Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_SOE8P6BUq0s50S_-qSZym4AOzY.roa
File: _SOE8P6BUq0s50S_-qSZym4AOzY.roa (raw, json)
Hash identifier: dvSGgCn0GZs2HE8HnTPEOT+G5XWFGF/kAl5VoVKifIk=
Subject key identifier: FD:23:84:F0:FE:81:52:AD:2C:E7:44:BF:FA:A4:99:CA:6E:00:3B:36
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018691D1E0FF89B6B3D298078B75A9592707
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_SOE8P6BUq0s50S_-qSZym4AOzY.roa
Signing time: Mon 27 Feb 2023 07:41:36 +0000
ROA not before: Mon 27 Feb 2023 07:41:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60790
IP address blocks: 109.122.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:d1:e0:ff:89:b6:b3:d2:98:07:8b:75:a9:59:27:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Feb 27 07:41:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2384f0fe8152ad2ce744bffaa499ca6e003b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:27:60:23:18:ac:2d:e6:80:69:eb:1a:98:
af:db:b2:4e:81:1b:e5:5b:a9:83:e6:1f:94:dd:be:
7d:a0:56:a7:95:ea:11:1e:b6:64:a9:e0:f0:75:e5:
0c:1d:3c:97:66:5a:31:c3:f1:ed:f2:1f:95:3b:1e:
f9:29:74:1e:65:a8:7d:d6:b6:c1:7f:c6:68:3c:aa:
ac:7b:84:39:1c:02:b2:af:e1:18:4a:d2:de:d8:8a:
bc:dc:f1:55:f8:7a:0f:7f:b4:d4:d6:b0:2a:cd:21:
6e:86:df:8e:75:4a:6a:e6:ec:c5:30:06:bb:87:f1:
60:f1:1f:b1:f7:21:d5:a1:69:4f:34:3b:9c:81:3b:
33:90:fa:b3:88:04:c5:87:20:c0:c2:22:b1:e4:2a:
4d:8d:92:a3:5e:42:2c:de:7f:0a:ea:07:44:08:9a:
13:1f:63:e3:61:86:18:3e:0f:4b:c4:56:d8:4e:0b:
86:0f:4a:4d:e4:fb:0d:69:df:ca:b9:e8:20:88:0d:
c2:ba:45:f7:00:af:2b:0a:c8:b5:5d:a0:f3:05:01:
f8:dc:e2:65:d0:cb:b7:5f:0f:de:06:dd:81:18:5f:
cd:97:32:ac:df:bc:12:93:8e:db:6c:14:6c:d3:63:
57:d2:a8:cf:af:6d:bf:87:da:e0:42:1f:31:0f:3a:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:84:F0:FE:81:52:AD:2C:E7:44:BF:FA:A4:99:CA:6E:00:3B:36
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_SOE8P6BUq0s50S_-qSZym4AOzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:96:ee:79:ad:fd:1d:83:f5:91:f6:ba:bf:0a:54:f5:4c:3d:
38:4b:5f:7e:87:56:58:0a:df:fd:cb:60:47:9e:b8:d7:01:a7:
11:b8:85:6e:8f:cb:ff:42:6c:37:48:34:24:04:f8:32:e6:63:
44:71:16:73:b0:78:da:2e:21:37:5f:9f:f4:0c:48:7b:fc:78:
60:5d:ac:65:96:30:1e:61:d4:13:01:43:46:80:28:07:75:ff:
50:d6:73:36:d7:de:0d:9b:3c:0a:b4:45:9f:fb:5f:0e:1b:1d:
d8:e1:a3:0a:2c:d0:0c:c3:2f:d1:9a:1a:a3:ea:39:9c:32:79:
d8:a1:16:79:25:9a:83:f6:19:3d:ad:2a:87:86:58:b2:21:71:
be:37:c2:73:fe:2f:40:6d:8d:de:cd:76:1d:68:60:a7:80:28:
99:68:a8:10:a8:87:92:75:e5:41:bb:39:38:73:1a:35:19:be:
4b:8f:4b:9a:aa:1a:50:36:de:aa:04:bf:c5:60:ab:82:1f:f4:
33:a3:bb:b7:83:66:0a:2a:e0:1d:36:d2:33:44:75:95:ee:47:
27:40:e9:4e:5d:d7:f4:08:bf:e7:ec:67:4f:56:3c:c2:61:90:
61:d7:eb:97:d9:90:26:63:57:e3:5b:9a:72:d7:a2:07:69:e8:
cb:4f:58:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaR0eD/ibaz0pgHi3WpWScHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMjI3MDc0MTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDIzODRmMGZlODE1MmFkMmNlNzQ0YmZmYWE0OTljYTZlMDAzYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicUnYCMYrC3mgGnrGpiv27JOgRvl
W6mD5h+U3b59oFanleoRHrZkqeDwdeUMHTyXZloxw/Ht8h+VOx75KXQeZah91rbB
f8ZoPKqse4Q5HAKyr+EYStLe2Iq83PFV+HoPf7TU1rAqzSFuht+OdUpq5uzFMAa7
h/Fg8R+x9yHVoWlPNDucgTszkPqziATFhyDAwiKx5CpNjZKjXkIs3n8K6gdECJoT
H2PjYYYYPg9LxFbYTguGD0pN5PsNad/KueggiA3CukX3AK8rCsi1XaDzBQH43OJl
0Mu3Xw/eBt2BGF/NlzKs37wSk47bbBRs02NX0qjPr22/h9rgQh8xDzoxGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP0jhPD+gVKtLOdEv/qkmcpuADs2MB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvX1NPRThQNkJVcTBzNTBTXy1xU1p5bTRBT3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrVMA0G
CSqGSIb3DQEBCwUAA4IBAQC5lu55rf0dg/WR9rq/ClT1TD04S19+h1ZYCt/9y2BH
nrjXAacRuIVuj8v/Qmw3SDQkBPgy5mNEcRZzsHjaLiE3X5/0DEh7/HhgXaxlljAe
YdQTAUNGgCgHdf9Q1nM2194NmzwKtEWf+18OGx3Y4aMKLNAMwy/Rmhqj6jmcMnnY
oRZ5JZqD9hk9rSqHhliyIXG+N8Jz/i9AbY3ezXYdaGCngCiZaKgQqIeSdeVBuzk4
cxo1Gb5Lj0uaqhpQNt6qBL/FYKuCH/Qzo7u3g2YKKuAdNtIzRHWV7kcnQOlOXdf0
CL/n7GdPVjzCYZBh1+uX2ZAmY1fjW5py16IHaejLT1j/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org