Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/DcEKauwelgODorVgonmDa16O9vQ.roa
File: DcEKauwelgODorVgonmDa16O9vQ.roa (raw, json)
Hash identifier: KStxd0VO37peGYoQ1yb2+A/TOQbOC902uON0PTQuguY=
Subject key identifier: 0D:C1:0A:6A:EC:1E:96:03:83:A2:B5:60:A2:79:83:6B:5E:8E:F6:F4
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185432E3CDCE3F1913231738E6D6202C064
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/DcEKauwelgODorVgonmDa16O9vQ.roa
Signing time: Sat 24 Dec 2022 08:09:41 +0000
ROA not before: Sat 24 Dec 2022 08:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210030
IP address blocks: 109.122.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:2e:3c:dc:e3:f1:91:32:31:73:8e:6d:62:02:c0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 24 08:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dc10a6aec1e960383a2b560a279836b5e8ef6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:3b:f1:78:13:a5:65:7d:c2:12:2d:5b:03:
cf:94:72:82:c3:15:5d:db:1c:46:20:89:01:48:86:
d3:58:99:f0:f1:1a:67:20:be:02:1c:13:8c:c2:12:
b9:65:b6:4e:e5:e8:be:c4:fc:69:0f:31:58:bc:b1:
c7:7d:e3:49:9d:ad:de:c3:d0:94:a0:34:d2:8b:c7:
c4:b0:81:7b:b1:ba:c8:f9:96:0a:e2:28:5f:ee:7c:
51:f5:73:3b:46:b6:0d:bc:03:80:c2:d4:c0:b0:c4:
73:27:f8:a5:08:f4:43:fc:df:7f:b7:9f:f4:91:4d:
bf:43:f9:50:57:5c:03:2d:1d:46:69:9c:b5:13:2b:
e2:61:a9:74:0f:4e:cf:d7:0e:21:21:df:9e:7d:bd:
f7:0d:53:79:6e:3f:5e:22:b3:56:e0:c7:c0:80:f7:
d5:51:e7:61:d9:3e:58:fa:38:a2:92:30:2a:84:f1:
b2:3e:a7:f6:d5:a2:49:6f:9e:a3:23:eb:37:db:e2:
06:77:d8:74:cc:8f:8e:2f:d6:10:c7:44:37:44:ea:
9b:ff:8c:f5:00:81:6f:39:6c:b0:7d:d4:72:18:43:
7e:86:26:36:30:40:f8:95:0e:ca:7d:ef:a4:bd:36:
23:83:c5:7e:64:1f:32:18:a5:d6:8a:23:8e:0b:41:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:0A:6A:EC:1E:96:03:83:A2:B5:60:A2:79:83:6B:5E:8E:F6:F4
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/DcEKauwelgODorVgonmDa16O9vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.198.0/24
Signature Algorithm: sha256WithRSAEncryption
36:da:b2:5a:4d:3e:81:17:bb:39:62:23:6c:03:26:91:96:a8:
67:9b:f3:ac:50:c8:4a:24:c6:39:8b:dc:1c:07:8a:12:ae:93:
5f:42:ae:59:f1:bc:87:2c:67:f8:52:1f:aa:88:67:ee:28:70:
ea:c6:0d:df:1d:fb:2a:4c:cb:c3:21:24:7c:bf:1b:de:dd:7f:
4d:76:1b:2f:fb:71:ba:74:2d:76:0a:26:f0:db:11:29:c3:9a:
50:2b:e7:64:95:75:02:a9:54:0c:68:e3:18:c3:f8:6c:3a:9f:
2b:4d:be:cd:32:74:83:89:55:b8:e6:db:79:85:8d:a0:7f:51:
10:ec:6f:08:f2:a3:ee:9a:64:5e:f6:d6:a6:c2:bc:3a:41:d2:
48:a6:5f:bd:80:17:d9:38:11:c4:f9:87:57:14:51:fb:84:c9:
df:b4:86:cd:c0:fc:16:49:4b:66:29:f6:81:82:a3:5f:1f:04:
89:12:ab:5e:d6:5f:a9:a5:fb:e1:65:7f:aa:1a:e5:9f:02:4f:
f8:2c:cc:f6:6c:ce:08:17:c3:8e:40:dc:e2:ce:8c:f0:6c:cf:
8e:8e:b5:ab:c4:73:b9:10:39:40:a2:18:29:aa:b1:be:b5:48:
2b:68:8a:5c:02:2e:bd:8c:31:7f:ea:0c:fa:c0:6a:79:1d:1a:
79:71:3e:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVDLjzc4/GRMjFzjm1iAsBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMjI0MDgwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGMxMGE2YWVjMWU5NjAzODNhMmI1NjBhMjc5ODM2YjVlOGVmNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmA78XgTpWV9whItWwPPlHKCwxVd
2xxGIIkBSIbTWJnw8RpnIL4CHBOMwhK5ZbZO5ei+xPxpDzFYvLHHfeNJna3ew9CU
oDTSi8fEsIF7sbrI+ZYK4ihf7nxR9XM7RrYNvAOAwtTAsMRzJ/ilCPRD/N9/t5/0
kU2/Q/lQV1wDLR1GaZy1EyviYal0D07P1w4hId+efb33DVN5bj9eIrNW4MfAgPfV
Uedh2T5Y+jiikjAqhPGyPqf21aJJb56jI+s32+IGd9h0zI+OL9YQx0Q3ROqb/4z1
AIFvOWywfdRyGEN+hiY2MED4lQ7Kfe+kvTYjg8V+ZB8yGKXWiiOOC0EIgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3BCmrsHpYDg6K1YKJ5g2tejvb0MB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvRGNFS2F1d2VsZ09Eb3JWZ29ubURhMTZPOXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrGMA0G
CSqGSIb3DQEBCwUAA4IBAQA22rJaTT6BF7s5YiNsAyaRlqhnm/OsUMhKJMY5i9wc
B4oSrpNfQq5Z8byHLGf4Uh+qiGfuKHDqxg3fHfsqTMvDISR8vxve3X9Ndhsv+3G6
dC12Cibw2xEpw5pQK+dklXUCqVQMaOMYw/hsOp8rTb7NMnSDiVW45tt5hY2gf1EQ
7G8I8qPummRe9tamwrw6QdJIpl+9gBfZOBHE+YdXFFH7hMnftIbNwPwWSUtmKfaB
gqNfHwSJEqte1l+ppfvhZX+qGuWfAk/4LMz2bM4IF8OOQNzizozwbM+OjrWrxHO5
EDlAohgpqrG+tUgraIpcAi69jDF/6gz6wGp5HRp5cT7y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org