Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/94LaV56okVO5944XhnaGoCGWDJ8.roa
File: 94LaV56okVO5944XhnaGoCGWDJ8.roa (raw, json)
Hash identifier: kJZ80NuSLpC0zRnb4E1Hs0M4p+oIwPpcyjq45pYrSyU=
Subject key identifier: F7:82:DA:57:9E:A8:91:53:B9:F7:8E:17:86:76:86:A0:21:96:0C:9F
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183A80A01EC261EFC776116FD353FDD615C
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/94LaV56okVO5944XhnaGoCGWDJ8.roa
Signing time: Wed 05 Oct 2022 12:06:11 +0000
ROA not before: Wed 05 Oct 2022 12:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 109.122.205.0/24 maxlen: 24
109.122.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:0a:01:ec:26:1e:fc:77:61:16:fd:35:3f:dd:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 5 12:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f782da579ea89153b9f78e17867686a021960c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:68:f2:54:41:51:d4:fa:88:92:4f:77:c4:fe:
cc:10:57:62:50:60:87:11:65:db:46:8b:0e:03:5e:
a9:f5:d3:a6:41:e2:8a:96:15:29:1d:13:3d:9a:c1:
cc:7a:b0:cb:e0:2c:42:26:49:5e:61:03:76:8d:c8:
a9:21:6b:d6:02:2f:5f:ec:40:24:09:3a:e2:bc:c6:
8c:28:cc:f9:90:d3:02:1a:ee:36:dc:ba:95:b8:18:
62:c0:16:09:ad:18:42:a6:8d:91:f2:f3:cc:8f:e4:
1f:70:8e:26:f0:20:91:ae:cf:69:6d:9a:1b:06:7a:
cc:03:ff:55:75:2e:62:2d:c3:c1:21:a8:fb:2c:fa:
dd:ae:c1:76:37:53:4b:b4:1c:b4:96:b0:3a:d5:46:
6e:ed:47:55:53:cb:c9:e1:ff:7c:bd:c2:ce:50:95:
ba:cd:13:0c:00:52:57:63:6d:21:bf:ce:6d:c6:56:
ad:8e:9f:0e:99:86:24:42:e4:25:60:ce:b5:48:39:
b7:e0:b6:6a:50:56:b3:97:b9:9f:78:19:75:37:93:
9e:24:34:91:5e:1a:49:a4:88:d3:94:21:86:b3:28:
a4:ec:73:b6:f7:55:40:2c:65:8f:d5:a6:ca:ce:cb:
1f:ec:6d:9e:be:27:3b:0d:3c:e0:df:eb:09:b5:97:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:DA:57:9E:A8:91:53:B9:F7:8E:17:86:76:86:A0:21:96:0C:9F
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/94LaV56okVO5944XhnaGoCGWDJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.204.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:9f:23:a2:5c:7d:14:9c:72:d0:db:77:96:3b:1b:0f:0f:5c:
95:16:19:d2:d7:4f:82:72:11:d5:5c:7d:82:e3:27:6a:fe:9e:
39:ee:9a:e0:29:f8:22:86:03:d7:06:9e:df:b8:2c:ff:94:2d:
7f:13:d4:3f:13:fe:28:c6:19:66:d6:09:0d:3f:12:e2:a2:df:
a8:c8:4d:6b:45:38:06:e2:5c:44:a2:26:1f:75:6e:80:13:43:
f4:1b:40:d0:34:a8:43:ca:78:c2:38:7d:11:94:a9:e5:af:0a:
a5:d9:1c:fd:c4:4c:32:6f:63:76:35:39:99:db:bb:48:14:31:
5a:6b:35:ad:b8:d5:51:d2:dd:83:fc:38:a1:9f:95:60:6a:1c:
be:9b:d8:3f:b5:4d:82:7d:c0:da:f1:13:2d:d5:28:ff:06:de:
f8:72:60:cf:75:52:c3:e2:d6:02:1f:3c:f0:12:bd:0f:78:17:
7e:a0:e5:74:d2:a1:99:af:fd:ab:1b:90:1b:0b:35:b5:3a:ab:
49:57:48:37:96:85:b3:20:97:58:30:00:eb:6c:cf:e4:e7:ea:
39:af:41:fa:f1:ed:9d:c6:62:51:80:8c:06:24:07:0a:13:f6:
ad:a9:74:6a:3d:9a:20:d1:cc:31:0d:8d:df:29:14:b7:7e:c6:
c0:6e:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org