Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/QcKlQ16Bqlqej4snD2ojNzn0NLg.roa
File: QcKlQ16Bqlqej4snD2ojNzn0NLg.roa (raw, json)
Hash identifier: DDnQ5oT5256q41f3xYBDMdHjZpNNACsPYxjgEia67hg=
Subject key identifier: 41:C2:A5:43:5E:81:AA:5A:9E:8F:8B:27:0F:6A:23:37:39:F4:34:B8
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0732DE54
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/QcKlQ16Bqlqej4snD2ojNzn0NLg.roa
Signing time: Thu 09 Jun 2022 06:23:03 +0000
ROA not before: Thu 09 Jun 2022 06:23:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 109.122.196.0/22 maxlen: 22
109.122.205.0/24 maxlen: 24
109.122.204.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.209.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.218.0/23 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120774228 (0x732de54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jun 9 06:23:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41c2a5435e81aa5a9e8f8b270f6a233739f434b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:81:df:70:c8:30:5e:77:58:cc:6d:84:e3:
e6:8f:48:91:ee:bf:ba:33:9a:4c:ca:14:c7:31:ad:
2d:3b:90:36:2c:7b:6b:0a:ac:e8:54:86:7e:21:9a:
a9:2e:9b:12:48:b5:1b:71:f0:07:b2:39:da:ef:3c:
74:69:2d:7b:53:1a:b5:54:26:c4:fe:bc:4c:ca:de:
38:ae:5f:ef:55:d8:a9:22:ff:c9:a1:4e:72:45:37:
fc:73:0c:a5:e4:33:dd:b1:79:a7:58:84:e7:09:45:
7a:b8:f7:21:bf:f6:44:07:17:fc:6c:96:04:03:4d:
49:f7:97:71:fd:a1:eb:e5:a3:76:5a:f2:6e:20:d7:
3e:c8:ff:16:ca:c5:d7:d5:74:f4:b9:d0:69:1d:e5:
d4:5f:9d:5c:7a:d2:d0:25:48:2a:7a:c1:e5:38:3a:
ba:d9:f9:2d:39:f6:a5:c0:e9:24:5f:63:b2:8d:bd:
5b:f4:5d:4b:c8:69:40:03:89:db:4c:e1:1a:b9:c7:
64:98:30:e5:72:bd:17:6b:11:15:f0:36:3b:00:92:
ef:39:94:5b:33:27:1c:cc:5e:4e:08:fa:38:1d:ed:
2c:7f:7f:30:76:17:2a:57:4b:8a:75:8d:af:57:41:
93:53:81:15:52:17:8a:b2:15:f0:6c:2b:a8:19:ac:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:A5:43:5E:81:AA:5A:9E:8F:8B:27:0F:6A:23:37:39:F4:34:B8
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/QcKlQ16Bqlqej4snD2ojNzn0NLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/22
109.122.204.0/23
109.122.208.0-109.122.210.255
109.122.214.0/23
109.122.218.0-109.122.221.255
Signature Algorithm: sha256WithRSAEncryption
14:5a:2c:42:67:88:27:ac:3c:44:56:5d:77:46:3b:29:98:60:
d4:d3:a6:17:88:30:a6:d4:e4:3e:a6:1f:75:9e:fe:f6:d7:7c:
88:ae:0b:af:a7:f5:7d:2f:3c:54:16:cc:db:df:36:d5:32:0a:
84:71:fb:4c:02:cd:84:5f:8b:9f:11:d9:9d:87:56:f6:ce:da:
ad:3e:03:00:1a:97:f0:aa:96:ae:ad:92:da:3a:c7:3b:c7:8b:
9f:cb:3d:c1:70:23:8a:7d:49:05:4b:4c:cc:8d:f3:86:8c:39:
4b:c2:51:f8:90:66:dc:30:71:59:63:4a:84:31:86:7e:80:f9:
0b:d8:30:bf:49:fe:2c:df:7f:3d:40:26:a3:3e:e7:8f:3f:26:
24:b2:d9:f7:56:b4:bf:0d:55:e3:88:7b:c5:33:b5:ac:bf:75:
c6:9a:84:b5:db:27:7a:d9:8b:af:37:e1:a1:b1:04:8e:d3:d0:
2d:48:97:ba:8c:5a:97:ae:5b:39:fb:d8:f1:44:40:db:b1:27:
c7:31:79:2a:93:c7:20:ed:d0:5d:f3:e0:64:aa:9d:a4:cb:14:
6a:f4:93:ac:0a:32:60:cd:5c:0f:b9:36:26:78:e0:21:5d:55:
cc:76:52:f2:ee:9c:e5:a2:00:a4:d1:a8:8f:5c:b5:77:06:26:
ec:08:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org