Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/SJ83mhxjmUPQW4d27i6LPs_DkzE.roa
File: SJ83mhxjmUPQW4d27i6LPs_DkzE.roa (raw, json)
Hash identifier: YTy2Acgp31JfbozOQygoIpDfmB5vBa8R2cYWa4/iZN8=
Subject key identifier: 48:9F:37:9A:1C:63:99:43:D0:5B:87:76:EE:2E:8B:3E:CF:C3:93:31
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 05B7B483
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/SJ83mhxjmUPQW4d27i6LPs_DkzE.roa
Signing time: Sat 01 Jan 2022 02:57:38 +0000
ROA not before: Sat 01 Jan 2022 02:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 109.122.196.0/22 maxlen: 22
109.122.204.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95925379 (0x5b7b483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 02:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=489f379a1c639943d05b8776ee2e8b3ecfc39331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:30:12:73:db:60:a2:73:94:d7:6c:54:4e:
05:01:d6:40:37:f5:1d:4f:05:09:d7:32:1a:bd:c0:
c6:5e:7c:2c:51:55:44:b3:64:81:e4:12:9e:0b:99:
bb:c7:5b:a5:5e:8a:c5:7a:b6:a4:24:ff:fb:11:5c:
a7:45:d8:53:b3:bf:a5:d9:35:a7:da:19:12:7a:26:
93:10:0d:f6:9f:3d:2e:8d:c1:9d:bc:1b:98:ad:b3:
f1:f9:cb:47:c2:4e:37:9e:b5:3d:7b:31:45:d7:ab:
c8:fc:47:f8:86:3c:81:47:e9:9e:13:f1:41:81:02:
a6:97:79:7b:26:8b:4d:c0:36:63:06:d4:f2:a0:aa:
32:32:30:3d:5e:94:5e:24:d6:cc:9d:5f:81:a6:8a:
71:2a:39:b3:fc:30:f3:66:ee:00:8b:28:0a:28:19:
cf:4b:e1:8c:77:1d:47:48:2f:a0:ed:df:df:dd:d8:
4a:17:44:27:54:33:20:2c:05:32:96:f2:75:77:35:
9d:1c:a9:f6:fe:4e:ff:7d:0b:01:78:95:64:5d:f2:
dc:d9:41:61:7b:54:cd:f8:ab:28:c2:b3:29:70:f5:
e6:44:e8:55:27:8e:a1:b7:1a:6a:9a:b6:ec:1b:51:
69:88:50:07:d2:2b:50:0d:6d:4d:f4:1a:e2:2b:54:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:37:9A:1C:63:99:43:D0:5B:87:76:EE:2E:8B:3E:CF:C3:93:31
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/SJ83mhxjmUPQW4d27i6LPs_DkzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/22
109.122.204.0/24
109.122.208.0/24
109.122.210.0/24
109.122.214.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:f6:d6:52:f0:e2:86:98:22:0c:82:c3:f8:24:46:30:8e:0d:
2f:45:c5:1d:d3:70:5b:38:20:00:85:3e:03:dc:bb:0e:e4:d8:
ef:4e:33:66:37:37:6d:ae:99:88:ec:1d:2c:93:27:11:91:00:
33:83:d9:61:cf:f7:d9:c1:0e:9a:32:74:77:59:7b:36:86:54:
62:6a:6d:d2:71:89:7c:67:84:ae:e0:b5:2c:d0:c1:6a:b1:52:
dc:d7:66:e5:59:3c:b7:8d:ab:07:8f:97:7a:a5:a9:0c:aa:f4:
e9:c2:df:d3:e4:81:a1:40:34:1d:59:05:cf:83:04:a1:9e:10:
ce:0c:31:f9:a8:f6:eb:5e:92:d4:04:18:fc:23:1d:7c:6b:3a:
9d:0b:ca:d3:ca:ab:68:95:a6:67:fc:ce:89:18:fd:1b:ec:fd:
c8:4b:48:17:74:e6:f3:20:87:8f:54:e5:54:cd:cc:5e:0b:96:
b0:64:9e:c0:bd:30:9f:80:0b:43:ae:70:01:87:fe:95:00:b5:
59:a3:ae:6f:83:43:7a:7f:9a:de:b3:45:fb:45:ad:19:56:b8:
6d:a5:b7:bf:4e:9c:2f:a3:41:c6:42:a2:0c:2d:ad:51:14:56:
da:58:ca:17:fd:ea:4c:ad:09:5b:af:83:99:5d:af:85:7f:ab:
ce:01:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org