Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZzSXJCV4G22aPOfWQHC3UJ1e-Uw.roa
File: ZzSXJCV4G22aPOfWQHC3UJ1e-Uw.roa (raw, json)
Hash identifier: tQltj05MV/DdBo59O+CIYTHv9Fgra8r+gmOucpRTJ+w=
Subject key identifier: 67:34:97:24:25:78:1B:6D:9A:3C:E7:D6:40:70:B7:50:9D:5E:F9:4C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01850A8BD1A53C784B9EB5A423E01E44FF96
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZzSXJCV4G22aPOfWQHC3UJ1e-Uw.roa
Signing time: Tue 13 Dec 2022 08:13:33 +0000
ROA not before: Tue 13 Dec 2022 08:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:8b:d1:a5:3c:78:4b:9e:b5:a4:23:e0:1e:44:ff:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 13 08:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6734972425781b6d9a3ce7d64070b7509d5ef94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:a3:c4:3f:3b:19:24:52:03:46:72:58:4d:
01:54:f2:ea:f9:9b:2a:a7:b5:a1:47:4a:92:68:d7:
bd:2b:85:50:f7:20:ea:35:e8:0b:fc:25:86:50:7c:
15:45:a3:36:f5:13:5a:37:e7:cb:34:0b:36:62:7d:
89:3b:1b:6b:c4:cc:25:60:98:0d:a1:3d:7d:83:4f:
62:00:72:a5:c1:ed:ef:1d:8a:5a:50:2b:d6:01:62:
92:a6:9b:db:33:f0:8e:21:51:4c:62:ca:6a:f0:8b:
74:79:7b:bf:e0:06:0c:e5:52:2f:2b:21:02:67:87:
a6:4e:52:84:64:87:31:3d:59:56:25:be:fe:2a:3d:
91:7a:9b:b9:63:2d:00:af:ac:92:a7:1c:90:5e:8e:
ac:20:21:d9:c2:8e:e4:83:9f:ba:1f:d2:5f:68:1b:
b1:ac:fc:f0:6c:f0:c5:41:9e:34:5a:a4:0d:73:5d:
5a:05:65:9b:69:4b:76:31:1b:aa:ce:5c:e9:af:15:
4b:c7:15:99:23:87:d4:82:17:3a:eb:ed:9b:7d:f3:
61:f1:12:47:f3:2f:8c:ac:68:49:a3:9d:bf:61:4a:
00:61:e2:65:e1:98:64:2c:80:ab:46:30:15:24:1c:
39:82:5c:ec:e0:b2:03:b2:4d:c6:ae:e2:ce:bf:60:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:97:24:25:78:1B:6D:9A:3C:E7:D6:40:70:B7:50:9D:5E:F9:4C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZzSXJCV4G22aPOfWQHC3UJ1e-Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b7:b6:08:c5:ce:b9:bd:8b:91:43:e2:36:4e:a7:ff:48:5b:
e8:98:3f:7b:b5:0c:9b:3e:4b:4a:cf:80:b5:b0:27:4f:73:ec:
89:38:db:54:e2:44:40:b3:e7:0f:c7:7d:c0:0a:12:e8:7e:9e:
b3:81:4e:4d:be:98:4d:41:df:76:12:81:aa:5d:a6:84:e9:f3:
dc:34:41:97:7f:24:76:de:c5:ee:99:0c:a6:39:47:d4:d1:87:
3c:47:f1:25:d3:48:ef:fb:a2:ab:cd:bb:28:c0:96:d0:68:5b:
e7:65:11:11:15:1f:63:60:05:fb:8d:f9:ce:d0:fd:03:be:a5:
ec:56:af:fa:10:a2:a4:8d:e4:86:e1:7c:22:1a:bf:a7:ec:0c:
55:00:a6:fe:be:12:f5:5e:2a:48:95:87:d3:95:92:a6:21:c8:
17:b8:41:60:be:e7:06:52:84:04:b9:c1:fe:73:82:74:ec:b2:
89:ec:24:ca:32:44:91:f2:d1:61:12:eb:63:9a:34:03:e4:b0:
00:85:f7:44:7e:6f:9b:da:9f:ed:9a:a6:d9:c1:48:93:dd:8f:
ca:ca:14:33:8b:55:f9:84:12:1e:3e:e4:50:26:1c:18:0e:9b:
09:08:b9:c8:f8:79:3a:b6:4b:b3:ab:a3:af:f2:41:b7:94:97:
4b:54:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org