Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/MjQb0h4vt9qBjN9sElDF5gx5cws.roa
File: MjQb0h4vt9qBjN9sElDF5gx5cws.roa (raw, json)
Hash identifier: sjeF8U0XBJ4rca2QT+ZAUoo8AiC84nm0Vb1q/18Vttk=
Subject key identifier: 32:34:1B:D2:1E:2F:B7:DA:81:8C:DF:6C:12:50:C5:E6:0C:79:73:0B
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 070B4CA4
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/MjQb0h4vt9qBjN9sElDF5gx5cws.roa
Signing time: Tue 24 May 2022 06:35:29 +0000
ROA not before: Tue 24 May 2022 06:35:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 109.122.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118181028 (0x70b4ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: May 24 06:35:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32341bd21e2fb7da818cdf6c1250c5e60c79730b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:b0:ad:ef:e4:cd:a9:ca:b5:bc:c3:88:92:
41:a3:4b:25:99:5d:c2:1e:51:4a:bc:2d:e5:e3:9d:
ab:d0:ce:19:b3:17:18:c9:c8:cf:b6:8b:52:e8:9a:
41:cd:46:9a:1d:5b:66:e8:83:09:e9:0d:10:84:cc:
21:09:ab:b6:22:92:08:4c:a2:c6:e4:2f:5c:ac:fa:
b5:a4:e1:96:9b:7c:3d:4c:a7:94:0f:b8:11:b1:46:
6c:33:d7:57:29:1c:b3:93:c5:48:54:83:96:b0:35:
e7:9c:2c:e5:15:42:ba:0c:eb:3c:47:6a:ad:bd:a6:
76:41:cb:ef:99:19:2f:82:d4:ef:b7:6a:bd:86:68:
85:d4:ab:7c:19:f5:00:d7:f0:30:8b:69:7e:8c:c7:
e5:16:6d:1c:a5:12:e9:59:09:63:7e:e3:23:2a:73:
32:34:8d:15:be:3a:be:b9:7d:89:8c:43:c6:8d:cc:
c2:68:db:5b:3c:fe:21:dc:81:c6:85:4c:95:3a:b5:
79:66:a6:d9:21:8c:1d:a6:e7:b5:8f:88:49:22:60:
ff:91:60:3a:77:d4:33:22:66:7f:51:ba:8a:2c:b6:
ec:22:e6:a1:9f:c7:20:59:f3:b7:8f:57:07:d9:65:
28:ed:f5:94:20:5b:cc:05:57:b3:49:ee:16:a3:b4:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:1B:D2:1E:2F:B7:DA:81:8C:DF:6C:12:50:C5:E6:0C:79:73:0B
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/MjQb0h4vt9qBjN9sElDF5gx5cws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4b:21:01:18:a7:94:89:cc:2b:3d:8c:8a:72:35:a5:73:a7:
26:78:90:e8:ea:fd:4c:81:67:28:f6:7d:b6:6b:c3:38:43:56:
5f:10:07:32:af:43:a9:85:75:de:37:7f:f2:2c:65:78:13:e6:
e8:ab:9c:20:b9:ab:a3:fc:21:0c:18:bf:71:7e:31:c2:94:0a:
41:55:bd:2e:c1:23:90:4e:ef:24:be:87:fe:99:f3:1d:20:ce:
d1:a8:e4:c4:38:e4:40:1f:13:80:e4:da:18:4a:5d:f0:7d:e0:
47:64:ed:8d:f7:26:38:ce:28:50:63:60:14:79:80:3a:33:ef:
62:dd:bb:b1:4b:e2:92:27:ed:da:4b:eb:c6:24:f5:df:7b:99:
22:a7:e4:34:7c:5b:72:4f:57:b3:19:bc:3b:bf:18:54:c8:23:
4b:fc:d3:64:40:81:7e:36:c4:b6:0e:7b:e0:87:76:cc:bc:57:
01:2c:ea:64:86:ae:a6:0c:a6:7d:ea:ec:c4:da:e2:5c:c3:4e:
3c:21:02:08:fb:d5:65:8d:bf:9f:3d:e9:3c:2a:f1:7c:d7:cd:
b6:36:43:5a:f4:64:56:62:03:38:b3:d4:5f:c7:b1:b5:4d:cf:
e0:a2:24:77:80:a4:2c:79:b4:2f:5d:a9:60:63:66:e4:b2:26:
28:14:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org