Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/4Bx3SVpE-6nA9Lnc0wszt7ElR0g.roa
File: 4Bx3SVpE-6nA9Lnc0wszt7ElR0g.roa (raw, json)
Hash identifier: ykulcz40BXS3J/qsgOmb/VgaosgtfieDGfrDWb60ALI=
Subject key identifier: E0:1C:77:49:5A:44:FB:A9:C0:F4:B9:DC:D3:0B:33:B7:B1:25:47:48
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 067FD40D
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/4Bx3SVpE-6nA9Lnc0wszt7ElR0g.roa
Signing time: Mon 28 Mar 2022 07:28:00 +0000
ROA not before: Mon 28 Mar 2022 07:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 109.122.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109040653 (0x67fd40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 28 07:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e01c77495a44fba9c0f4b9dcd30b33b7b1254748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:83:5a:f4:14:ad:30:24:1a:bc:d2:52:06:
2e:a8:7f:b4:d1:e9:48:8d:87:d9:90:b8:19:28:18:
82:41:30:a7:2f:cf:5d:19:1b:ff:86:75:18:55:b1:
be:3e:02:54:64:a5:80:da:b1:8e:3b:57:e6:14:b3:
d5:12:83:a9:83:db:b3:5d:3a:92:55:db:e2:db:c5:
f9:0e:96:1f:57:a7:cd:52:4a:6a:85:ed:d9:eb:59:
89:61:8f:04:7a:b4:4f:1d:c5:c3:6f:1e:b4:b4:74:
76:fe:87:2e:ab:38:52:b6:d8:c9:26:7d:5e:9f:fb:
39:74:da:2b:09:c9:f2:b9:68:89:cf:1f:12:d9:5e:
d7:c7:58:38:bb:26:4d:bf:2a:6b:52:d3:94:25:7f:
e6:19:42:0f:63:ea:8f:0b:f1:19:83:a5:ff:79:93:
2b:98:08:a3:09:d2:65:7b:47:e7:bc:d5:9f:de:f4:
65:61:e9:0f:3e:ba:6a:11:dd:d7:8f:46:4a:67:04:
49:79:61:3f:10:6c:fd:35:80:53:75:b2:dd:7e:06:
8c:f6:cb:8f:76:5f:b7:97:2a:58:58:ea:40:36:5b:
6a:66:fd:a1:6b:d6:4c:a6:19:b8:a2:9a:56:0c:f2:
51:27:3e:a5:f9:88:3d:ca:70:e4:f5:ae:ab:a2:86:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1C:77:49:5A:44:FB:A9:C0:F4:B9:DC:D3:0B:33:B7:B1:25:47:48
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/4Bx3SVpE-6nA9Lnc0wszt7ElR0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a0:e8:64:30:7b:c6:56:65:58:8f:76:8d:71:51:10:94:12:
e6:29:ae:29:1a:49:71:54:9e:1c:fb:f5:05:57:ef:44:ad:62:
44:62:70:54:dd:c5:47:0e:a9:9e:4a:a7:7c:0a:57:5e:79:57:
6d:79:f9:1e:15:ab:92:7c:3f:02:8c:f8:ae:20:d4:7d:49:13:
00:70:4a:1a:d6:be:58:e9:01:d5:03:8d:ef:8d:cc:d5:73:12:
dc:a0:90:ff:2a:31:9e:14:85:70:38:59:ac:e9:2f:c7:d3:44:
13:d8:2a:3e:bd:44:ba:5c:fe:ed:c3:91:e3:73:f2:ec:1e:f1:
d8:46:dd:95:79:b8:c3:8e:34:22:cf:12:89:dd:cf:d5:58:c4:
38:ad:71:e9:a5:74:f2:85:b5:1f:59:dc:b1:54:3c:a1:19:bb:
58:ba:80:80:eb:af:52:46:33:c7:ef:cd:33:f1:fd:b4:5d:d4:
72:e6:c2:2d:f8:2d:9f:74:b6:9c:93:49:9e:1a:ad:de:31:c0:
a2:6d:b2:ee:9e:ba:73:0a:b9:8a:1c:b5:00:c5:9e:3f:d0:e2:
3f:da:13:ef:2f:d0:0c:20:c0:c6:a0:f8:3a:c8:7b:0d:32:15:
99:08:63:f6:ab:c3:a1:c1:59:07:bb:7c:e1:4b:de:e2:7f:8a:
8b:66:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org