Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BkWCfwCwebOb_bxjkXdhYEsQV4E.roa
File: BkWCfwCwebOb_bxjkXdhYEsQV4E.roa (raw, json)
Hash identifier: Y/GJqLkP9UgYEKlMwlDHhVg4szUTIWzAZ8JLkd2PCvw=
Subject key identifier: 06:45:82:7F:00:B0:79:B3:9B:FD:BC:63:91:77:61:60:4B:10:57:81
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183F4D9675E6CDD7154177BDF1F425F92F5
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BkWCfwCwebOb_bxjkXdhYEsQV4E.roa
Signing time: Thu 20 Oct 2022 10:03:51 +0000
ROA not before: Thu 20 Oct 2022 10:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400529
IP address blocks: 109.122.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:d9:67:5e:6c:dd:71:54:17:7b:df:1f:42:5f:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 20 10:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0645827f00b079b39bfdbc63917761604b105781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:14:bb:9e:89:25:35:b6:03:65:88:e9:a2:
7f:b6:98:f8:f7:98:80:72:af:4a:36:d3:8a:56:ac:
52:21:8f:d9:b1:15:d2:1e:b2:75:96:94:ac:7a:d5:
37:d9:44:b2:21:a7:7d:a4:74:4d:0c:7d:ec:dc:85:
36:c0:1f:67:3f:d1:8a:16:9a:9b:0a:17:51:58:2e:
00:7d:aa:8f:6b:ed:a0:1f:df:8f:9e:22:62:fb:e3:
23:30:17:7f:bd:bf:8c:5b:7c:aa:0a:0d:f9:f7:d8:
b0:f3:8b:c2:69:7c:9f:0f:4f:ed:82:a9:6a:eb:c9:
a1:db:9b:9a:5e:5d:62:4f:dd:34:12:34:ef:fa:39:
b6:df:d2:2e:e7:dd:13:f0:25:33:0c:d3:7f:2f:a2:
7d:05:49:de:a7:2c:0d:7e:8f:d9:5f:69:c5:49:1d:
db:fe:63:8f:05:40:32:b8:73:15:6f:b0:c2:5b:9a:
ee:1b:0d:05:9b:ea:b9:5f:4e:0e:4a:cd:89:d5:a3:
ee:b7:ac:13:ce:b8:42:60:5d:f4:66:d0:fd:df:02:
3d:55:a2:b8:34:ee:9d:f8:46:bd:61:c7:1a:bd:65:
f9:94:c9:79:6b:08:51:51:bb:be:f8:bf:3a:b6:ad:
8e:2c:4d:d0:ca:23:d1:5a:7c:3a:18:23:7e:af:a7:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:82:7F:00:B0:79:B3:9B:FD:BC:63:91:77:61:60:4B:10:57:81
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BkWCfwCwebOb_bxjkXdhYEsQV4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2b:50:45:3d:bf:42:c3:78:63:c3:70:de:b9:14:c0:ee:b1:
95:d7:ca:6d:1c:db:9f:be:74:b5:36:52:ec:f2:5d:1e:4d:50:
87:88:31:70:fb:1c:c2:48:9c:76:2c:fd:16:e2:7a:a1:47:ac:
31:30:d2:9e:f4:a9:6e:63:e2:14:0a:4b:1f:12:5e:9d:cd:ac:
49:64:cc:b1:81:ea:cb:3a:f6:57:b4:3b:95:c3:b7:9e:c1:3b:
43:5b:fa:19:42:16:38:a3:13:70:7c:26:c1:63:4d:9f:c1:08:
27:e8:f2:ec:fb:aa:7c:d0:a7:b9:d4:3e:4a:8c:10:9a:c0:c3:
1c:0d:0e:a8:d7:07:46:0d:91:06:19:0a:26:75:b7:30:df:c8:
c9:57:75:8d:b0:0b:f8:70:8f:93:02:0f:fd:f7:e0:f1:12:58:
ab:2f:bc:99:8e:e9:02:99:8e:b1:12:bc:97:26:c2:14:b7:fd:
e0:ee:9e:47:ea:34:bb:9b:0e:01:2f:67:96:74:b2:59:ee:c3:
81:98:98:26:cc:e4:8f:ad:a9:73:a7:8b:87:54:7c:4b:18:93:
2a:78:16:c7:2e:31:ec:8d:81:58:4d:68:02:06:29:e6:b1:8b:
8a:f8:c8:97:04:c2:02:c2:f8:c2:a0:89:e2:e9:cb:6a:ee:db:
4e:73:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org