Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/XVYZb1-GrmSM55K4HkQn1tyI-I0.roa
File: XVYZb1-GrmSM55K4HkQn1tyI-I0.roa (raw, json)
Hash identifier: vVGOh13zQSESKPZ5b9RiZiEH5ocF8/T5P/8hhyApjg8=
Subject key identifier: 5D:56:19:6F:5F:86:AE:64:8C:E7:92:B8:1E:44:27:D6:DC:88:F8:8D
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184EBDED69708A9EFACF0BAACC01F39FFFD
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/XVYZb1-GrmSM55K4HkQn1tyI-I0.roa
Signing time: Wed 07 Dec 2022 09:16:00 +0000
ROA not before: Wed 07 Dec 2022 09:16:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:de:d6:97:08:a9:ef:ac:f0:ba:ac:c0:1f:39:ff:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 7 09:16:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d56196f5f86ae648ce792b81e4427d6dc88f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:45:a6:14:c9:5f:21:5b:80:75:d2:af:1f:cb:
66:55:04:a2:6a:96:90:ef:d4:10:b7:32:2a:66:7f:
2f:e7:7a:f6:e3:eb:73:d0:6e:7c:e3:c0:e7:d7:86:
5b:0a:82:29:76:7a:49:76:2d:81:70:ee:12:41:e9:
eb:01:87:d0:d7:e0:f6:82:fe:ed:f0:f2:3f:92:55:
03:d8:db:04:56:02:f3:d6:62:93:4c:10:26:08:5d:
ed:41:b0:ee:be:46:88:4b:61:5c:41:ac:ba:4d:28:
73:47:0e:22:54:54:66:6a:87:b5:be:a2:e2:7b:b9:
1c:18:89:4b:7a:dd:59:be:0f:12:3f:fd:fc:2e:db:
ed:af:4d:4f:0a:a3:16:30:9f:7f:e6:cd:c4:78:2d:
90:fb:87:a1:6e:e0:e3:79:d7:d1:dd:7c:88:d8:5e:
00:fb:53:a9:a1:0b:b5:9c:49:b1:0f:a7:57:c5:a6:
4d:35:8f:a0:22:e4:2a:f9:11:4e:25:e9:3d:ca:5f:
f3:aa:4a:55:c8:76:a1:87:34:d2:bc:b4:8b:79:5f:
00:15:c2:2d:58:ec:a9:b0:d9:76:ab:1d:8d:35:c6:
ae:ec:db:6a:75:71:5a:84:08:f5:52:6c:b3:58:19:
58:21:31:57:8b:91:15:2c:cc:8d:0b:5a:af:19:c5:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:19:6F:5F:86:AE:64:8C:E7:92:B8:1E:44:27:D6:DC:88:F8:8D
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/XVYZb1-GrmSM55K4HkQn1tyI-I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
Signature Algorithm: sha256WithRSAEncryption
64:30:7b:98:68:e9:90:76:2e:9a:e0:7e:24:2a:f7:09:8c:eb:
d1:f1:7f:ee:ed:83:bc:cc:40:e5:05:55:3c:8e:44:07:8e:59:
8f:30:7c:c6:01:81:f5:f7:cc:62:94:18:8f:54:ee:11:81:e7:
fd:dc:fb:5c:c3:50:f2:fc:b5:74:fd:6c:95:d5:fc:28:2b:bf:
45:74:b5:89:bd:e9:71:d7:91:f5:8d:6b:05:66:d1:db:ed:7a:
00:50:16:35:52:11:72:48:11:b0:57:9f:6c:b7:34:45:9a:bf:
15:bc:17:69:23:3f:ab:60:49:e7:ba:2a:79:be:83:3a:a0:bb:
54:b0:56:21:2b:24:0f:dc:98:a1:b8:c7:53:9f:d5:dd:a9:d5:
ac:95:cd:22:a9:48:9e:00:3b:81:b9:fa:f1:ac:77:39:43:5d:
46:7c:03:58:64:36:7e:72:a1:d3:c3:d6:63:77:60:70:15:e2:
98:92:df:6b:39:13:65:ca:8d:c9:c3:c7:2b:36:3a:c1:e5:eb:
aa:a3:f5:53:7d:5a:e7:d1:ba:84:0c:f3:79:b6:b0:b2:4e:81:
5d:02:d4:eb:82:49:98:98:1c:39:ea:ef:aa:05:97:ab:a7:b6:
f1:0b:a5:1e:92:03:f0:3e:55:d2:21:ef:66:d0:ec:74:66:e2:
88:db:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org