Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1ZpavREJ-BmOIUBFh2ffMmqUHek.roa
File: 1ZpavREJ-BmOIUBFh2ffMmqUHek.roa (raw, json)
Hash identifier: prqpVwc6fw78G2xivd/xil3+B7s7m1Rg7e/29UedJfc=
Subject key identifier: D5:9A:5A:BD:11:09:F8:19:8E:21:40:45:87:67:DF:32:6A:94:1D:E9
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185DD68486760EFD03207C7FFCE66AC0CA8
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1ZpavREJ-BmOIUBFh2ffMmqUHek.roa
Signing time: Mon 23 Jan 2023 06:54:37 +0000
ROA not before: Mon 23 Jan 2023 06:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 109.122.207.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:68:48:67:60:ef:d0:32:07:c7:ff:ce:66:ac:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 23 06:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59a5abd1109f8198e2140458767df326a941de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:b8:c3:20:8b:7a:d1:13:70:34:61:e0:ae:
3b:f1:d1:82:a5:76:26:07:96:b2:4a:b9:fc:eb:81:
08:fa:98:e2:4f:3e:c2:1d:90:90:8a:63:df:57:f9:
77:e1:b4:5f:a3:81:7d:c8:60:03:f4:27:c1:c3:68:
79:19:04:a2:a2:05:01:ac:f6:7b:06:55:13:75:de:
aa:7c:43:47:8f:9b:c0:13:28:02:3f:95:27:13:d1:
61:2c:50:41:0f:d2:03:ae:a2:5e:26:58:bc:b0:b8:
c6:db:7f:e9:1c:e3:ff:a2:59:99:1a:81:2a:2f:f0:
ce:94:33:23:ae:53:dd:61:4d:27:7f:f5:13:eb:d4:
3d:05:ec:65:78:36:a4:20:01:a4:3c:06:ba:45:1c:
75:fd:e1:d0:bd:29:aa:11:12:01:68:f9:0f:40:7b:
28:72:bd:98:81:d4:8c:b7:92:e6:2c:d5:15:50:ce:
ef:3b:d7:45:04:e3:89:10:69:35:87:fc:d9:8f:54:
39:2f:37:a5:e3:33:7d:fc:aa:d6:2a:f7:02:69:ea:
0c:68:0f:c9:10:46:8b:ab:cc:64:ee:07:9a:84:b6:
0a:3c:8f:e4:ab:e1:f8:c5:7b:aa:e0:9e:54:c9:78:
d0:0a:10:ee:cf:ef:35:48:aa:f3:48:c7:76:fb:97:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:5A:BD:11:09:F8:19:8E:21:40:45:87:67:DF:32:6A:94:1D:E9
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1ZpavREJ-BmOIUBFh2ffMmqUHek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.207.0/24
109.122.214.0/24
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:38:5e:b4:f1:df:af:63:b4:75:e1:66:4a:8d:e2:36:bd:11:
ba:88:23:40:d2:51:cb:28:a1:60:4c:ca:77:35:18:62:99:be:
e1:f4:8c:38:72:bd:a6:82:87:d5:13:88:da:63:16:20:00:24:
65:ac:34:74:98:6f:53:ed:89:3f:85:c0:fc:55:a4:57:37:08:
03:72:10:0c:36:29:87:57:0f:76:45:9c:d4:27:3c:d1:3d:62:
b1:a6:f3:ef:65:99:86:5a:5a:ae:5d:63:4e:8b:1b:46:bd:e1:
dc:36:af:b4:6d:c0:74:37:97:e1:04:4a:77:57:a3:a5:06:dd:
a7:e4:f6:36:96:e2:d6:b2:29:8a:36:d4:f3:1d:16:02:80:e3:
0c:3b:f6:51:4c:f5:0d:76:9c:12:61:c0:cb:39:a8:64:04:83:
e5:3e:1f:c9:37:d3:c2:3c:6a:99:bb:00:db:50:eb:bb:20:31:
60:e9:40:2f:d4:c4:55:ef:34:c6:2a:b2:0c:f3:5e:98:6e:43:
2a:1b:ac:d1:e9:74:4a:8b:9d:d9:5d:0e:07:83:41:f1:b5:53:
99:5a:92:9c:4d:a0:68:2a:bb:07:62:de:04:e9:bb:92:56:71:
e7:e5:a4:70:a2:88:2a:08:12:76:11:61:24:ca:2f:e6:d6:5f:
67:7a:11:28
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXdaEhnYO/QMgfH/85mrAyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTIzMDY1NDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTlhNWFiZDExMDlmODE5OGUyMTQwNDU4NzY3ZGYzMjZhOTQxZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArua4wyCLetETcDRh4K478dGCpXYm
B5aySrn864EI+pjiTz7CHZCQimPfV/l34bRfo4F9yGAD9CfBw2h5GQSiogUBrPZ7
BlUTdd6qfENHj5vAEygCP5UnE9FhLFBBD9IDrqJeJli8sLjG23/pHOP/olmZGoEq
L/DOlDMjrlPdYU0nf/UT69Q9BexleDakIAGkPAa6RRx1/eHQvSmqERIBaPkPQHso
cr2YgdSMt5LmLNUVUM7vO9dFBOOJEGk1h/zZj1Q5Lzel4zN9/KrWKvcCaeoMaA/J
EEaLq8xk7geahLYKPI/kq+H4xXuq4J5UyXjQChDuz+81SKrzSMd2+5cw0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNWaWr0RCfgZjiFARYdn3zJqlB3pMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvMVpwYXZSRUotQm1PSVVCRmgyZmZNbXFVSGVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXrPAwQA
bXrWAwQAbXrfMA0GCSqGSIb3DQEBCwUAA4IBAQCmOF608d+vY7R14WZKjeI2vRG6
iCNA0lHLKKFgTMp3NRhimb7h9Iw4cr2mgofVE4jaYxYgACRlrDR0mG9T7Yk/hcD8
VaRXNwgDchAMNimHVw92RZzUJzzRPWKxpvPvZZmGWlquXWNOixtGveHcNq+0bcB0
N5fhBEp3V6OlBt2n5PY2luLWsimKNtTzHRYCgOMMO/ZRTPUNdpwSYcDLOahkBIPl
Ph/JN9PCPGqZuwDbUOu7IDFg6UAv1MRV7zTGKrIM816YbkMqG6zR6XRKi53ZXQ4H
g0HxtVOZWpKcTaBoKrsHYt4E6buSVnHn5aRwoogqCBJ2EWEkyi/m1l9nehEo
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org