Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6W5TBEJ3E-u8Km5blZpZ8d8Cd_o.roa
File: 6W5TBEJ3E-u8Km5blZpZ8d8Cd_o.roa (raw, json)
Hash identifier: Tt8FQJV7K78sE/TaD7PZvQexfq1zaFDZN1Hea8ioC6c=
Subject key identifier: E9:6E:53:04:42:77:13:EB:BC:2A:6E:5B:95:9A:59:F1:DF:02:77:FA
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01826420D158C3696B18C2A1DB9185A7ACE7
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6W5TBEJ3E-u8Km5blZpZ8d8Cd_o.roa
Signing time: Wed 03 Aug 2022 14:34:08 +0000
ROA not before: Wed 03 Aug 2022 14:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.206.0/23 maxlen: 24
109.122.200.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:20:d1:58:c3:69:6b:18:c2:a1:db:91:85:a7:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Aug 3 14:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e96e5304427713ebbc2a6e5b959a59f1df0277fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:64:3c:47:96:31:58:8c:59:fc:e8:8c:73:
56:f2:b4:b0:f3:39:bb:cd:50:70:2a:93:90:99:da:
d6:7f:2a:33:62:24:e3:d6:be:e1:5e:e5:d0:03:18:
8c:64:d1:66:16:e6:63:cc:88:55:01:fc:ba:47:85:
a8:67:24:8e:e4:1a:5a:ec:cf:2a:25:a9:ba:55:75:
73:17:8b:9d:8b:9a:3c:32:8f:ec:15:a0:2b:28:05:
15:a0:1d:1c:5c:22:84:57:92:b1:aa:b8:05:84:d4:
55:c4:4c:57:e7:0e:50:b2:18:92:1e:11:9b:0d:6b:
68:5b:9c:ce:b7:9a:fa:95:60:ba:28:88:e8:b0:86:
de:8b:67:2d:6d:b3:9f:9b:dc:df:83:ff:80:f0:f1:
52:ab:30:61:ed:09:f2:de:70:a0:bf:ad:03:d3:52:
17:54:89:b9:ba:5a:cb:04:9e:11:c9:e5:03:d4:10:
5b:55:96:2d:68:45:8d:d6:be:32:92:e3:5f:ce:f9:
42:05:68:7b:81:cf:67:dd:81:41:64:5c:03:f7:00:
af:06:cb:40:01:28:a1:d0:ea:0e:f0:5e:19:4e:84:
58:e9:ed:60:2c:f6:1d:70:3f:7d:e4:a8:6c:a9:60:
32:3c:ca:da:6c:20:45:bb:f0:9b:73:87:38:a0:e3:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:53:04:42:77:13:EB:BC:2A:6E:5B:95:9A:59:F1:DF:02:77:FA
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6W5TBEJ3E-u8Km5blZpZ8d8Cd_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/24
109.122.206.0/23
109.122.211.0-109.122.212.255
109.122.216.0/24
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
18:43:db:ac:0a:ac:f6:7a:e3:6d:49:c8:95:a7:53:2a:7a:1e:
f7:fe:1c:90:c8:3d:71:15:d6:60:33:2f:c4:7e:8e:22:e5:48:
6c:9c:4e:28:b7:44:fe:15:23:78:ad:a5:22:62:1c:86:db:d0:
1e:7f:1a:a2:39:06:18:b3:9e:c3:7c:d3:61:f5:d1:d5:6a:95:
d3:b4:59:a6:68:df:7e:32:a7:1c:ae:d4:d1:50:b2:23:ef:17:
c5:95:93:0e:6a:13:0f:68:6a:26:96:57:bc:d5:60:a4:8c:72:
7f:69:4d:73:cb:c6:fd:6d:21:db:58:13:7a:da:23:d2:ce:c4:
db:71:92:35:b6:3e:68:c1:20:0d:ce:4b:3b:16:28:a9:3b:09:
5c:d1:94:89:9b:e0:a8:5c:80:bd:fb:8a:c2:ce:74:6f:ec:af:
77:f1:9e:82:10:3e:b3:dc:1b:21:4b:17:14:58:65:5b:ab:f5:
97:f4:96:b1:14:9f:ef:39:45:f2:0a:53:76:65:49:ce:9e:0d:
c8:df:08:28:7c:aa:0d:7a:88:3f:20:e2:f5:0e:a7:f9:75:71:
4e:4b:5f:ec:31:e3:1a:db:e4:c3:37:39:9b:2a:a2:92:90:63:
ef:91:2a:6a:1d:30:6d:30:cf:7b:43:44:96:ae:5e:cd:9a:be:
43:ff:23:db
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYJkINFYw2lrGMKh25GFp6znMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIwODAzMTQzNDA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTZlNTMwNDQyNzcxM2ViYmMyYTZlNWI5NTlhNTlmMWRmMDI3N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYhkPEeWMViMWfzojHNW8rSw8zm7
zVBwKpOQmdrWfyozYiTj1r7hXuXQAxiMZNFmFuZjzIhVAfy6R4WoZySO5Bpa7M8q
Jam6VXVzF4udi5o8Mo/sFaArKAUVoB0cXCKEV5KxqrgFhNRVxExX5w5QshiSHhGb
DWtoW5zOt5r6lWC6KIjosIbei2ctbbOfm9zfg/+A8PFSqzBh7Qny3nCgv60D01IX
VIm5ulrLBJ4RyeUD1BBbVZYtaEWN1r4ykuNfzvlCBWh7gc9n3YFBZFwD9wCvBstA
ASih0OoO8F4ZToRY6e1gLPYdcD995KhsqWAyPMrabCBFu/Cbc4c4oOPxtwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFOluUwRCdxPrvCpuW5WaWfHfAnf6MB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvNlc1VEJFSjNFLXU4S201YmxacFo4ZDhDZF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAbXrDAwQA
bXrIAwQBbXrOMAwDBABtetMDBABtetQDBABtetgDBABtet8wDQYJKoZIhvcNAQEL
BQADggEBABhD26wKrPZ6421JyJWnUyp6Hvf+HJDIPXEV1mAzL8R+jiLlSGycTii3
RP4VI3itpSJiHIbb0B5/GqI5BhiznsN802H10dVqldO0WaZo334ypxyu1NFQsiPv
F8WVkw5qEw9oaiaWV7zVYKSMcn9pTXPLxv1tIdtYE3raI9LOxNtxkjW2PmjBIA3O
SzsWKKk7CVzRlImb4KhcgL37isLOdG/sr3fxnoIQPrPcGyFLFxRYZVur9Zf0lrEU
n+85RfIKU3ZlSc6eDcjfCCh8qg16iD8g4vUOp/l1cU5LX+wx4xrb5MM3OZsqopKQ
Y++RKmodMG0wz3tDRJauXs2avkP/I9s=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org