Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/K8vCsS3U5WAVOKXCvbCLsElZaQk.roa
File: K8vCsS3U5WAVOKXCvbCLsElZaQk.roa (raw, json)
Hash identifier: T1CTcDNQHp3dMUt3kPXs+aw/OTJHh8SMmc1w/Rvomoc=
Subject key identifier: 2B:CB:C2:B1:2D:D4:E5:60:15:38:A5:C2:BD:B0:8B:B0:49:59:69:09
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 064849CC
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/K8vCsS3U5WAVOKXCvbCLsElZaQk.roa
Signing time: Sun 06 Mar 2022 07:30:28 +0000
ROA not before: Sun 06 Mar 2022 07:30:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 185.207.4.0/22 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.218.0/23 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105400780 (0x64849cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 6 07:30:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bcbc2b12dd4e5601538a5c2bdb08bb049596909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:d4:69:40:f6:17:55:86:77:d4:17:6e:75:
a9:bc:f8:8e:c7:c3:5a:5b:2e:64:c4:1d:7f:23:cb:
4e:c5:58:c7:ff:18:c2:ce:b5:5d:1d:69:c6:3e:a6:
b5:3d:86:15:b9:e0:42:64:f2:af:4b:e3:ad:46:f8:
9b:4c:4e:25:96:99:8f:ba:a1:49:ac:d6:87:ce:d7:
e1:9e:5c:37:f8:2a:e7:06:50:0b:94:d4:79:a2:9f:
3a:1d:67:13:3f:3d:19:84:84:03:29:6f:ec:e0:4c:
9c:da:bc:28:7c:05:c4:dd:13:8b:ed:1c:ec:e2:bc:
3f:b9:94:2a:9e:3a:79:82:44:b7:41:1c:2f:71:11:
4a:54:94:d6:f2:e0:0b:92:03:a2:1c:5c:ab:93:d2:
2f:ed:f5:b0:19:d2:20:26:da:27:30:07:35:e6:81:
01:a3:46:06:4a:cc:fa:72:b0:d2:92:d6:a5:49:ac:
df:56:8d:62:09:90:d0:c5:82:45:ca:2a:e9:6e:2d:
e4:3e:65:8c:3b:3a:7a:ac:58:0f:f0:80:81:20:7f:
47:78:4d:b3:0b:8a:4c:df:65:d0:d9:1f:cc:ac:3c:
28:96:53:1e:99:7d:19:b6:95:5a:d9:02:43:21:3c:
9d:d9:04:03:fd:ae:26:f7:cd:b2:fd:e1:ba:6e:4c:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:C2:B1:2D:D4:E5:60:15:38:A5:C2:BD:B0:8B:B0:49:59:69:09
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/K8vCsS3U5WAVOKXCvbCLsElZaQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.216.0/24
109.122.218.0/23
109.122.223.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
71:89:58:70:5b:ac:db:1a:4a:88:b8:ea:01:c7:ad:25:b1:43:
1b:fc:5e:4f:01:bc:3f:38:22:8b:83:02:0d:47:bb:d4:9c:bf:
a3:48:25:d4:da:5d:67:b9:d5:64:52:cf:c4:d9:ec:93:b5:34:
c7:8f:9f:36:3e:0e:b1:e6:f6:c2:d7:43:83:61:c4:46:f7:c3:
73:dd:07:c1:c3:03:52:29:3a:d3:14:fc:03:c0:f1:43:55:50:
83:65:68:61:39:8a:9d:df:ab:2e:52:18:80:e8:a9:40:f8:e8:
f4:b3:9e:13:c2:0e:d9:0a:99:2e:c8:a3:7d:4e:87:2e:f3:f5:
58:3f:d7:bf:61:f3:17:d0:6c:c1:ba:e2:d2:67:b2:fa:c8:e6:
d7:7a:e6:b0:f9:e2:3f:05:0d:c5:ac:34:ff:33:39:51:57:81:
09:bf:e8:05:c4:e8:fc:eb:29:71:cd:28:7d:54:9c:e6:4d:51:
77:00:29:32:82:8f:7f:70:cf:9c:80:b5:45:41:45:ee:eb:17:
27:ed:78:81:75:90:05:6b:7c:77:ff:dd:bc:41:5a:e2:5a:6e:
4c:00:a5:6f:e6:27:62:dd:5b:55:fc:6c:d7:81:90:61:48:96:
1c:1d:28:c5:b6:a7:52:ca:78:cb:53:70:14:8a:1d:e4:5e:a4:
0f:1a:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org