Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_8LgkuqkCF_eGSsPn6XIOk3Deq4.roa
File: _8LgkuqkCF_eGSsPn6XIOk3Deq4.roa (raw, json)
Hash identifier: 6AEF9wtgAcQ+xO7lktWU78nnYS3UedG5TLVQCfVaroc=
Subject key identifier: FF:C2:E0:92:EA:A4:08:5F:DE:19:2B:0F:9F:A5:C8:3A:4D:C3:7A:AE
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01852E8BCECDAC969262B4824CC2579CA449
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_8LgkuqkCF_eGSsPn6XIOk3Deq4.roa
Signing time: Tue 20 Dec 2022 07:59:52 +0000
ROA not before: Tue 20 Dec 2022 07:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200586
IP address blocks: 109.122.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:8b:ce:cd:ac:96:92:62:b4:82:4c:c2:57:9c:a4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 20 07:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffc2e092eaa4085fde192b0f9fa5c83a4dc37aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:49:f5:dc:05:36:40:c8:2c:4d:07:31:f7:
06:6e:4a:be:c7:5a:09:bc:0f:65:38:79:a1:bd:32:
4b:ed:e0:ef:1d:51:38:28:91:f8:49:6f:6b:9c:7e:
7f:d5:ce:df:61:cb:0e:6c:4b:b2:ab:96:12:9e:31:
ca:a5:26:da:fe:a9:6e:19:ea:21:14:ff:a8:d4:5f:
b0:cd:27:da:cd:19:5a:80:eb:49:0d:1c:b0:60:76:
54:45:bd:9f:c2:cf:ca:7d:91:d8:d4:74:e9:26:e9:
75:9d:2e:47:09:1a:bc:00:bd:50:61:c7:ef:4e:96:
28:bd:3d:c4:94:f2:f1:57:77:79:26:21:e3:e7:f2:
ec:06:22:a6:97:6f:da:86:08:f8:47:4f:08:49:a7:
ac:75:79:90:51:ac:a7:cb:9b:94:dc:c1:e4:98:04:
14:6a:7e:bb:fd:ce:92:fc:35:5f:69:7b:9b:07:7e:
f3:05:61:02:d7:5b:dd:a3:df:c3:5b:24:bf:44:0e:
09:eb:6d:04:18:cf:59:7b:ba:d2:df:4a:7b:3c:d8:
7e:e6:4e:85:7c:05:7a:d3:a5:47:44:a4:23:21:e7:
3a:d4:94:19:f4:32:5f:7e:9e:e9:80:ee:5b:2f:3c:
ad:a7:40:d9:fd:37:ce:ea:00:6a:a8:4e:a2:81:99:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:E0:92:EA:A4:08:5F:DE:19:2B:0F:9F:A5:C8:3A:4D:C3:7A:AE
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_8LgkuqkCF_eGSsPn6XIOk3Deq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:61:5d:a9:da:e5:a1:1c:28:ea:dd:86:49:78:fc:a6:5b:ed:
a7:14:45:79:2c:72:af:53:b6:70:06:52:c2:30:07:73:8a:fd:
45:0b:c2:01:9d:1d:aa:0c:4d:d3:a3:72:ac:86:2a:f1:cc:44:
05:7a:5d:38:42:8b:26:05:aa:0e:9a:a8:1e:c4:40:16:f7:06:
cd:2b:61:ec:a4:64:1e:dd:23:91:59:9d:b0:aa:9c:7d:63:84:
c4:c1:e7:be:53:bc:76:3c:08:9a:72:6a:55:b3:ce:ff:c2:96:
08:97:c5:21:2c:44:d0:25:46:92:57:e3:06:c9:45:5e:16:fe:
3a:99:54:3d:64:52:e8:b8:53:48:43:e1:55:e8:aa:d2:3d:cf:
7d:0f:18:6a:c9:47:ee:1b:59:ee:ed:3b:9a:80:c1:b3:36:e1:
57:c7:c7:43:6f:e8:94:12:3c:b3:a5:80:cc:4e:e5:50:52:ad:
cf:76:b1:d0:74:b2:c4:39:7f:15:73:b4:ab:64:86:e5:fb:f5:
4b:1c:fb:7f:d0:a3:60:fa:d6:f3:e0:d4:b7:2c:c4:ad:2b:dd:
f5:6f:77:0f:2d:7f:1f:95:49:32:2f:c9:4f:19:8a:49:ad:9a:
36:be:7e:c5:24:6c:b6:28:d8:ff:1b:35:bd:8b:4f:f6:26:9a:
eb:04:83:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUui87NrJaSYrSCTMJXnKRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMjIwMDc1OTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmMyZTA5MmVhYTQwODVmZGUxOTJiMGY5ZmE1YzgzYTRkYzM3YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFxJ9dwFNkDILE0HMfcGbkq+x1oJ
vA9lOHmhvTJL7eDvHVE4KJH4SW9rnH5/1c7fYcsObEuyq5YSnjHKpSba/qluGeoh
FP+o1F+wzSfazRlagOtJDRywYHZURb2fws/KfZHY1HTpJul1nS5HCRq8AL1QYcfv
TpYovT3ElPLxV3d5JiHj5/LsBiKml2/ahgj4R08ISaesdXmQUayny5uU3MHkmAQU
an67/c6S/DVfaXubB37zBWEC11vdo9/DWyS/RA4J620EGM9Ze7rS30p7PNh+5k6F
fAV606VHRKQjIec61JQZ9DJffp7pgO5bLzytp0DZ/TfO6gBqqE6igZl7MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/C4JLqpAhf3hkrD5+lyDpNw3quMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvXzhMZ2t1cWtDRl9lR1NzUG42WElPazNEZXE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrYMA0G
CSqGSIb3DQEBCwUAA4IBAQAdYV2p2uWhHCjq3YZJePymW+2nFEV5LHKvU7ZwBlLC
MAdziv1FC8IBnR2qDE3To3KshirxzEQFel04QosmBaoOmqgexEAW9wbNK2HspGQe
3SORWZ2wqpx9Y4TEwee+U7x2PAiacmpVs87/wpYIl8UhLETQJUaSV+MGyUVeFv46
mVQ9ZFLouFNIQ+FV6KrSPc99DxhqyUfuG1nu7TuagMGzNuFXx8dDb+iUEjyzpYDM
TuVQUq3PdrHQdLLEOX8Vc7SrZIbl+/VLHPt/0KNg+tbz4NS3LMStK931b3cPLX8f
lUkyL8lPGYpJrZo2vn7FJGy2KNj/GzW9i0/2JprrBINK
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org