Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZIf3rsoOVpohmIByDRhBJt8yWXM.roa
File: ZIf3rsoOVpohmIByDRhBJt8yWXM.roa (raw, json)
Hash identifier: 2Ywk3AzZIRfsXLWI+jKWMoBM58w/jtoB6/4qqNOJlpo=
Subject key identifier: 64:87:F7:AE:CA:0E:56:9A:21:98:80:72:0D:18:41:26:DF:32:59:73
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018355727F9D6DBFDE3811E1ADB05A267AA5
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZIf3rsoOVpohmIByDRhBJt8yWXM.roa
Signing time: Mon 19 Sep 2022 11:11:50 +0000
ROA not before: Mon 19 Sep 2022 11:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:72:7f:9d:6d:bf:de:38:11:e1:ad:b0:5a:26:7a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Sep 19 11:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6487f7aeca0e569a219880720d184126df325973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:97:db:b7:b2:d4:10:81:60:d3:81:f9:0a:
9e:7e:14:08:ae:a2:14:b3:61:f4:cc:50:a4:8c:5f:
52:ed:a3:95:10:02:2d:ed:88:7a:db:ed:7f:e2:71:
49:fd:17:4a:ff:78:3a:78:e9:9b:94:c4:91:24:9c:
fe:3a:99:83:24:0a:88:63:7c:e7:6b:5a:37:50:6b:
41:50:90:78:bd:d1:49:12:c2:fc:93:75:06:4d:d3:
e5:37:eb:1d:fd:da:85:91:a7:9e:47:ca:04:2c:e3:
2e:5d:c5:db:72:6b:8f:08:27:7b:75:d7:ba:7f:27:
3c:17:64:ec:75:9a:86:46:fa:22:dc:89:cb:d8:e7:
d7:eb:47:e9:8a:0c:56:5d:79:ab:31:7c:90:94:55:
3e:19:91:3b:78:79:91:71:12:00:70:c3:7c:cc:0c:
c9:20:2f:96:c5:b8:b8:80:e2:9e:e9:e5:47:cf:3f:
eb:87:d7:e1:dd:e0:95:5e:c2:94:7c:0f:9a:b5:eb:
30:2c:a7:2a:4d:da:6d:23:ee:73:85:70:79:62:a1:
3b:2d:0c:bd:60:c5:a0:1b:08:57:3d:32:90:e1:d0:
b5:d6:e0:e8:7d:86:6a:f0:5e:94:41:64:40:79:2e:
db:bb:5e:96:42:33:13:aa:3d:6d:ca:49:3b:64:7e:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:F7:AE:CA:0E:56:9A:21:98:80:72:0D:18:41:26:DF:32:59:73
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZIf3rsoOVpohmIByDRhBJt8yWXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:71:e5:64:29:af:ae:1b:e9:e9:51:6f:94:26:38:51:ec:5e:
95:9f:b2:d0:77:65:a8:65:b1:23:53:d7:cf:e0:4a:f4:63:13:
dd:ff:05:f1:d6:a6:16:24:3e:0e:10:b9:fb:88:9f:a8:37:68:
27:e2:86:5c:73:db:b7:07:06:cb:2f:88:c1:ad:a5:a4:11:a5:
b1:07:42:ea:60:e3:9b:4c:e1:13:15:82:12:bd:7c:e2:f2:f2:
f3:11:a2:8d:2a:e2:c3:a2:ee:89:c8:82:31:b7:79:68:06:db:
65:57:59:32:10:ba:7f:13:a6:0e:f3:86:d1:e5:fa:1a:20:b4:
ff:a7:5f:67:12:35:77:db:f9:2f:49:67:f1:ad:bf:ad:d8:c4:
f1:bf:7f:4f:87:52:61:7e:c2:3d:ac:c5:6f:97:6f:19:bc:1e:
0f:ff:d8:62:62:9d:58:75:76:cf:e7:8b:0f:4e:66:6a:a5:cd:
a7:de:4b:71:15:cd:8e:02:0a:ee:78:e2:bd:4e:d2:17:15:2c:
d3:4c:ec:55:e5:8a:b2:22:9f:12:f6:bb:f9:59:2b:b9:96:04:
d0:1a:70:c0:a5:8a:aa:46:1c:f9:54:c2:1d:a7:e9:06:21:00:
85:d0:b9:5d:38:a4:29:dd:55:99:df:3f:69:98:99:84:41:18:
8b:a6:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org