Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HUw4OC2ua3Dx8eRc7xD66VIEFQA.roa
File: HUw4OC2ua3Dx8eRc7xD66VIEFQA.roa (raw, json)
Hash identifier: 5hqaMi+X6dvkVjVvOAKYm/yeYezazWQL6t6uecN2+Xo=
Subject key identifier: 1D:4C:38:38:2D:AE:6B:70:F1:F1:E4:5C:EF:10:FA:E9:52:04:15:00
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183C2FA2388BB27A20C65DED4EDEB13F263
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HUw4OC2ua3Dx8eRc7xD66VIEFQA.roa
Signing time: Mon 10 Oct 2022 17:38:36 +0000
ROA not before: Mon 10 Oct 2022 17:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 109.122.203.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:fa:23:88:bb:27:a2:0c:65:de:d4:ed:eb:13:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 10 17:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d4c38382dae6b70f1f1e45cef10fae952041500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:7e:98:a4:73:2e:c7:7f:e3:21:b0:a1:22:
3b:18:c8:0f:2c:10:a1:64:e1:f5:de:d1:0c:8a:d3:
12:c9:0f:ce:77:c6:bc:bb:a0:c9:16:30:96:fc:48:
83:3a:12:7d:c5:79:c9:50:fe:9a:74:4e:df:7c:ca:
bc:19:14:11:28:10:71:dd:73:06:ad:5a:8f:c4:3b:
4b:05:a5:94:a3:cc:25:4e:a6:d6:c0:cb:95:bf:4d:
d4:10:dd:48:0c:28:a4:56:0a:55:06:c3:e0:9d:47:
47:82:88:8a:57:98:05:99:db:01:81:d8:35:af:c9:
16:a1:74:8a:7c:ba:05:52:d5:a5:e2:e2:8e:05:7f:
61:49:d3:eb:de:69:2e:8c:27:a1:b7:bd:e1:76:38:
83:ef:1e:da:e6:44:de:67:5b:5e:60:ea:b8:1d:a6:
f2:aa:63:ff:6f:0e:32:d2:33:7f:b8:e8:2c:42:fb:
4a:3b:1b:2f:10:34:47:f0:0f:7f:34:ef:17:62:10:
66:c0:93:2d:ea:42:8d:75:57:b1:8b:d8:e8:76:e9:
26:85:f5:40:d1:d1:0a:92:f0:71:2b:29:18:9a:50:
02:e7:10:36:bb:b0:94:5c:99:7f:d5:b9:de:86:3b:
04:d5:8e:29:66:0c:8f:68:1f:6c:8c:54:95:53:34:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:38:38:2D:AE:6B:70:F1:F1:E4:5C:EF:10:FA:E9:52:04:15:00
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HUw4OC2ua3Dx8eRc7xD66VIEFQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.203.0/24
109.122.211.0/24
Signature Algorithm: sha256WithRSAEncryption
92:66:b3:d4:f0:d6:06:c4:ac:93:9a:76:eb:7f:14:a7:69:5d:
67:ee:5e:43:ed:ec:4d:e3:4f:c1:20:c8:f2:5b:b2:54:32:d1:
1c:ed:96:dd:4b:72:68:9a:8f:c4:40:9b:6f:6c:1e:b4:a0:40:
e7:7c:3c:30:ce:58:82:8c:61:92:03:1c:31:eb:8b:6e:53:c4:
4a:da:b9:91:70:40:ff:70:8b:9c:9d:ca:2d:5d:8b:6f:53:79:
82:20:83:da:35:0c:49:ce:a7:2e:d6:49:93:4a:72:e9:fe:9d:
6d:24:7a:3f:91:8d:91:68:d0:17:a3:94:68:af:83:b5:07:d9:
2b:b0:1e:5a:36:9a:fa:3a:fb:be:98:3f:09:d6:0c:91:0a:d3:
af:7b:9c:ed:73:0c:69:77:cc:61:19:e1:d0:5d:75:a4:66:77:
b4:44:40:b3:b7:93:22:84:de:97:8f:8f:3c:a2:2c:3b:d4:08:
7e:4e:f3:74:51:79:bb:dc:64:ca:ea:1e:86:76:ec:ec:7e:19:
8b:15:34:61:9c:90:4c:48:75:71:67:6a:d2:ec:f3:a7:22:b8:
7c:e1:e3:73:96:77:23:ff:68:e1:44:be:a7:36:66:c7:7c:d9:
fe:df:48:ad:2b:82:df:b0:e0:69:7c:26:94:a3:50:d9:ca:8e:
c4:36:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org