Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZDkeo87NcRia-zvkJqdeP-JL-RI.roa
File: ZDkeo87NcRia-zvkJqdeP-JL-RI.roa (raw, json)
Hash identifier: dqo8+TpEaFHguM9CBsjQQOzyYaQ268Gru5/NfOeGfZ4=
Subject key identifier: 64:39:1E:A3:CE:CD:71:18:9A:FB:3B:E4:26:A7:5E:3F:E2:4B:F9:12
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183B44FB0460E8D4CDDCF4F5BC2081D81C3
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZDkeo87NcRia-zvkJqdeP-JL-RI.roa
Signing time: Fri 07 Oct 2022 21:17:44 +0000
ROA not before: Fri 07 Oct 2022 21:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 109.122.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b4:4f:b0:46:0e:8d:4c:dd:cf:4f:5b:c2:08:1d:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 7 21:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64391ea3cecd71189afb3be426a75e3fe24bf912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:f3:5f:ff:37:27:54:a7:a4:05:4f:98:60:
75:32:cc:83:eb:a1:b1:ab:7e:92:3f:e8:a1:44:2b:
a9:59:07:4f:03:58:3f:1a:11:b1:9d:65:9f:fd:cc:
72:71:00:9c:48:7f:f0:e9:90:ce:62:88:09:11:7a:
97:68:47:53:5f:40:de:01:7f:5d:aa:de:07:b4:55:
03:2a:ac:f0:26:58:1d:b3:bc:9e:de:5a:2d:b5:40:
f8:89:e1:9a:9a:42:bb:13:93:1d:7e:70:53:16:65:
42:d9:23:53:31:60:44:41:a1:7d:d3:01:79:47:57:
ae:ff:1e:b5:6e:93:3e:42:d8:ed:97:88:92:ac:be:
ce:88:a3:40:2a:36:78:f6:38:ba:d8:4a:37:3c:d7:
3d:8e:ff:01:d9:89:33:83:e6:4c:a8:7a:7d:00:e2:
1c:04:52:65:e1:5b:68:6b:0d:8e:67:f9:5b:da:b9:
c8:89:ee:d2:e1:ad:2c:1e:31:53:7e:b1:23:20:09:
67:47:95:72:d7:26:ee:dc:ee:e6:35:0d:b6:72:79:
54:a4:b0:14:55:0c:37:38:32:7a:1e:d3:7b:43:8f:
05:78:0f:a8:8f:c0:c0:d6:38:03:52:1b:e1:97:ee:
0c:58:38:73:4d:29:11:c0:b5:06:fb:99:94:72:80:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:39:1E:A3:CE:CD:71:18:9A:FB:3B:E4:26:A7:5E:3F:E2:4B:F9:12
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZDkeo87NcRia-zvkJqdeP-JL-RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:fa:c7:6d:47:aa:ed:6e:e8:3d:66:8a:d2:16:34:52:47:ac:
ff:e1:34:32:77:72:a3:63:76:71:f9:5f:d7:99:0d:01:d2:f2:
63:85:4a:67:a5:b9:75:16:47:3f:04:4f:27:7a:3c:95:df:af:
af:d9:bb:14:64:8a:01:fc:ae:1d:0e:8e:10:80:19:b1:3e:5c:
b7:f2:7c:4c:71:95:79:71:1e:1c:8f:1f:88:e4:7e:89:4a:10:
ec:cc:d3:31:24:d9:a8:64:ac:68:8c:0e:01:1b:51:91:30:22:
9c:22:f0:09:5d:6f:10:7d:4c:38:b5:11:a0:05:54:df:8d:06:
04:7c:3d:e3:3e:d2:6f:07:47:da:bf:89:1f:29:8f:17:d4:db:
b4:7c:39:6f:36:f3:bf:e7:52:53:ec:58:0c:85:f8:e4:be:35:
36:81:e0:f2:86:97:b5:30:42:33:51:06:fe:b0:08:d9:77:ba:
b3:27:05:2e:3a:6f:de:6d:63:f9:2a:62:02:93:19:0d:7c:40:
b7:15:84:fc:44:99:a8:bf:e0:a7:c6:e8:c0:bd:0f:82:ba:5d:
d3:2b:f5:69:54:ff:10:f0:b8:a7:b9:18:11:97:5c:eb:75:67:
24:af:78:39:6d:42:0c:3d:0b:41:e1:4b:b6:bc:50:d2:44:1c:
c4:40:39:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYO0T7BGDo1M3c9PW8IIHYHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMDA3MjExNzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDM5MWVhM2NlY2Q3MTE4OWFmYjNiZTQyNmE3NWUzZmUyNGJmOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWrzX/83J1SnpAVPmGB1MsyD66Gx
q36SP+ihRCupWQdPA1g/GhGxnWWf/cxycQCcSH/w6ZDOYogJEXqXaEdTX0DeAX9d
qt4HtFUDKqzwJlgds7ye3lottUD4ieGamkK7E5MdfnBTFmVC2SNTMWBEQaF90wF5
R1eu/x61bpM+Qtjtl4iSrL7OiKNAKjZ49ji62Eo3PNc9jv8B2Ykzg+ZMqHp9AOIc
BFJl4Vtoaw2OZ/lb2rnIie7S4a0sHjFTfrEjIAlnR5Vy1ybu3O7mNQ22cnlUpLAU
VQw3ODJ6HtN7Q48FeA+oj8DA1jgDUhvhl+4MWDhzTSkRwLUG+5mUcoBCIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQ5HqPOzXEYmvs75CanXj/iS/kSMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvWkRrZW84N05jUmlhLXp2a0pxZGVQLUpMLVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrIMA0G
CSqGSIb3DQEBCwUAA4IBAQC4+sdtR6rtbug9ZorSFjRSR6z/4TQyd3KjY3Zx+V/X
mQ0B0vJjhUpnpbl1Fkc/BE8nejyV36+v2bsUZIoB/K4dDo4QgBmxPly38nxMcZV5
cR4cjx+I5H6JShDszNMxJNmoZKxojA4BG1GRMCKcIvAJXW8QfUw4tRGgBVTfjQYE
fD3jPtJvB0fav4kfKY8X1Nu0fDlvNvO/51JT7FgMhfjkvjU2geDyhpe1MEIzUQb+
sAjZd7qzJwUuOm/ebWP5KmICkxkNfEC3FYT8RJmov+CnxujAvQ+Cul3TK/VpVP8Q
8LinuRgRl1zrdWckr3g5bUIMPQtB4Uu2vFDSRBzEQDlT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org