Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BsCd5znqAYctLGjywK5AZP7EuGM.roa
File: BsCd5znqAYctLGjywK5AZP7EuGM.roa (raw, json)
Hash identifier: rK75yvSCe8qZrs1IE2dNCIGifOIqSxn6rOPorEscfW4=
Subject key identifier: 06:C0:9D:E7:39:EA:01:87:2D:2C:68:F2:C0:AE:40:64:FE:C4:B8:63
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B53366162537E41273DFDBECDB05C
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BsCd5znqAYctLGjywK5AZP7EuGM.roa
Signing time: Sun 01 Jan 2023 21:44:45 +0000
ROA not before: Sun 01 Jan 2023 21:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:53:36:61:62:53:7e:41:27:3d:fd:be:cd:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c09de739ea01872d2c68f2c0ae4064fec4b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:c5:4f:2c:dc:a6:1a:46:51:d5:bd:e5:19:
62:40:d6:6c:65:ca:76:38:2b:44:89:f9:ab:ca:79:
8e:c6:b6:25:ee:41:48:11:58:5c:72:03:af:65:d0:
35:4a:fc:5f:d2:5e:9f:10:c1:3a:36:11:e9:d8:e1:
da:dc:95:39:48:0b:4e:f0:07:43:4b:fe:a0:6c:d8:
5e:11:73:c1:72:f8:d8:03:4b:c9:10:e0:dc:21:72:
81:0f:8e:21:3f:10:35:0e:6c:49:3b:3b:d7:15:4a:
07:fb:67:66:af:2a:2f:1c:cb:61:86:e8:f9:23:64:
aa:91:9d:b8:03:ae:d6:02:ef:d5:e5:9f:97:49:1d:
c9:e8:0c:e9:08:51:cf:7b:8e:84:9f:8e:7f:25:de:
3b:76:a7:ac:7b:9b:bc:de:46:eb:b9:ac:b8:20:c6:
80:c2:ec:9c:4f:bb:62:a9:97:3b:37:3f:d6:7a:c1:
7e:8c:68:cc:b2:1f:83:c3:f4:75:ca:d8:19:c9:8a:
0d:2c:ad:c7:83:f0:c0:ba:a8:b3:b4:7b:de:6e:0c:
9d:52:b2:08:07:7c:42:88:de:75:ef:24:7b:d1:c3:
05:7d:52:71:bc:c5:8a:60:d3:cf:72:ec:b0:64:bc:
33:72:75:52:1a:31:03:7f:52:29:9f:80:70:7e:0b:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:9D:E7:39:EA:01:87:2D:2C:68:F2:C0:AE:40:64:FE:C4:B8:63
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BsCd5znqAYctLGjywK5AZP7EuGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ab:82:76:0e:a4:38:be:35:66:2c:86:5d:3e:d8:f4:ba:5d:
7b:08:7c:bc:1a:8e:a3:bf:70:34:27:06:b0:09:5b:57:83:03:
a9:04:3f:e5:17:3b:3a:5f:49:51:d0:a8:cd:31:c1:66:f5:a6:
6c:ee:05:2a:9f:38:84:33:2f:e1:c8:93:4e:fa:91:70:98:c9:
32:bb:c7:45:88:36:9e:5d:49:a7:dd:85:58:9a:12:51:82:6a:
26:5d:68:d8:59:81:cc:95:a9:78:61:40:8b:d8:37:4e:d5:ed:
ba:e1:b3:eb:2b:d8:d2:6f:5d:6e:b1:2a:65:e8:3a:b2:11:00:
95:49:31:72:34:ed:74:ca:4d:83:fc:23:d3:1c:e6:c0:8b:a8:
2c:a1:4a:8a:0f:ed:f8:07:e0:43:bb:24:48:80:77:3d:64:14:
d0:5b:89:f6:03:14:7c:98:bf:f1:ea:59:6d:b4:03:23:4f:31:
e6:a3:8f:ac:c0:3f:0f:ab:51:db:6f:2a:17:31:85:07:ef:76:
e2:d6:32:01:6a:49:65:eb:6e:11:a2:a9:d2:91:4f:3f:12:07:
76:e1:29:c9:d4:61:c6:e2:55:ba:4c:b6:8c:f9:10:32:ff:92:
4f:65:d8:c9:f6:3e:8c:73:eb:76:e4:d9:ec:35:3d:f2:6d:a4:
dd:02:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org