Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8indAWVHX22i8ePqQ2JVwlQLAnU.roa
File: 8indAWVHX22i8ePqQ2JVwlQLAnU.roa (raw, json)
Hash identifier: 867vJqGqK+EfJKv0/gqi6a3iUMgOUVufviPZLgiQLNk=
Subject key identifier: F2:29:DD:01:65:47:5F:6D:A2:F1:E3:EA:43:62:55:C2:54:0B:02:75
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B55D7BE3157922A68EEFCB85DD246
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8indAWVHX22i8ePqQ2JVwlQLAnU.roa
Signing time: Sun 01 Jan 2023 21:44:46 +0000
ROA not before: Sun 01 Jan 2023 21:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:55:d7:be:31:57:92:2a:68:ee:fc:b8:5d:d2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f229dd0165475f6da2f1e3ea436255c2540b0275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:f0:aa:b0:50:f2:2c:21:d5:3c:93:63:b2:
9e:63:75:2e:1d:7e:0d:14:5f:e3:54:12:76:34:7b:
1f:a5:a4:e2:ee:22:f2:42:16:5b:a1:9d:cf:08:47:
bf:7b:88:28:38:0f:3d:20:2a:aa:26:85:ad:28:f1:
f7:f4:6c:6f:95:01:a1:e8:90:93:a7:ee:2f:10:99:
3d:b4:30:68:0f:31:2f:9e:de:dd:2e:02:1e:59:8e:
6e:f0:5d:36:b1:08:68:98:b1:72:8d:64:30:da:ae:
1d:1c:7f:54:f8:2b:52:a6:9e:e6:73:c8:db:a0:8d:
86:2b:46:f2:81:74:27:34:23:bf:31:0c:8e:ab:86:
11:cc:6a:a4:78:55:15:86:67:c1:b3:a0:76:c6:b2:
e6:e7:e4:fa:96:ba:67:1c:db:2b:5e:a3:6c:99:f3:
af:e3:13:c4:5e:ae:62:94:7c:be:35:ea:f4:a3:8e:
b0:46:af:1c:8f:9f:57:c5:a7:ec:c0:a4:59:86:6f:
45:10:ee:9d:65:55:d3:61:7f:c3:00:91:a5:89:7a:
7b:29:32:76:1e:bb:c6:4d:f0:89:84:98:be:1e:cd:
cf:82:85:3e:20:64:21:58:3b:00:3b:5d:32:d9:0f:
73:66:0a:01:ca:78:dd:8e:18:ff:a9:fb:c1:de:f4:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:DD:01:65:47:5F:6D:A2:F1:E3:EA:43:62:55:C2:54:0B:02:75
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8indAWVHX22i8ePqQ2JVwlQLAnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1b:8f:04:3d:00:f9:a9:e4:21:81:04:e5:af:a6:b0:cf:37:
1b:9b:15:9a:6e:12:f7:0e:69:a8:df:2c:51:94:14:c2:b5:94:
c6:fe:29:a9:61:16:ed:f4:26:c7:ad:89:45:4d:2b:80:c1:9b:
c7:51:de:7c:bf:ce:1d:4d:39:09:c5:a1:64:c9:0a:48:95:5a:
9b:cf:7c:b5:ba:89:97:0a:19:35:9e:8f:72:bd:24:1d:f7:74:
a6:e5:ad:bb:d3:d0:e8:38:fe:e3:a1:7e:07:07:94:79:d5:f2:
53:6d:d0:b9:7f:45:f0:e7:61:0b:a2:42:b2:80:54:8e:54:62:
79:2c:68:40:f3:af:d5:2f:9d:85:c7:b8:1a:77:db:8d:d5:10:
25:a4:52:4f:75:c9:52:d3:10:0b:23:b4:42:df:c9:02:ca:c5:
4e:cd:c3:11:fa:ee:2e:e9:ca:c8:f4:d0:18:f5:e9:d1:d4:b8:
92:7f:22:46:bc:22:24:3c:3a:c8:1b:9f:bd:4a:38:ba:a5:d3:
ed:a5:1a:9a:c5:16:8f:3f:57:c0:13:81:d4:75:d9:d2:d2:a9:
cc:61:95:17:fd:3c:b0:f6:9d:1e:77:92:2c:a3:89:cc:a0:69:
fd:f8:ae:11:10:c0:a8:10:81:73:bb:26:20:e6:e5:a6:95:5e:
72:0f:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org