Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/FaVpwRFAhQLijQBtLeCv8yZYG-4.roa
File: FaVpwRFAhQLijQBtLeCv8yZYG-4.roa (raw, json)
Hash identifier: I0+tB2ahlQ2sdL3wAM/IhJ0dDxCv1KnBP37lHeX8XVY=
Subject key identifier: 15:A5:69:C1:11:40:85:02:E2:8D:00:6D:2D:E0:AF:F3:26:58:1B:EE
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183B652E2C74E9E5997A6578DDC4328C5FE
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/FaVpwRFAhQLijQBtLeCv8yZYG-4.roa
Signing time: Sat 08 Oct 2022 06:40:28 +0000
ROA not before: Sat 08 Oct 2022 06:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.206.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:52:e2:c7:4e:9e:59:97:a6:57:8d:dc:43:28:c5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 8 06:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15a569c111408502e28d006d2de0aff326581bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:46:ae:e1:36:a9:7b:54:f6:25:43:eb:cf:
32:23:08:7b:27:98:ad:97:7d:3d:ec:f9:7f:d2:33:
0a:30:c4:17:7f:1d:8a:be:8b:ef:3d:5e:ed:0b:58:
a9:81:40:3f:64:2f:92:07:8b:dd:3c:ef:f2:a6:53:
b3:35:8d:25:b4:ad:27:e0:d8:2f:1c:cf:6c:89:5a:
94:dd:27:bf:07:8c:68:8a:ea:ab:74:49:68:f2:60:
2d:f4:51:19:93:02:9b:0a:02:76:36:ef:71:a4:0e:
f7:64:97:4a:65:34:43:b7:96:a1:9e:56:e0:63:31:
9f:37:e0:38:6d:20:09:18:83:74:59:d5:8a:c6:ca:
6c:3b:ec:cf:0e:a9:22:78:fa:2d:89:11:79:41:05:
cf:55:39:62:c1:ef:a4:85:2a:c9:5f:41:de:50:dc:
73:53:6f:d1:45:15:6a:b5:b8:00:78:40:30:e4:94:
37:16:7f:49:4c:d9:f8:14:35:33:33:84:e6:c5:e0:
94:79:19:b1:50:8e:35:63:d3:76:1e:9c:87:91:4a:
c6:b7:e2:75:17:c9:65:32:5c:7c:73:d1:aa:6b:24:
f0:1a:b4:1a:32:d6:c0:c3:0b:3f:ec:a2:3e:9f:b6:
67:28:3a:cb:fb:35:de:58:dc:2f:54:7d:70:24:7e:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:69:C1:11:40:85:02:E2:8D:00:6D:2D:E0:AF:F3:26:58:1B:EE
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/FaVpwRFAhQLijQBtLeCv8yZYG-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.206.0/24
109.122.208.0/24
109.122.215.0/24
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
90:99:46:26:cb:a9:dd:9c:98:40:e5:90:a0:9f:92:eb:88:ed:
6e:da:3f:d0:62:8d:5c:e2:68:8a:71:e9:f5:c4:00:6a:4b:37:
47:28:c7:20:75:6d:56:83:2d:d3:8b:61:05:63:e3:52:dc:d9:
74:50:84:a3:e5:5c:d0:80:c6:60:fb:2c:8a:c5:5a:3f:d5:81:
1d:61:28:9f:85:cd:0a:52:bd:e2:a5:c7:b2:c0:17:9b:4a:35:
ae:92:dd:37:12:5d:fd:0f:b5:f3:ac:62:40:69:a7:02:d8:1d:
c2:fc:df:ba:cf:e1:fc:c2:8d:eb:1b:f2:a3:eb:39:10:48:49:
7d:59:96:15:37:af:34:1a:17:17:33:c2:26:71:19:2a:7d:26:
ba:95:1f:53:f9:16:5e:16:8e:cc:6f:d4:9d:25:aa:4a:20:4b:
69:c8:be:50:fa:4d:28:76:f0:e8:59:79:e1:fa:4c:d5:4f:c0:
4e:67:3b:80:48:13:52:c7:7d:25:7f:cb:5d:75:f7:f9:da:ec:
db:05:78:4a:cb:0a:47:e4:81:d9:9a:93:cb:7a:18:40:e2:99:
89:8a:df:4a:28:cc:6f:7f:0c:3e:06:ac:07:80:03:f9:ff:06:
4b:18:92:eb:47:7c:34:7a:85:e0:af:f0:79:b8:fd:ff:c5:77:
62:00:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org