Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/SJ2KFoGJrErSfaVVkA7LWH68iCU.roa
File: SJ2KFoGJrErSfaVVkA7LWH68iCU.roa (raw, json)
Hash identifier: XEUf3XGA5ilDweb6mrdgmC3+vH/AUJfRY4/Xq/ugKcM=
Subject key identifier: 48:9D:8A:16:81:89:AC:4A:D2:7D:A5:55:90:0E:CB:58:7E:BC:88:25
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01850A429318BE7A54238867927CF798D925
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/SJ2KFoGJrErSfaVVkA7LWH68iCU.roa
Signing time: Tue 13 Dec 2022 06:53:33 +0000
ROA not before: Tue 13 Dec 2022 06:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150398
IP address blocks: 109.122.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:42:93:18:be:7a:54:23:88:67:92:7c:f7:98:d9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 13 06:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=489d8a168189ac4ad27da555900ecb587ebc8825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:ba:0d:56:ed:62:7a:af:05:01:06:bc:3d:
08:bd:ac:86:05:6f:45:3f:ff:36:d6:87:75:45:bc:
33:c3:88:fb:fd:04:fc:26:fb:58:36:63:a6:2d:de:
45:a7:c3:48:50:a2:31:dc:e0:d3:91:51:6e:0f:00:
d4:b7:2a:fc:66:6e:6d:71:64:cc:db:64:47:3e:98:
b5:74:aa:c7:ad:bb:55:0f:f5:8d:2e:ea:7c:fc:aa:
46:94:25:9a:ed:d5:2b:2c:52:4d:c0:f8:c0:85:ed:
a7:bb:79:6a:be:8f:9e:ed:eb:41:eb:15:75:22:9d:
b9:1a:7f:9f:2c:59:c1:68:bb:ef:04:30:2f:73:ca:
ae:84:b3:0b:b9:b8:cd:e9:9f:d5:c3:76:03:bf:85:
3e:dd:1f:43:da:4e:66:00:3b:df:d0:29:5f:96:4d:
58:b5:7e:8a:0d:a9:6d:47:9f:a1:21:3d:a2:70:3c:
fd:ac:0a:f8:9f:e7:58:a1:21:3e:1a:08:85:af:e9:
f3:28:6c:d6:bb:7f:a8:f4:1f:23:fa:72:c9:fd:0f:
f6:b1:1f:cc:c0:36:ae:d6:ef:9d:70:ef:82:ff:a0:
66:4f:4d:ac:28:d1:9f:28:fe:42:1b:cc:49:c7:68:
68:4e:8c:8f:21:12:95:77:d8:70:23:9a:e1:f2:ac:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:8A:16:81:89:AC:4A:D2:7D:A5:55:90:0E:CB:58:7E:BC:88:25
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/SJ2KFoGJrErSfaVVkA7LWH68iCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
17:be:f2:4e:76:c9:e4:94:db:77:4c:a7:8f:63:59:da:b9:9c:
1b:7b:b6:b3:59:ed:7b:76:44:43:ec:20:7b:73:60:68:0b:af:
88:62:47:11:13:a2:d4:66:db:da:d5:34:34:84:ae:0e:26:3a:
9a:08:4e:5a:bc:36:d5:33:7b:1c:1f:80:32:3c:21:62:a9:f6:
66:42:7b:09:60:a1:86:f1:db:f9:20:a0:b8:c3:c6:05:bb:76:
24:ad:9c:4a:ea:6f:79:a3:2f:16:d8:e7:34:c6:8b:73:ba:4b:
60:ea:cd:55:fd:21:03:08:5f:23:13:7a:5c:77:9c:c9:81:fa:
4b:12:64:52:d5:da:c7:a9:a7:a4:0c:af:3d:44:2b:9c:33:42:
cd:4d:fb:29:5b:11:1c:8f:fd:38:b4:61:e8:1b:31:09:70:2e:
1a:08:da:df:3e:88:e2:28:c3:bd:0c:a1:58:a5:7f:7d:55:46:
ea:4a:df:63:b6:0c:a8:64:f3:a6:ac:c8:08:67:e0:52:34:77:
c1:99:4a:fc:f4:23:c8:e5:25:01:a8:81:d7:ce:1f:8a:02:54:
4e:bd:73:11:67:fb:bd:4b:cd:b7:e8:cd:f6:08:77:42:e2:c2:
24:47:df:a2:ae:05:7d:67:1c:be:9c:cb:cc:81:04:65:f5:e5:
c9:7a:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org