Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/StOWM0IPh_087U6e_QbtpB_FkmE.roa
File: StOWM0IPh_087U6e_QbtpB_FkmE.roa (raw, json)
Hash identifier: Z6xzcJwAViu1UBFuCKPVoYo1TOJCbmomNA/VkWFAFL0=
Subject key identifier: 4A:D3:96:33:42:0F:87:FD:3C:ED:4E:9E:FD:06:ED:A4:1F:C5:92:61
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184469968F9749CC48B483F692EFAFF3284
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/StOWM0IPh_087U6e_QbtpB_FkmE.roa
Signing time: Sat 05 Nov 2022 07:02:49 +0000
ROA not before: Sat 05 Nov 2022 07:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:99:68:f9:74:9c:c4:8b:48:3f:69:2e:fa:ff:32:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 5 07:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ad39633420f87fd3ced4e9efd06eda41fc59261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:f4:79:3a:22:dc:bb:4e:bb:68:07:5c:4d:
57:d8:d4:fb:74:8a:82:b5:48:36:42:52:94:62:f1:
7c:72:ee:06:33:db:03:d4:cd:77:b6:21:94:ca:16:
56:71:fa:ed:ec:0a:9b:2c:d3:95:b4:02:4a:6c:2d:
00:93:9c:14:4d:6b:41:30:cd:32:91:45:82:61:c9:
9a:21:c0:b7:7e:a7:3d:f7:d7:df:4c:95:c6:a5:07:
d8:ef:33:d4:88:09:94:dc:aa:30:71:bc:28:a3:1f:
54:a0:fb:71:51:75:2f:36:52:2d:9c:e1:ce:74:19:
10:59:a2:76:30:5f:88:c2:f0:8e:73:1b:14:d2:5d:
1e:ad:bd:91:a0:1e:7b:a7:52:58:bb:6e:59:98:6e:
b3:2e:bf:f5:29:eb:85:db:ba:7a:82:0f:c1:bf:85:
bf:31:b8:ad:8a:b8:77:01:6f:fe:7b:50:7f:31:a8:
21:00:07:4c:27:8d:1b:10:b1:43:a7:61:7d:08:b8:
df:39:2d:3a:91:32:31:7e:65:f7:92:fd:c4:d8:7a:
09:d8:7b:62:bc:b4:d1:cc:40:39:03:36:bf:4b:13:
fc:6c:11:54:fa:13:96:7d:11:e1:12:97:71:ef:32:
1c:a2:cd:7b:d9:2e:bc:a9:d7:4c:b3:3e:8d:3a:6e:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:96:33:42:0F:87:FD:3C:ED:4E:9E:FD:06:ED:A4:1F:C5:92:61
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/StOWM0IPh_087U6e_QbtpB_FkmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
109.122.214.0/24
109.122.218.0/24
109.122.220.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f3:38:24:0b:3d:2b:ad:0f:be:7d:3a:2a:be:56:d0:b8:7c:
f1:68:81:0e:e9:9b:96:cf:32:c8:2f:f5:f8:06:86:25:43:23:
d7:96:3e:ad:1b:9c:dc:68:0e:86:26:ab:e1:a9:1a:80:7c:fd:
07:b6:e2:a9:3e:6f:80:67:43:31:f6:96:73:56:bf:db:85:f8:
f5:8a:58:be:b2:77:6b:e5:e7:1f:2b:7a:eb:17:37:84:3e:eb:
b8:19:77:46:4d:72:98:92:40:f6:e0:b5:67:9c:a8:64:91:69:
3d:11:44:37:e8:a2:11:4b:a1:9c:f7:f2:d7:5f:ce:a0:65:f6:
e0:1a:25:e4:76:46:85:ff:76:20:14:ab:76:9d:3d:fa:e7:c5:
e0:10:99:a1:de:19:ff:a5:9b:43:5b:b0:72:a7:ae:c3:d4:3e:
d4:d1:c2:5a:0e:21:54:09:62:4a:5c:84:0f:89:8e:72:11:b5:
fa:a6:0b:6e:47:25:4a:a5:ea:11:92:9d:f4:b2:5d:e2:04:78:
d9:f9:e3:62:74:9e:89:44:e3:f8:a2:5e:6b:6d:7f:11:9c:06:
ca:5c:3c:53:d3:03:66:c3:40:95:4e:3f:ae:52:ad:27:1b:7d:
03:d8:cc:46:49:32:ed:7f:2c:02:9a:79:56:c6:c6:b1:9d:17:
10:f2:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org