Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/YphZn4uX4cmU1ru77mmQVAqXH3M.roa
File: YphZn4uX4cmU1ru77mmQVAqXH3M.roa (raw, json)
Hash identifier: rFTFad/8D8pGCjRJ+/caQLsbYuJCYt/WjWCYslke43g=
Subject key identifier: 62:98:59:9F:8B:97:E1:C9:94:D6:BB:BB:EE:69:90:54:0A:97:1F:73
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184714ED7DF949A36695222D5ED8ACA9230
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/YphZn4uX4cmU1ru77mmQVAqXH3M.roa
Signing time: Sun 13 Nov 2022 14:05:03 +0000
ROA not before: Sun 13 Nov 2022 14:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 109.122.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:71:4e:d7:df:94:9a:36:69:52:22:d5:ed:8a:ca:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 13 14:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6298599f8b97e1c994d6bbbbee6990540a971f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:74:9b:23:9c:70:c6:8a:d6:1b:86:e5:71:
e9:7b:3c:5b:4d:02:09:7f:c6:39:fa:83:64:e7:9a:
c9:fc:6c:9c:73:55:82:fb:44:58:4b:19:13:6c:c4:
94:a3:85:d1:46:a8:9a:c3:90:2b:fd:67:13:58:70:
f7:b7:7c:64:0c:ea:5b:d3:89:d3:3b:87:38:64:36:
13:e9:f1:5c:7f:d4:ef:8f:ce:d8:f1:dc:08:4f:7d:
82:6a:3d:ea:63:82:c9:1f:91:a6:e3:bb:f2:5a:79:
d6:4c:2a:e2:2b:14:2b:55:70:35:75:05:c5:a7:3c:
a3:e1:90:34:d5:ca:6f:24:7f:f4:46:22:af:43:8c:
6d:bf:a4:4f:66:49:d3:fb:60:d2:34:7b:e2:29:a3:
d1:0e:6e:dc:c0:a0:36:c5:a3:5a:5e:c1:76:e3:28:
6f:18:fa:80:c0:45:9a:5d:25:ae:5e:2e:77:0b:50:
5c:b7:99:3a:e4:34:ab:3f:e9:65:e6:f9:b7:86:38:
fd:83:04:e5:25:bf:b9:4d:f0:e1:84:af:81:a3:9f:
25:be:f9:c6:5c:ce:72:15:52:09:f9:a7:3c:82:1a:
7b:43:7c:ca:cc:e3:83:0d:d9:63:2e:01:d4:4c:bb:
cc:32:1b:04:fc:37:f0:ac:e8:f4:0c:85:9a:44:91:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:59:9F:8B:97:E1:C9:94:D6:BB:BB:EE:69:90:54:0A:97:1F:73
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/YphZn4uX4cmU1ru77mmQVAqXH3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:50:6a:03:58:d2:ae:6e:b3:8b:e3:9b:b1:c2:4e:e3:36:c9:
e6:a7:89:44:21:d1:3e:a1:f1:ab:7d:c3:96:61:d1:2b:f3:56:
59:6c:2a:73:8d:6a:a5:9c:a2:ea:38:7a:99:b4:4e:d2:53:be:
d2:53:9d:62:91:5e:06:ff:eb:0e:36:b2:3e:5f:48:5b:1d:ac:
3f:4a:45:ae:e7:fb:0f:9b:20:f5:bd:89:41:8a:2c:1c:06:86:
7c:c3:f4:da:09:4e:0d:76:ab:ab:52:71:87:a5:1b:7d:0d:cd:
15:e9:e0:ea:1c:ee:c4:3e:f9:5b:2c:a8:16:d9:8a:f5:b4:b9:
f7:b0:6d:e8:8d:62:9b:e3:d2:2d:61:81:7a:fe:a0:ed:3a:40:
c3:07:d7:2c:9a:c0:a2:de:9b:d7:6b:1f:31:7f:23:fd:29:d5:
6b:11:8e:0b:ad:47:33:ff:ac:4a:1a:1f:ba:d7:d4:15:51:2b:
85:c4:ab:3a:27:27:6d:08:79:e5:4b:14:c7:7d:62:db:a5:14:
65:3b:c2:44:ce:d6:5e:e1:24:21:c6:af:f6:6b:12:60:e0:50:
f0:33:d2:fc:03:12:51:ad:95:bb:21:22:3c:55:cc:9e:8f:b9:
23:a7:87:85:df:f2:2f:50:a3:6f:7b:97:40:26:28:1d:73:80:
4f:2e:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org