Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Hi50Z-wAqq1x9sq8AqCuxjJAAzY.roa
File: Hi50Z-wAqq1x9sq8AqCuxjJAAzY.roa (raw, json)
Hash identifier: LFKkIUWQo1xSg8Uh+DWtOgcPFPsvBuGM2Gw03DV0sz0=
Subject key identifier: 1E:2E:74:67:EC:00:AA:AD:71:F6:CA:BC:02:A0:AE:C6:32:40:03:36
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01851F0D7BBC069151DA5CAC64D63CF73B2A
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Hi50Z-wAqq1x9sq8AqCuxjJAAzY.roa
Signing time: Sat 17 Dec 2022 07:47:35 +0000
ROA not before: Sat 17 Dec 2022 07:47:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60699
IP address blocks: 109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:0d:7b:bc:06:91:51:da:5c:ac:64:d6:3c:f7:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 17 07:47:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e2e7467ec00aaad71f6cabc02a0aec632400336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:1b:72:84:0a:0e:62:9f:de:9a:21:4b:50:
9a:1d:46:26:2e:ca:e0:84:20:c2:fb:c5:cf:1c:52:
1e:5e:0f:cf:2a:1b:bb:47:74:32:36:4e:f1:9a:d7:
0e:e9:73:d5:23:25:c2:1f:b1:5c:63:02:02:4b:6e:
f8:f9:84:a1:4a:79:e4:f9:3e:7d:74:a1:b3:6e:75:
ed:3b:08:c4:a7:cb:0a:90:a5:1d:37:79:21:09:e8:
73:34:5e:74:51:de:2e:0e:9e:90:55:93:d3:4d:9b:
76:c8:11:c1:f0:e5:0f:9d:49:29:d8:e8:ca:ad:83:
fe:1c:f6:a9:6f:f4:5a:8f:3c:e1:44:69:84:3a:c6:
30:cd:7d:8b:1a:f3:a5:53:d8:55:6e:6c:ec:f4:98:
1b:e2:ee:27:41:12:f9:4c:52:ce:2e:13:f1:fa:3b:
02:28:03:ff:48:0a:f4:cf:1f:fd:47:1f:da:08:0b:
a8:bd:85:06:26:8c:4b:96:16:12:cc:28:15:8c:46:
ab:17:cb:ec:35:a0:81:b5:59:4e:01:e4:d3:0f:93:
a6:29:53:cc:59:8f:ae:5f:d6:4c:49:7a:02:56:cb:
92:fa:a9:a7:61:4c:66:54:d0:38:6b:41:07:85:c6:
59:93:a9:dd:6f:0f:33:b5:60:0c:76:8c:2c:8c:ef:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:74:67:EC:00:AA:AD:71:F6:CA:BC:02:A0:AE:C6:32:40:03:36
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Hi50Z-wAqq1x9sq8AqCuxjJAAzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:79:ce:0e:48:97:52:6a:a1:00:ed:21:65:14:6a:07:89:ad:
71:c1:43:69:56:fe:d8:72:f4:d1:f5:bc:0b:d4:17:93:59:28:
13:fb:ff:13:bb:63:fa:63:da:85:c6:c4:c6:f4:df:14:d7:96:
ba:0f:62:d7:82:98:1c:c6:47:de:8d:68:ba:43:78:68:76:61:
06:33:d8:cb:49:fd:82:12:23:b9:92:ae:15:79:72:24:09:d9:
88:56:3c:5f:6a:6e:63:2b:bb:93:88:8e:cc:8d:db:b0:55:7d:
9b:6d:7b:cf:c1:81:e6:9c:a7:da:a6:63:9f:a2:05:ec:56:fa:
20:3b:ec:31:02:12:50:ae:1c:ee:04:b5:2d:a4:f8:1f:e2:bd:
f1:93:e7:7a:15:7f:28:c9:6b:1a:da:ba:f4:85:f3:da:05:9c:
eb:5f:49:be:5c:ef:aa:30:77:96:7e:80:8d:b4:3e:a6:f7:7b:
af:cc:39:42:0d:03:ce:3b:89:25:70:66:fd:10:a0:b9:8c:35:
74:eb:99:34:d4:e8:0e:e0:d1:46:10:6e:00:db:35:cc:63:dc:
f5:e9:93:61:00:d1:46:3d:56:b3:38:aa:3f:87:4a:c8:28:db:
37:af:37:1c:ca:93:f9:d4:e0:4d:29:7e:75:61:e3:9d:bb:ec:
0b:f8:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org