Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Q9I04S5_eh6ywZRLYl2kVOefhS8.roa
File: Q9I04S5_eh6ywZRLYl2kVOefhS8.roa (raw, json)
Hash identifier: Wfzl3TIDu+pvw0sVuRQOaPAppr+mLnBOrQBcPhqt35M=
Subject key identifier: 43:D2:34:E1:2E:7F:7A:1E:B2:C1:94:4B:62:5D:A4:54:E7:9F:85:2F
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B52B798B96B2790495013409809D9
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Q9I04S5_eh6ywZRLYl2kVOefhS8.roa
Signing time: Sun 01 Jan 2023 21:44:45 +0000
ROA not before: Sun 01 Jan 2023 21:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 109.122.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:52:b7:98:b9:6b:27:90:49:50:13:40:98:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43d234e12e7f7a1eb2c1944b625da454e79f852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:f1:d9:aa:53:d9:d2:eb:99:5b:3f:ed:85:
df:07:6d:70:21:7c:12:a1:29:b8:28:31:d1:a4:e3:
c2:8e:c3:11:b4:85:2d:1a:75:41:34:f3:f5:89:1c:
28:ec:6a:dd:68:7e:19:ca:f5:30:c8:46:62:1f:88:
f4:f0:36:f6:83:12:91:a4:7e:9b:c6:3d:8b:5c:41:
c1:c3:3a:58:1a:a6:87:72:2a:b0:39:83:11:72:2a:
59:20:0a:69:4a:b7:8b:1d:e9:f7:4b:b9:92:d8:10:
ae:5b:bd:61:a8:71:35:58:11:7d:e2:28:01:b4:41:
78:47:79:e7:f0:3a:fb:81:b0:b6:86:0c:72:eb:ec:
1b:2b:48:ab:ed:5b:c9:cf:08:5c:b5:92:6e:fd:f9:
65:2e:59:02:4a:a2:b5:01:32:60:f9:3a:12:c4:d8:
4b:93:92:f5:e6:ad:5d:43:4d:40:2d:37:5b:55:b4:
7f:84:39:e6:b0:fa:63:3a:2d:41:c4:21:67:0a:82:
db:e5:67:e5:8f:f3:20:b0:72:21:67:19:cd:2d:da:
4b:8d:f6:cb:ea:c7:cb:0f:55:8e:88:3f:75:a0:da:
ea:10:ea:fd:50:5e:68:4e:df:e4:9d:cb:3d:7c:0c:
e5:59:a2:04:e1:a2:b9:dd:e3:aa:98:9e:9e:f6:60:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:34:E1:2E:7F:7A:1E:B2:C1:94:4B:62:5D:A4:54:E7:9F:85:2F
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Q9I04S5_eh6ywZRLYl2kVOefhS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.215.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a5:38:a3:dd:be:96:b4:f9:86:f4:17:b5:26:fe:d7:b9:62:
db:50:fb:6d:20:cb:82:22:f8:c3:0a:b0:ff:a4:21:9b:1d:82:
15:1b:f4:19:09:cf:8c:dd:52:e0:d0:8a:ea:a1:4e:ee:e5:8d:
0c:be:0a:ae:17:fe:26:46:53:19:c2:33:f7:19:fc:7f:23:4b:
dc:92:67:aa:e0:80:a1:1e:b3:8a:bc:20:32:11:dc:c3:72:97:
47:19:78:21:09:63:c2:92:0a:30:1a:1e:d2:79:0f:5d:58:e8:
62:f2:a7:ff:0d:12:2a:09:97:40:39:67:67:c6:47:aa:83:d8:
91:92:7e:a5:36:18:4f:f9:92:f1:c6:ba:58:9a:c6:5f:56:98:
d8:ce:03:e5:b1:85:b5:6f:b1:4a:4b:fe:b8:71:8c:53:c8:c2:
a0:7f:46:4a:d2:a4:a4:dc:2f:5b:cb:66:87:70:0c:6a:15:ba:
ce:dc:70:14:be:04:0e:0c:ee:c3:d3:f4:5e:3f:9b:e8:68:73:
fc:25:9d:5d:c8:b4:41:6e:db:ae:8c:8d:1d:0c:10:48:68:a7:
3f:5b:7f:29:8d:af:6e:4f:35:67:89:fc:f2:d4:5e:fc:b4:27:
ef:f3:8f:ad:2f:39:38:7f:73:c7:85:d6:16:4e:1a:8c:0e:0e:
99:e1:13:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS1K3mLlrJ5BJUBNAmAnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTAxMjE0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2QyMzRlMTJlN2Y3YTFlYjJjMTk0NGI2MjVkYTQ1NGU3OWY4NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTXx2apT2dLrmVs/7YXfB21wIXwS
oSm4KDHRpOPCjsMRtIUtGnVBNPP1iRwo7GrdaH4ZyvUwyEZiH4j08Db2gxKRpH6b
xj2LXEHBwzpYGqaHciqwOYMRcipZIAppSreLHen3S7mS2BCuW71hqHE1WBF94igB
tEF4R3nn8Dr7gbC2hgxy6+wbK0ir7VvJzwhctZJu/fllLlkCSqK1ATJg+ToSxNhL
k5L15q1dQ01ALTdbVbR/hDnmsPpjOi1BxCFnCoLb5Wflj/MgsHIhZxnNLdpLjfbL
6sfLD1WOiD91oNrqEOr9UF5oTt/kncs9fAzlWaIE4aK53eOqmJ6e9mBSeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPSNOEuf3oessGUS2JdpFTnn4UvMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvUTlJMDRTNV9laDZ5d1pSTFlsMmtWT2VmaFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrXMA0G
CSqGSIb3DQEBCwUAA4IBAQCDpTij3b6WtPmG9Be1Jv7XuWLbUPttIMuCIvjDCrD/
pCGbHYIVG/QZCc+M3VLg0IrqoU7u5Y0MvgquF/4mRlMZwjP3Gfx/I0vckmeq4ICh
HrOKvCAyEdzDcpdHGXghCWPCkgowGh7SeQ9dWOhi8qf/DRIqCZdAOWdnxkeqg9iR
kn6lNhhP+ZLxxrpYmsZfVpjYzgPlsYW1b7FKS/64cYxTyMKgf0ZK0qSk3C9by2aH
cAxqFbrO3HAUvgQODO7D0/ReP5voaHP8JZ1dyLRBbtuujI0dDBBIaKc/W38pja9u
TzVnifzy1F78tCfv84+tLzk4f3PHhdYWThqMDg6Z4RNt
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org