Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/A4e_-fk4gor97DzU9aXepX12kEE.roa
File: A4e_-fk4gor97DzU9aXepX12kEE.roa (raw, json)
Hash identifier: ucmH9cpi5X0V4vXsSRs57PQ8RROvd0jOslWzPmsje4U=
Subject key identifier: 03:87:BF:F9:F9:38:82:8A:FD:EC:3C:D4:F5:A5:DE:A5:7D:76:90:41
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B549342F3D0D7A64232527620A2A1
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/A4e_-fk4gor97DzU9aXepX12kEE.roa
Signing time: Sun 01 Jan 2023 21:44:45 +0000
ROA not before: Sun 01 Jan 2023 21:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60699
IP address blocks: 109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:54:93:42:f3:d0:d7:a6:42:32:52:76:20:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0387bff9f938828afdec3cd4f5a5dea57d769041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:eb:96:9e:74:5a:65:70:68:dd:5e:f4:fc:
03:32:bd:67:cc:13:96:d5:6a:a9:08:dc:0c:b5:88:
d6:02:de:87:4f:11:c3:65:ef:67:9e:88:90:83:bb:
b7:e5:20:a5:e5:b8:6f:c6:ba:45:95:1c:8b:ef:ec:
66:0d:47:ea:fb:b1:b4:ad:3d:f8:57:7c:2e:85:12:
d7:c2:e5:3f:4d:66:7d:ce:9d:f1:37:01:1c:a2:e2:
fe:2b:6a:38:85:aa:95:48:ad:6b:c7:37:45:77:c4:
94:96:b6:47:21:93:c2:84:92:1e:02:7e:ea:ca:22:
fb:5b:ee:ab:77:80:01:20:91:09:51:6a:88:f8:b5:
cb:6a:a7:6d:a2:bb:c2:7a:63:5c:07:eb:58:04:4b:
6e:1c:7b:10:30:d3:a0:b4:86:4f:41:fa:ff:ac:d3:
96:ce:63:19:1f:f3:72:88:d3:d3:e3:82:1c:92:f3:
8f:bb:18:0e:19:da:48:2b:2a:7e:3a:8b:57:92:ed:
cf:5a:68:88:63:af:a9:6e:c8:dd:d4:c8:5a:68:d5:
96:ed:47:ae:5a:cb:c9:79:94:da:28:2d:04:b4:a7:
71:b0:c9:e9:1f:dc:68:dc:f7:9a:78:f1:54:17:c7:
7f:2b:3e:e9:4f:d7:25:55:0f:40:73:8b:6a:49:32:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:87:BF:F9:F9:38:82:8A:FD:EC:3C:D4:F5:A5:DE:A5:7D:76:90:41
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/A4e_-fk4gor97DzU9aXepX12kEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
27:39:c5:4e:fc:8f:62:d9:b6:07:13:be:82:93:0e:f6:a8:37:
27:31:89:b6:ea:02:1d:98:84:13:a1:97:0e:f7:0a:09:72:60:
d5:53:72:b9:13:fb:07:71:ab:84:92:7a:f8:b9:c4:e0:fe:15:
50:3e:78:f9:cd:1f:25:c3:e6:f1:4d:01:c0:64:7a:ec:a3:f5:
cf:f1:70:01:8f:d8:eb:10:af:9e:3a:33:15:0b:60:75:a2:58:
44:b3:bb:c4:e7:bb:15:3b:97:b9:49:aa:3b:78:4b:90:60:10:
b9:53:eb:05:02:97:53:68:f9:fd:6f:cd:dd:61:ee:bb:99:08:
5f:db:8c:39:38:18:52:34:e4:d7:79:8a:02:3b:b4:b1:7b:ff:
31:52:a7:dc:12:06:e5:04:3d:44:b4:6a:9d:6f:ad:de:fa:3e:
82:6f:17:e3:60:6b:5a:94:f9:c5:c3:73:21:d3:77:9e:43:69:
e1:ef:ee:60:c9:c4:f1:1c:5a:3a:91:ed:0e:78:1a:b4:19:21:
fd:19:b9:64:7e:dd:2b:e2:1f:af:41:c9:bb:1a:a9:8c:3d:6f:
2a:15:3f:fa:fe:6a:59:61:f8:55:8f:f2:50:03:8a:b3:e8:58:
f0:1f:a6:01:6c:f5:40:99:de:fe:a7:93:b5:15:62:cf:df:02:
57:a9:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org