Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/2ta52D09rbz7uDX48h_dNlQjvuE.roa
File: 2ta52D09rbz7uDX48h_dNlQjvuE.roa (raw, json)
Hash identifier: tiERsRmKoTLFG+KADGxwfAngaIu/lvUf04NRp2+it4I=
Subject key identifier: DA:D6:B9:D8:3D:3D:AD:BC:FB:B8:35:F8:F2:1F:DD:36:54:23:BE:E1
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018475F7CAB1FFA2CAD3B25997BC2237B52D
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/2ta52D09rbz7uDX48h_dNlQjvuE.roa
Signing time: Mon 14 Nov 2022 11:48:04 +0000
ROA not before: Mon 14 Nov 2022 11:48:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.194.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:f7:ca:b1:ff:a2:ca:d3:b2:59:97:bc:22:37:b5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 14 11:48:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dad6b9d83d3dadbcfbb835f8f21fdd365423bee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:c3:f3:f2:42:55:fc:60:46:ad:64:9b:25:
0e:b7:98:d3:8d:95:97:dc:03:6b:ab:7c:f3:59:33:
fa:69:40:6a:76:cb:2c:e4:be:b7:5b:2d:cc:3b:c2:
db:7c:0f:c5:6c:03:75:11:91:3c:49:8a:0f:fd:11:
d4:94:89:2a:e6:d7:df:a0:55:a8:e7:92:1e:4c:bd:
ae:68:2d:e5:c3:18:86:12:1a:a8:4f:a9:4c:f7:69:
51:88:27:43:82:33:eb:bf:e8:3a:73:b9:94:54:ca:
2b:b2:6d:9b:17:f2:18:35:45:20:ff:50:22:17:25:
a4:f3:ee:ed:b6:46:18:87:06:23:e3:8d:46:11:37:
94:f2:f9:42:ba:15:c0:49:98:4a:22:11:94:f8:42:
db:ab:63:69:11:4e:2d:cf:fc:4b:f1:6e:be:37:81:
1b:11:69:c3:75:24:02:b1:1f:8e:18:b5:c4:75:20:
a8:17:b2:03:52:b5:61:93:c1:17:e5:70:3f:1f:e6:
2f:06:b3:c9:fc:e7:00:41:1b:25:27:78:d5:bc:ad:
70:3c:05:b1:8f:a8:f7:6a:ec:e1:4f:e3:5e:58:8d:
36:f2:2f:ea:67:52:a1:0d:94:04:c9:32:4d:0f:8e:
40:ee:70:1f:c3:97:40:73:55:06:a4:f8:6e:39:b3:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:B9:D8:3D:3D:AD:BC:FB:B8:35:F8:F2:1F:DD:36:54:23:BE:E1
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/2ta52D09rbz7uDX48h_dNlQjvuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
98:50:ee:e7:0e:63:f1:92:4b:a3:eb:a6:08:6f:f1:f7:10:6f:
f5:1a:8a:27:b9:97:7c:9a:48:c7:e1:6a:e4:a6:52:89:ea:28:
30:b1:ed:82:ab:f4:b4:0e:eb:6a:46:11:03:17:63:0e:8b:b7:
33:1b:98:03:2e:9a:00:4d:ee:d6:ef:02:e2:73:aa:2f:03:d9:
54:01:7d:a0:4b:f7:b8:7c:b4:7d:aa:70:3d:48:bd:14:c3:1b:
08:fb:09:03:5a:52:df:37:a0:d4:9c:55:23:49:dc:d6:4c:9f:
58:e6:7b:4b:b1:02:35:d1:3e:d7:5d:ec:3f:e6:a2:74:31:33:
aa:70:9c:66:2f:9c:39:a4:54:75:aa:84:52:03:e1:73:60:b5:
98:37:14:d3:c8:ab:ec:24:3f:97:fc:d4:66:80:00:d5:14:57:
1f:34:e2:76:fa:ab:89:73:cc:63:62:d5:62:7c:18:ee:a9:ce:
10:8d:a6:42:e6:4f:83:27:27:12:fd:e6:ee:93:f5:95:ee:21:
c0:b6:94:9c:e9:33:3a:d9:92:1b:16:8a:4e:67:1f:8d:06:5c:
26:54:53:d0:7c:ca:c0:3f:e9:a0:75:a3:ca:80:6e:0f:a1:9a:
83:df:9e:17:83:57:4e:92:13:8d:c6:6a:d9:d1:bc:d8:ed:da:
fa:9d:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org