f:
44:ee:13:74:71:5f:62:b5:cf:26:49:f4:68:09:00:
75:1b:39:86:48:b8:74:19:a3:24:17:6d:ae:90:38:
83:29:b5:ec:40:79:f8:15:00:75:21:94:73:6e:1c:
5c:58:36:38:b1:19:2a:1c:3e:e6:52:cf:32:7f:1c:
d9:f2:52:a5:63:5b:8a:8e:5b:98:cd:7e:4b:e5:f3:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:50:50:C9:38:C5:9B:9A:21:40:59:5E:05:D4:E0:F0:40:57:1C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1ZNQUMk4xZuaIUBZXgXU4PBAVxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:9d:8a:15:6b:68:d9:cc:29:27:5b:02:0f:fc:6a:fa:52:d8:
53:1d:1e:87:78:ff:67:b7:d0:52:8f:fe:ca:a6:63:6a:6b:e3:
3b:e7:e5:f3:c1:eb:71:fd:09:0f:6d:87:77:04:e3:9f:8e:fa:
57:17:b9:5d:36:93:f6:e5:32:14:ec:a0:1e:f9:9d:b9:de:ae:
80:8e:69:61:80:4c:32:5a:d6:0c:6b:54:c6:ba:05:bc:70:a4:
c9:7b:db:b1:05:54:aa:6c:08:4b:76:e2:32:c1:43:63:11:f5:
74:0c:83:c4:19:02:2b:7a:8b:1c:a7:d4:47:0d:ca:fd:65:5e:
e0:07:06:19:a4:d5:e6:47:05:3e:81:6b:3e:11:ba:8b:a1:47:
17:a7:fa:38:a3:d1:97:50:eb:be:9b:4e:4c:58:3f:84:d3:9b:
85:81:d8:3a:e0:00:f8:ef:21:18:79:f5:12:fd:30:37:aa:03:
31:84:75:9f:99:b2:8d:d5:82:b2:05:50:cb:e7:36:0c:73:bf:
04:6b:8b:c3:84:0f:c4:d6:62:4c:14:35:04:af:a3:f5:5e:dc:
ba:67:3c:c5:1e:7a:74:b2:40:dc:37:03:0d:07:1b:c1:a8:4d:
27:57:72:bb:5c:29:5e:40:a5:16:68:0d:65:9b:02:25:29:75:
a9:45:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org