Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/9GXaF4sVj7awwzEpdtoj5W8W810.roa
File: 9GXaF4sVj7awwzEpdtoj5W8W810.roa (raw, json)
Hash identifier: elj1nCNnSQ3WENDN3+or3e4ZnNB4jmsuAeaqCjLTs0E=
Subject key identifier: F4:65:DA:17:8B:15:8F:B6:B0:C3:31:29:76:DA:23:E5:6F:16:F3:5D
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018460FDEB9C14D22E939FD61039C7C85C8C
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/9GXaF4sVj7awwzEpdtoj5W8W810.roa
Signing time: Thu 10 Nov 2022 10:02:44 +0000
ROA not before: Thu 10 Nov 2022 10:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:fd:eb:9c:14:d2:2e:93:9f:d6:10:39:c7:c8:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 10 10:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f465da178b158fb6b0c3312976da23e56f16f35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:50:2f:de:48:9f:9c:85:2d:6f:bf:2f:f9:
9c:a9:b7:f5:d2:d4:3f:f3:5d:35:4a:84:f9:42:31:
49:51:a3:3f:1e:b1:d5:cd:e4:66:20:b4:1d:5a:9a:
b1:7c:48:50:59:7e:f6:60:29:ec:ba:3a:ee:52:65:
55:b5:56:ac:8c:12:89:e1:21:39:77:52:29:1b:69:
a1:6a:cc:9c:ea:39:4a:d5:62:c4:d9:81:24:1d:ff:
36:cd:23:e0:e8:c5:96:1f:84:c1:33:d9:7b:ae:c9:
86:7a:bd:df:3f:36:85:6a:20:37:4a:cb:76:46:77:
12:e7:b9:34:6a:4d:eb:73:46:cb:61:96:56:0f:8a:
f0:ab:70:37:43:c9:1b:e6:9e:6f:25:39:8c:d6:ee:
41:15:39:90:d0:43:24:bd:f3:c3:3b:7d:40:d3:a7:
a0:76:e0:6d:61:3c:fd:ba:c3:92:e6:43:0d:70:c9:
49:05:d3:f6:96:ef:7b:1f:58:35:1e:d0:49:59:33:
4c:c1:1b:32:1a:ab:c3:c0:34:7b:0c:cf:47:b9:41:
bb:73:40:c8:01:5d:ea:de:2a:59:07:23:5c:f2:0d:
36:2d:6d:bc:d3:03:27:c4:8a:f6:4c:e6:c8:fe:40:
c5:24:f3:3b:e2:80:83:d2:51:10:be:82:55:17:73:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:DA:17:8B:15:8F:B6:B0:C3:31:29:76:DA:23:E5:6F:16:F3:5D
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/9GXaF4sVj7awwzEpdtoj5W8W810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:71:7a:61:04:18:49:b2:11:57:54:c8:ca:cc:1f:c3:b5:fd:
37:56:03:69:2d:6d:f9:bc:ef:ce:8b:d1:f2:f0:de:b4:80:70:
43:4b:33:3b:6e:09:e1:b7:8e:b4:62:d6:20:a5:42:d3:de:f6:
9f:06:e1:4f:4b:91:3b:fc:23:88:91:ee:fa:1f:52:b6:0f:fa:
d4:39:b2:77:b9:16:24:14:02:76:41:04:d3:56:94:e5:97:d2:
49:93:1e:35:68:9f:2a:be:b3:2d:d2:74:9f:2c:32:75:5d:56:
b5:3d:d8:27:32:d6:a4:61:a4:34:1d:2f:ad:0d:ae:63:be:95:
ee:3c:f0:ca:50:b1:03:35:ab:79:8c:ba:7e:cf:94:bc:b0:61:
c2:35:43:ab:a9:ee:1c:02:17:d1:83:38:62:0e:1a:f6:1d:c6:
6c:2c:33:5b:95:f9:6f:58:ed:33:67:34:36:87:02:b8:ea:06:
d5:05:a2:35:2d:ff:49:57:f1:cb:17:7d:0f:8e:00:c0:08:cd:
cb:28:52:4b:06:90:1d:88:40:ab:f6:20:5c:36:95:fa:ee:f3:
c5:7a:f3:07:9d:93:3f:7e:8d:12:39:3e:f5:89:c2:4d:cd:75:
bd:a0:52:64:0b:de:ff:d1:68:35:68:7c:eb:6c:d0:32:8e:fe:
49:0c:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org