Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/NwqXbdv6HG92s1xwHwoIfhmDsdc.roa
File: NwqXbdv6HG92s1xwHwoIfhmDsdc.roa (raw, json)
Hash identifier: 4w18l0By/o5wkl8G/XLUcu5icrDJzCM5WcRFlvjJfjk=
Subject key identifier: 37:0A:97:6D:DB:FA:1C:6F:76:B3:5C:70:1F:0A:08:7E:19:83:B1:D7
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184469B3E2EAC6D256F60B2871160293CCB
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/NwqXbdv6HG92s1xwHwoIfhmDsdc.roa
Signing time: Sat 05 Nov 2022 07:04:49 +0000
ROA not before: Sat 05 Nov 2022 07:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 109.122.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:9b:3e:2e:ac:6d:25:6f:60:b2:87:11:60:29:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 5 07:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=370a976ddbfa1c6f76b35c701f0a087e1983b1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:79:31:ac:78:10:20:0e:e4:03:4e:8e:82:
c4:c7:77:b0:21:f7:fd:2e:2f:de:8e:a8:4e:d3:5f:
f5:0e:1e:a1:23:ed:de:19:6e:4a:22:42:2b:b8:2f:
1f:6a:d9:ac:fd:75:fe:ee:6c:df:39:d5:2f:b4:81:
e7:08:fb:61:02:c0:4d:62:67:d4:13:90:a0:b2:53:
ac:63:48:c7:d7:99:01:b3:e7:4c:77:72:25:cb:30:
97:42:7e:2b:4e:3a:7f:80:02:54:2c:66:a5:9e:37:
21:ce:59:8e:1d:78:b5:50:7a:5e:a6:76:ae:c3:aa:
42:0e:fe:ad:ac:ee:93:af:9f:99:76:b3:ff:8d:88:
c7:f0:8f:7a:38:64:0b:17:6f:c2:69:d3:9f:ce:32:
c5:5a:05:e5:fe:10:04:fd:0f:31:89:a0:d5:9a:c1:
84:42:05:d2:0a:a4:f8:e2:ee:82:a5:bb:01:0f:fb:
4d:41:e1:5d:39:55:b9:9e:45:b0:ba:53:94:25:ce:
6c:56:07:7f:19:be:15:96:84:3b:e7:24:46:17:7a:
7a:23:5c:a4:ff:0b:57:9f:d0:e5:f9:ce:c3:f1:4b:
fb:0a:66:4c:c3:86:20:e0:65:b7:7a:80:9c:34:e2:
d5:a6:b4:1b:a7:89:4c:91:f4:9e:a5:35:3b:eb:d4:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:97:6D:DB:FA:1C:6F:76:B3:5C:70:1F:0A:08:7E:19:83:B1:D7
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/NwqXbdv6HG92s1xwHwoIfhmDsdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b6:b0:8c:5d:f5:0b:22:0b:18:ce:47:77:bb:e0:ac:32:6b:
e4:d8:2e:d8:1a:c3:27:5f:67:cd:49:c7:a8:4c:67:83:00:61:
c0:68:b2:8d:7b:62:7e:cc:f0:83:79:2e:f2:db:72:1a:38:15:
50:16:63:bc:08:ac:be:e4:f2:45:c8:ea:ee:1c:00:6c:71:56:
72:e2:34:80:6d:4f:40:58:aa:d8:33:5b:39:c3:8a:a2:65:9b:
49:91:d2:9f:81:1a:5a:2c:46:eb:49:dd:c4:f3:3c:ed:f2:3f:
6d:3b:a9:de:1a:98:bb:f9:66:be:98:2a:46:e3:45:e6:91:d4:
03:d1:56:36:9f:67:db:22:ec:b4:83:f8:cd:74:8f:8f:a4:67:
c7:cf:51:90:34:86:5b:c1:3c:1f:91:25:9e:70:14:aa:f4:65:
5f:58:df:a2:03:9a:c9:08:37:35:d5:c8:be:0e:e3:04:52:c4:
e3:6e:2f:24:b5:f6:f4:c3:9b:d9:b0:0f:1d:3d:c4:cc:dc:15:
03:63:14:29:3e:37:72:15:46:fe:0c:61:81:fd:b8:46:ff:e2:
b0:95:14:a0:22:d5:ce:0f:48:d3:f2:e6:16:6b:4c:7a:90:16:
63:dc:7f:31:f9:32:f8:75:d2:5d:32:6c:a8:5c:b3:ac:68:94:
6d:23:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org