Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6CsLnRl7wf6iitjbjuCiWG_z-Vc.roa
File: 6CsLnRl7wf6iitjbjuCiWG_z-Vc.roa (raw, json)
Hash identifier: iKo5ldzNZPLYuyH4Kf14mV3fbDMKxFeZJzK9I2bMW0s=
Subject key identifier: E8:2B:0B:9D:19:7B:C1:FE:A2:8A:D8:DB:8E:E0:A2:58:6F:F3:F9:57
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183ABB50EC4EF941F0E92002F90525B4003
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6CsLnRl7wf6iitjbjuCiWG_z-Vc.roa
Signing time: Thu 06 Oct 2022 05:11:53 +0000
ROA not before: Thu 06 Oct 2022 05:11:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 109.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:b5:0e:c4:ef:94:1f:0e:92:00:2f:90:52:5b:40:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 6 05:11:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e82b0b9d197bc1fea28ad8db8ee0a2586ff3f957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:c3:af:7f:8e:f4:9e:fa:27:46:6f:51:ee:
4f:2b:89:9a:58:52:7e:01:6d:83:21:a3:cd:f8:4e:
d6:77:ac:ce:65:c9:9a:e5:59:dc:10:e0:0f:78:02:
a7:1c:05:26:4a:2e:c5:eb:ab:f4:26:2f:36:a9:8d:
dc:92:68:ea:3c:89:ad:6a:cf:18:c7:d4:c5:a9:db:
09:e2:25:ca:d2:89:96:51:5e:24:82:77:c6:88:8f:
4c:d0:a6:c9:d2:ad:8c:41:40:06:d9:df:bd:03:eb:
93:57:de:f4:80:c6:75:0e:9c:10:9d:73:80:a3:a8:
6f:b9:be:5c:44:95:6f:6c:95:24:c9:45:dd:80:27:
54:d5:4e:b2:e0:c4:10:ab:c4:eb:e7:ef:29:20:7e:
6d:fe:ed:ea:7b:8f:35:11:c8:36:c8:f3:46:bd:85:
56:90:81:dc:32:db:5c:b1:c5:f7:65:b7:da:e4:42:
6a:a2:9e:7e:a8:c8:38:5f:34:3d:96:76:28:25:dd:
03:7d:ab:e8:e0:67:9b:e3:7b:b3:ed:78:aa:63:52:
3c:c4:76:16:06:f2:fd:eb:ce:1f:4a:96:9e:4b:91:
6c:10:63:b0:0e:81:5c:19:e7:d8:a8:3e:30:e9:3e:
dd:b6:88:31:7f:76:0a:ed:09:29:15:fc:a8:69:47:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:0B:9D:19:7B:C1:FE:A2:8A:D8:DB:8E:E0:A2:58:6F:F3:F9:57
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6CsLnRl7wf6iitjbjuCiWG_z-Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:bb:b3:36:83:1e:76:94:8e:c1:4e:b2:0f:04:bd:37:e8:64:
81:79:7a:8c:e1:fd:71:09:cd:d1:d6:48:7e:dc:68:a9:dc:43:
37:27:ee:b2:90:3a:22:ce:cd:bb:7c:ef:1a:c2:5d:0f:aa:76:
5a:92:66:eb:b8:16:b4:43:29:d6:8b:80:45:81:30:d0:97:fc:
ea:86:d8:50:de:a4:6a:f7:d2:8c:9a:51:f3:f5:7f:78:01:25:
4f:4c:10:2b:39:f6:b0:4a:09:30:b9:9b:27:0b:f8:60:4a:96:
5d:d2:d6:b4:6b:d0:1b:47:dc:d3:4d:4f:60:31:89:c2:39:81:
59:13:b7:26:4a:41:7e:20:a2:07:f7:09:b2:f4:37:66:62:f3:
6b:55:3d:4d:0d:52:06:97:b3:7c:c2:2a:3f:d7:85:c4:52:e8:
61:93:e9:36:c5:64:97:00:50:c2:eb:f5:70:e3:27:37:90:45:
7d:55:e3:9a:2a:fe:72:3a:af:f2:1e:a6:7c:b3:32:0c:e5:db:
eb:db:05:95:f5:41:b5:a9:3a:a6:7b:c7:0e:ba:69:cc:2d:2e:
59:ad:12:1f:f0:c5:01:ac:f9:fc:b6:fc:8e:80:42:40:d7:da:
79:a7:c2:cb:7b:6b:93:76:5f:7c:23:09:e9:f2:a6:d3:c1:71:
3a:03:61:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOrtQ7E75QfDpIAL5BSW0ADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMDA2MDUxMTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODJiMGI5ZDE5N2JjMWZlYTI4YWQ4ZGI4ZWUwYTI1ODZmZjNmOTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziDDr3+O9J76J0ZvUe5PK4maWFJ+
AW2DIaPN+E7Wd6zOZcma5VncEOAPeAKnHAUmSi7F66v0Ji82qY3ckmjqPImtas8Y
x9TFqdsJ4iXK0omWUV4kgnfGiI9M0KbJ0q2MQUAG2d+9A+uTV970gMZ1DpwQnXOA
o6hvub5cRJVvbJUkyUXdgCdU1U6y4MQQq8Tr5+8pIH5t/u3qe481Ecg2yPNGvYVW
kIHcMttcscX3Zbfa5EJqop5+qMg4XzQ9lnYoJd0Dfavo4Geb43uz7XiqY1I8xHYW
BvL9684fSpaeS5FsEGOwDoFcGefYqD4w6T7dtogxf3YK7QkpFfyoaUejvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgrC50Ze8H+oorY247golhv8/lXMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvNkNzTG5SbDd3ZjZpaXRqYmp1Q2lXR196LVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrPMA0G
CSqGSIb3DQEBCwUAA4IBAQB6u7M2gx52lI7BTrIPBL036GSBeXqM4f1xCc3R1kh+
3Gip3EM3J+6ykDoizs27fO8awl0PqnZakmbruBa0QynWi4BFgTDQl/zqhthQ3qRq
99KMmlHz9X94ASVPTBArOfawSgkwuZsnC/hgSpZd0ta0a9AbR9zTTU9gMYnCOYFZ
E7cmSkF+IKIH9wmy9DdmYvNrVT1NDVIGl7N8wio/14XEUuhhk+k2xWSXAFDC6/Vw
4yc3kEV9VeOaKv5yOq/yHqZ8szIM5dvr2wWV9UG1qTqme8cOumnMLS5ZrRIf8MUB
rPn8tvyOgEJA19p5p8LLe2uTdl98Iwnp8qbTwXE6A2Gh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org