Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/UcdliYnu_i7F-4W6H9YI1gSy2OY.roa
File: UcdliYnu_i7F-4W6H9YI1gSy2OY.roa (raw, json)
Hash identifier: Ieyp07CtLCALyRRjiisy8OQq+/ymJH6T6jmPHOKmy6k=
Subject key identifier: 51:C7:65:89:89:EE:FE:2E:C5:FB:85:BA:1F:D6:08:D6:04:B2:D8:E6
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0731E577
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/UcdliYnu_i7F-4W6H9YI1gSy2OY.roa
Signing time: Thu 09 Jun 2022 06:23:02 +0000
ROA not before: Thu 09 Jun 2022 06:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 109.122.195.0/24 maxlen: 24
185.207.4.0/22 maxlen: 24
109.122.206.0/23 maxlen: 24
109.122.200.0/22 maxlen: 24
109.122.212.0/23 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120710519 (0x731e577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jun 9 06:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c7658989eefe2ec5fb85ba1fd608d604b2d8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:22:38:11:50:0b:87:67:1c:9b:58:e1:35:
7b:95:50:92:e3:9c:20:90:01:5f:36:6b:4d:a9:40:
05:17:98:ff:2f:83:45:e1:9d:d3:3e:fe:67:75:b3:
5d:d8:21:8a:3a:b7:13:6c:26:36:6f:d4:76:77:32:
3c:d1:a3:f8:79:40:b9:d6:ba:11:46:cb:1e:a5:0f:
71:ed:81:bc:42:66:90:c5:9c:f8:cd:7e:69:6e:1e:
8f:b3:2e:5b:8a:a6:89:b7:8f:a2:1d:40:bf:f6:de:
99:cf:c4:ae:97:0b:83:9b:42:2f:20:88:29:fa:ea:
22:aa:c4:02:e2:d7:9f:9c:e5:82:c5:a2:4b:20:e1:
16:b9:c1:75:e5:de:cf:4a:83:c1:5c:58:48:29:ca:
09:42:9a:0e:8a:e1:9b:cc:6d:60:45:18:6b:68:e7:
43:0d:e5:d2:29:3a:e9:df:18:37:7d:74:ca:a5:18:
bc:39:f9:c2:6a:8f:1e:22:43:2f:7e:c2:f1:67:9d:
04:dd:e2:c7:2f:4b:43:d6:e3:33:9e:63:c4:6d:f1:
3b:15:72:32:b3:a0:30:d1:34:66:cd:02:af:af:d5:
68:6e:a7:55:00:e8:32:66:1a:07:ec:14:d6:b8:e9:
8c:ea:20:92:c8:05:77:27:df:c9:77:b4:01:00:b5:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:65:89:89:EE:FE:2E:C5:FB:85:BA:1F:D6:08:D6:04:B2:D8:E6
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/UcdliYnu_i7F-4W6H9YI1gSy2OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.206.0/23
109.122.211.0-109.122.213.255
109.122.216.0/24
109.122.223.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
49:7b:ff:92:bb:86:e1:67:3c:1f:de:43:db:d2:9d:4e:d1:54:
d1:fc:a2:01:fa:da:b6:5e:26:49:45:61:74:76:09:ed:ec:2e:
32:98:ad:af:fb:b1:be:92:0a:55:cc:7a:4a:e8:67:92:d1:73:
17:d8:fc:3b:6c:ad:41:eb:68:6a:05:d1:a3:31:d7:13:cc:6a:
2a:98:91:7c:be:8b:21:01:e5:9f:af:7e:9a:c9:aa:c0:72:76:
dc:85:04:ce:3f:53:ee:95:dc:f8:a3:f4:ee:46:9c:48:d6:5f:
9d:29:26:d9:d4:87:81:13:36:da:8f:87:4c:3c:dc:06:08:a6:
2b:9d:1e:01:61:73:ac:a2:cf:b4:f9:8e:8c:95:cf:3a:73:7b:
79:c3:fd:75:27:a1:67:22:e8:7a:ff:1c:0f:b2:7c:bf:0e:a6:
02:9f:a1:d3:f4:01:1d:27:5d:98:a7:d3:3d:7c:d8:c9:a6:54:
7c:f7:35:b3:06:36:20:7f:df:7e:d7:54:5d:b3:8e:a0:c5:78:
90:d1:3b:b0:3e:fe:ef:35:73:12:04:71:2c:75:ba:ee:2e:ad:
73:96:a7:ba:b8:c2:30:73:50:14:48:fa:52:5a:c2:1d:05:28:
22:38:56:a0:91:82:23:77:ce:65:36:04:f7:e7:1f:59:d4:00:
89:8c:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org