Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/2BKuy1OYC9UdbRlaVCWnCjGG15w.roa
File: 2BKuy1OYC9UdbRlaVCWnCjGG15w.roa (raw, json)
Hash identifier: mfBGsM6NQBm7T0YTAORQihoDt+ttiQNAkQPlygiTc1w=
Subject key identifier: D8:12:AE:CB:53:98:0B:D5:1D:6D:19:5A:54:25:A7:0A:31:86:D7:9C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018460FDED044E4F7DED7ECCE29298B89879
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/2BKuy1OYC9UdbRlaVCWnCjGG15w.roa
Signing time: Thu 10 Nov 2022 10:02:44 +0000
ROA not before: Thu 10 Nov 2022 10:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:fd:ed:04:4e:4f:7d:ed:7e:cc:e2:92:98:b8:98:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 10 10:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d812aecb53980bd51d6d195a5425a70a3186d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:03:ec:c4:91:11:70:4c:e5:ba:1d:05:1a:
2c:78:d7:0f:f8:37:29:5c:11:3e:4b:0b:d6:fd:f4:
87:f1:fe:26:5a:0f:5a:e5:c5:84:49:cc:e2:34:45:
5a:3f:67:2d:8b:72:fd:24:e8:0a:20:20:56:47:4f:
14:f1:20:44:03:bf:df:82:83:b6:8f:c2:5c:2e:95:
99:78:29:f4:ed:96:59:26:cd:26:92:99:9b:a6:c2:
b6:9d:29:d4:10:c7:d9:f9:f6:4b:cc:54:91:4a:6f:
89:7f:a3:02:bf:28:3a:06:d7:cf:4f:a8:17:8e:f5:
75:8d:57:07:9d:a7:0e:08:de:6e:90:b5:c5:69:e1:
f1:04:c8:87:94:d5:44:56:d9:8e:43:a5:ca:14:29:
ae:5a:d1:94:d3:24:e4:ea:bc:91:f5:a3:ec:e0:e2:
94:d0:45:0e:5e:27:2e:79:c0:21:d2:ca:1b:27:cb:
06:d2:9e:cd:06:97:40:81:f3:8f:e2:56:43:f7:b6:
55:4f:17:cf:52:c6:c7:40:e5:47:68:6e:a2:de:c5:
08:de:23:4c:58:42:77:87:9b:e2:f7:8d:27:d4:9b:
79:67:7e:76:2d:96:59:21:ea:6a:5e:5b:e2:fe:13:
a9:5a:5f:a9:53:b5:59:76:7f:89:39:fb:08:91:04:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:AE:CB:53:98:0B:D5:1D:6D:19:5A:54:25:A7:0A:31:86:D7:9C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/2BKuy1OYC9UdbRlaVCWnCjGG15w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
109.122.218.0/24
109.122.220.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b8:3d:a6:cf:c5:54:4a:ae:f8:be:86:a9:e6:11:03:5c:8b:
e1:dd:47:db:bc:1e:4e:98:6a:65:af:0f:4d:8e:52:87:7d:0c:
6d:24:e2:51:90:cc:02:43:a1:c0:37:7d:c5:34:6e:94:74:36:
80:6f:e0:41:7c:23:1c:99:56:c3:e8:29:cc:c7:fb:1c:ea:8d:
7b:e2:2b:74:a6:37:20:6e:4f:29:ed:f6:7b:27:b4:ef:42:54:
8f:1c:63:93:06:d3:30:d4:92:6c:26:8e:e7:33:fa:61:54:dd:
52:04:0c:73:71:b8:01:c0:b3:f1:43:29:ac:4e:83:b9:bd:e6:
54:c0:3f:b5:05:00:10:19:9b:01:c0:a3:83:5e:b7:8a:d2:7d:
3f:09:e3:15:62:05:f6:0c:c3:08:cf:39:ab:a9:71:0b:df:0d:
43:b2:e7:a8:5e:da:89:0e:5e:95:1e:e8:62:5f:66:05:f8:ad:
ee:7b:ac:29:c1:cc:01:5e:2c:3f:17:29:ea:81:51:3a:de:db:
46:6a:d4:27:42:2c:a5:1f:8a:e9:5e:08:01:ef:bb:5b:8d:12:
ff:ba:5d:21:11:44:ec:5e:70:3d:a7:fa:bb:18:31:4a:a9:03:
84:22:4a:b5:39:9d:7c:cc:3c:a3:e8:81:65:6d:40:e3:ac:61:
25:e4:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org