Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/PykpQRkPyUxxwhkdqGol8s3b3xE.roa
File: PykpQRkPyUxxwhkdqGol8s3b3xE.roa (raw, json)
Hash identifier: SDiAy/KZp+v3HuUe2uOmL2FgUtypMGW03gseb8pRWWs=
Subject key identifier: 3F:29:29:41:19:0F:C9:4C:71:C2:19:1D:A8:6A:25:F2:CD:DB:DF:11
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 069B2EB7
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/PykpQRkPyUxxwhkdqGol8s3b3xE.roa
Signing time: Fri 08 Apr 2022 07:47:01 +0000
ROA not before: Fri 08 Apr 2022 07:47:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 109.122.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110833335 (0x69b2eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 8 07:47:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f292941190fc94c71c2191da86a25f2cddbdf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:be:08:80:51:38:90:69:71:0a:ea:ee:63:
a6:74:12:21:a4:0e:fb:af:b0:da:6d:d4:aa:db:34:
15:cd:06:a5:ff:1d:eb:89:9b:d4:20:a2:99:72:af:
b0:14:d1:af:20:67:2c:ff:1f:a2:73:79:50:fb:1f:
81:8b:7a:dd:e3:eb:fd:ed:cc:30:f5:d6:ae:80:59:
b3:f0:c8:08:ca:5b:86:a2:32:51:6c:1c:80:d2:e4:
83:49:84:8f:dd:1a:35:48:72:58:6b:b5:88:89:c0:
3a:5f:5e:9b:dd:1e:b9:26:71:97:b6:7c:a6:15:84:
4e:4b:db:e6:dd:0d:ad:3b:ab:d3:84:70:2a:86:e6:
07:af:bb:57:b4:47:10:c6:ed:14:2c:35:f6:9c:c1:
a6:10:95:c8:85:dc:69:ef:48:08:e2:90:1a:d8:42:
a5:87:91:f8:39:cc:fb:5d:a4:7b:1d:74:da:14:ab:
59:85:e5:3e:76:e7:8b:92:0c:a1:1d:64:b1:12:57:
76:c5:8c:e9:56:2e:9e:bc:ef:2f:72:2c:00:0d:2c:
ec:cf:42:f5:57:19:ba:a2:20:e7:92:e3:9d:be:81:
7a:74:d4:0a:42:f2:30:5b:97:e3:99:13:29:8b:0a:
c3:60:e1:de:57:18:6f:2b:dd:b9:cb:af:aa:99:c9:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:29:41:19:0F:C9:4C:71:C2:19:1D:A8:6A:25:F2:CD:DB:DF:11
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/PykpQRkPyUxxwhkdqGol8s3b3xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c8:6f:2d:28:ca:87:86:8a:5d:81:6c:64:71:b5:8d:d5:ed:
3b:05:09:8d:c6:f3:5b:91:2b:23:f1:56:0f:8b:45:7d:f9:2f:
43:46:c3:41:76:79:63:f5:24:0f:fc:12:dd:bb:fb:60:6e:c4:
9c:5e:44:2a:39:4e:a6:9b:10:16:7a:0b:b8:fb:26:5e:91:2c:
cc:77:59:48:1a:df:70:c6:5e:44:70:fc:b5:6f:6b:ea:75:08:
a1:1c:2d:88:40:f7:b8:ee:88:97:00:9b:29:d7:96:34:fb:f1:
93:25:2d:0b:20:25:42:45:a1:d4:7f:d9:9a:0d:c1:bf:15:c0:
6b:14:d8:a4:b6:9f:00:90:52:37:68:38:01:24:9c:6e:8f:d6:
fb:6c:89:85:18:84:92:57:96:92:f6:ab:c4:e3:28:25:94:ed:
26:bb:46:54:3c:e6:e3:e5:19:0c:53:6e:62:98:24:8a:49:95:
98:86:76:85:5f:37:04:37:7f:02:5a:47:69:4e:58:c0:45:03:
da:21:9c:a6:a5:82:c5:16:a2:37:ba:70:d6:74:42:c3:99:9c:
a4:ec:7b:d1:4f:14:89:1e:85:51:04:a8:52:6e:5d:fc:57:c0:
0b:ca:a6:ad:8a:c9:83:be:ad:87:9f:82:fd:99:35:f1:41:79:
70:24:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org