Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HUT4QeRcIT7B0eedQI7XMpJnzmM.roa
File: HUT4QeRcIT7B0eedQI7XMpJnzmM.roa (raw, json)
Hash identifier: FcRD0Y380q3wh2xFEI/caDNbsLGz0ftKb2zSo6lsqWU=
Subject key identifier: 1D:44:F8:41:E4:5C:21:3E:C1:D1:E7:9D:40:8E:D7:32:92:67:CE:63
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 069A9675
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HUT4QeRcIT7B0eedQI7XMpJnzmM.roa
Signing time: Fri 08 Apr 2022 07:47:01 +0000
ROA not before: Fri 08 Apr 2022 07:47:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.200.0/22 maxlen: 22
185.207.4.0/22 maxlen: 22
109.122.205.0/24 maxlen: 24
109.122.209.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110794357 (0x69a9675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 8 07:47:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d44f841e45c213ec1d1e79d408ed7329267ce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:ec:57:8b:5d:07:0d:97:6e:d6:af:42:3c:
93:5c:88:12:8c:95:40:95:f4:8c:e6:94:18:60:90:
2d:aa:18:fa:bc:60:fe:0a:fb:a2:15:ab:8b:af:fc:
83:6b:60:b8:40:ff:a5:6e:a8:49:10:40:4b:27:20:
e6:9c:f7:4d:9e:d0:9f:87:05:62:30:2e:21:cb:90:
a8:0d:60:44:89:13:7a:cc:84:04:ca:5b:04:64:5e:
17:48:53:d5:22:7c:bb:a9:36:bd:91:b1:c8:68:59:
e8:f4:c9:99:e1:61:8c:7d:c5:40:af:6f:48:85:89:
05:24:ff:0f:52:23:02:16:96:5e:f5:9e:c4:3b:50:
71:4d:fd:62:3b:08:d4:8e:7e:6a:98:cf:50:c4:9b:
49:47:f5:5f:82:31:50:02:81:2f:11:6b:31:ee:a5:
57:19:78:bf:e7:dd:b6:89:15:9d:53:d2:af:69:ab:
56:b1:02:06:84:12:d7:04:3a:a2:62:bf:47:ea:5e:
6d:16:a7:d1:f6:da:d2:db:ba:fb:a2:ad:97:0b:37:
dd:89:63:ed:8a:21:b6:12:d7:14:25:e3:e4:b8:cb:
d6:a4:ce:e2:df:cf:b8:97:5e:53:9e:a8:3e:7e:f3:
2f:1d:79:2a:6e:47:ae:04:32:cc:d0:61:de:8b:54:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:F8:41:E4:5C:21:3E:C1:D1:E7:9D:40:8E:D7:32:92:67:CE:63
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HUT4QeRcIT7B0eedQI7XMpJnzmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.205.0/24
109.122.209.0/24
109.122.216.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:0c:cd:89:40:3a:97:d6:f5:23:d8:4f:2a:5f:b6:d9:8d:2e:
7d:e3:83:73:92:1e:a1:d1:b5:ec:1d:b0:22:46:d3:f9:fe:90:
ca:c2:de:cc:ff:64:ba:06:e1:09:e4:97:9a:27:bf:a5:83:23:
36:65:6e:f9:32:92:8f:a8:69:dd:c0:cd:4b:bf:64:d8:70:58:
3b:a7:ac:12:9f:6a:86:c2:0b:96:9b:68:9a:60:74:36:dc:03:
61:65:7f:fd:8f:01:d5:2a:b1:48:ac:b1:2e:ad:58:05:17:9b:
cc:6f:37:f1:e2:ec:ce:cd:64:f4:72:58:5c:9e:d2:9f:67:45:
9d:c1:47:5f:c6:a1:bd:e2:f9:de:b8:4c:94:00:d5:4b:62:ec:
db:08:8c:51:8b:3c:9a:a6:88:93:01:e9:5f:b8:d1:4c:d8:9a:
fa:3c:47:90:2d:ec:48:b9:a9:a8:da:fd:d8:81:24:ae:28:33:
63:e5:63:7f:f3:43:ca:65:52:7d:28:cf:6f:ef:1c:d9:66:e9:
85:65:10:b3:b5:9a:82:c1:e4:6b:98:af:30:3e:b2:23:3f:07:
76:3a:63:d9:ea:91:95:1e:48:18:6e:6c:f7:7b:85:d2:eb:b2:
f0:29:45:ff:5c:c3:65:1d:e3:ab:19:af:d7:e3:0c:36:35:15:
2c:21:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org