Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8D_tq7wZvOCJBDV6H-0RpeK1BHY.roa
File: 8D_tq7wZvOCJBDV6H-0RpeK1BHY.roa (raw, json)
Hash identifier: 7mt/H0zgSDv0LmFLc18D+Yk0w9C5IaIEDqwIy5kVJKg=
Subject key identifier: F0:3F:ED:AB:BC:19:BC:E0:89:04:35:7A:1F:ED:11:A5:E2:B5:04:76
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5AB9D8FE8CB9155BF7B9AF256DF6
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8D_tq7wZvOCJBDV6H-0RpeK1BHY.roa
Signing time: Sun 01 Jan 2023 21:44:47 +0000
ROA not before: Sun 01 Jan 2023 21:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 109.122.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5a:b9:d8:fe:8c:b9:15:5b:f7:b9:af:25:6d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f03fedabbc19bce08904357a1fed11a5e2b50476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0f:2a:4c:18:bd:91:91:e1:8b:4c:ab:b5:7d:
22:6e:12:97:ac:42:7b:fc:7b:13:55:86:6e:be:86:
92:b8:81:94:77:ba:70:25:ed:c8:d2:13:ab:4d:cd:
34:4a:84:fe:13:81:58:e9:97:47:43:38:05:4d:dc:
40:d1:21:6e:8c:72:83:2f:41:03:4e:78:7b:8d:15:
e7:2e:b7:c6:ed:f4:eb:2e:51:dc:d3:e9:e7:55:91:
3e:75:1b:48:82:6f:63:19:11:d9:48:7f:37:4b:4b:
6b:31:3f:09:c2:a3:bd:e0:f4:37:e0:7d:36:01:2b:
66:ff:2d:c3:ac:35:fd:b1:1c:99:fb:96:3e:63:fe:
aa:d4:63:75:20:9d:c8:ba:e9:4d:1e:25:c6:ee:e4:
05:90:af:89:63:d7:01:b3:3f:95:38:25:ad:20:f5:
e5:3a:d2:9c:f3:98:55:01:f1:ed:c7:d5:c5:4a:56:
36:94:7b:b3:48:ab:3d:20:a1:54:44:cc:5b:23:8f:
b3:c4:6c:07:86:bb:fe:3c:b3:7e:e9:20:92:6c:b6:
f6:83:cf:43:ea:e4:6b:e1:d2:02:65:18:e7:f0:7c:
6c:0d:33:c1:62:4f:87:79:44:52:03:06:59:5b:02:
cd:88:d8:86:3c:6d:69:71:e6:6b:0f:05:75:2b:9d:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:ED:AB:BC:19:BC:E0:89:04:35:7A:1F:ED:11:A5:E2:B5:04:76
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8D_tq7wZvOCJBDV6H-0RpeK1BHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
Signature Algorithm: sha256WithRSAEncryption
52:83:31:c0:e4:d9:ef:2e:fa:16:82:19:e3:cb:af:46:53:24:
1e:0a:01:38:b3:dc:de:c8:cd:22:61:40:df:27:45:ee:b1:36:
39:d9:f9:2b:ef:90:cf:95:9f:3c:0c:a9:2c:ae:0b:01:45:19:
1a:1a:a0:9f:97:ca:1d:78:75:bd:48:cd:2e:44:48:57:a8:cb:
a8:aa:f6:0b:59:35:7d:aa:15:19:c2:38:e3:0d:bc:b3:13:55:
80:9f:bd:bd:88:44:71:88:57:f8:b3:e3:c6:05:41:da:e7:8b:
6a:bd:6e:d1:ad:53:af:f7:a9:34:2d:6d:85:68:84:39:61:ed:
9e:cf:72:a2:0f:06:53:85:02:c1:57:dd:3f:19:44:11:91:c8:
86:28:86:05:40:73:88:fe:db:45:0a:6c:2b:14:2c:68:91:65:
2e:21:a7:cd:fa:33:f3:a2:8c:e1:8e:c6:5c:9f:9f:a7:15:6d:
ee:41:70:ab:fe:1a:dc:4d:eb:9e:d8:70:48:d9:64:e9:34:ca:
02:72:de:24:ee:5e:30:99:fa:b3:10:63:b8:4c:e2:ea:e7:15:
60:4a:b0:55:12:55:6d:14:36:5c:6b:2d:a6:0c:55:74:7a:cd:
ec:c3:8d:be:4c:da:5a:d2:a2:8c:d4:e8:25:55:d4:14:50:c6:
c2:d4:08:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org