Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_rD7kbtSqDs57mTdUFaASjnGdjw.roa
File: _rD7kbtSqDs57mTdUFaASjnGdjw.roa (raw, json)
Hash identifier: Xz/RXdWEIMnOZQNWSL4hxu7K/o/OcSzgnJqquwAdwMA=
Subject key identifier: FE:B0:FB:91:BB:52:A8:3B:39:EE:64:DD:50:56:80:4A:39:C6:76:3C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5413BA95A3CBDD5E92357AD41441
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_rD7kbtSqDs57mTdUFaASjnGdjw.roa
Signing time: Sun 01 Jan 2023 21:44:45 +0000
ROA not before: Sun 01 Jan 2023 21:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 109.122.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:54:13:ba:95:a3:cb:dd:5e:92:35:7a:d4:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feb0fb91bb52a83b39ee64dd5056804a39c6763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:9f:44:b7:eb:46:f3:ec:1b:7e:5e:aa:02:
50:f8:76:99:26:92:a0:e7:86:e6:74:31:e5:6f:79:
0a:f0:70:25:41:f5:0a:29:58:5b:c7:8a:8c:f5:e1:
c7:d5:d8:06:5a:f5:e9:54:62:b0:8c:90:79:e7:54:
9f:96:1b:c3:61:c6:aa:67:6d:68:f7:48:2f:59:63:
5d:78:53:29:66:35:16:6f:5c:3b:39:38:c6:a9:58:
52:1a:1a:f4:21:1a:46:82:b3:58:6b:63:15:e8:94:
3e:97:c2:02:c0:24:e2:72:03:00:db:c8:00:57:75:
2f:c2:b0:ea:b1:e1:35:50:7f:ad:b4:16:99:90:fc:
0e:59:f1:5d:ed:44:e1:4b:1f:9d:71:28:a0:49:5d:
f2:cd:3b:00:05:80:69:e3:b0:c6:25:81:af:f9:63:
d0:d4:b8:9c:e5:99:48:fc:50:a2:94:ea:4c:5f:e9:
74:0f:f8:86:72:84:66:e4:aa:05:9e:04:bf:f8:ed:
d2:10:31:b6:c4:d1:45:e2:fb:90:ae:64:fb:bd:19:
c1:5b:05:59:e7:bf:9c:b7:3c:53:0e:a1:65:2c:f6:
47:ab:a0:8d:65:51:77:4d:60:a9:4a:82:c3:2d:41:
4d:f5:bb:c1:11:f1:aa:37:ee:03:46:fb:33:cf:9b:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:FB:91:BB:52:A8:3B:39:EE:64:DD:50:56:80:4A:39:C6:76:3C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_rD7kbtSqDs57mTdUFaASjnGdjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:dc:75:1f:e9:14:47:8c:a1:d5:bd:b0:10:6a:08:7f:64:f7:
d3:4d:f2:0c:48:c2:de:af:b9:39:2e:47:e8:b3:1b:4f:00:54:
b3:a5:cc:dd:0c:66:a1:ac:a7:57:5a:a7:86:69:9f:fe:97:17:
29:be:59:5b:a5:d0:2a:72:06:5f:c1:eb:82:d0:39:7d:07:b6:
ee:bd:5a:72:cb:fe:11:b4:1e:62:f5:5a:f8:bf:27:03:60:87:
14:41:5f:55:35:8c:74:5a:9b:14:9d:2f:07:d7:9c:04:6c:67:
d1:f0:a0:43:eb:cb:81:07:6d:2c:f6:04:ed:22:d7:07:52:13:
2a:03:15:9f:28:f6:4b:a4:94:a2:57:55:ca:5e:e3:22:8f:09:
0c:4c:c2:40:dc:e9:db:67:9e:fa:e0:4f:4d:42:9f:b1:fd:b1:
f6:59:29:32:72:4f:97:ee:2a:70:a3:fe:ae:bd:d5:6a:d5:fb:
e8:24:9a:a5:28:0e:ff:0c:70:d0:aa:bb:2c:05:fa:11:85:fd:
54:03:3a:30:e7:d7:85:09:16:4a:d7:2d:2b:61:5a:1f:bb:67:
b6:ac:0f:6c:f9:f1:06:e0:d2:c5:67:24:0e:26:b7:77:bc:83:
65:c8:26:da:c2:21:07:ca:e3:61:76:17:03:01:bd:4b:d8:e3:
19:f7:e1:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS1QTupWjy91ekjV61BRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTAxMjE0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWIwZmI5MWJiNTJhODNiMzllZTY0ZGQ1MDU2ODA0YTM5YzY3NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghyfRLfrRvPsG35eqgJQ+HaZJpKg
54bmdDHlb3kK8HAlQfUKKVhbx4qM9eHH1dgGWvXpVGKwjJB551SflhvDYcaqZ21o
90gvWWNdeFMpZjUWb1w7OTjGqVhSGhr0IRpGgrNYa2MV6JQ+l8ICwCTicgMA28gA
V3UvwrDqseE1UH+ttBaZkPwOWfFd7UThSx+dcSigSV3yzTsABYBp47DGJYGv+WPQ
1Lic5ZlI/FCilOpMX+l0D/iGcoRm5KoFngS/+O3SEDG2xNFF4vuQrmT7vRnBWwVZ
57+ctzxTDqFlLPZHq6CNZVF3TWCpSoLDLUFN9bvBEfGqN+4DRvszz5u7OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6w+5G7Uqg7Oe5k3VBWgEo5xnY8MB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvX3JEN2tidFNxRHM1N21UZFVGYUFTam5HZGp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrQMA0G
CSqGSIb3DQEBCwUAA4IBAQCM3HUf6RRHjKHVvbAQagh/ZPfTTfIMSMLer7k5Lkfo
sxtPAFSzpczdDGahrKdXWqeGaZ/+lxcpvllbpdAqcgZfweuC0Dl9B7buvVpyy/4R
tB5i9Vr4vycDYIcUQV9VNYx0WpsUnS8H15wEbGfR8KBD68uBB20s9gTtItcHUhMq
AxWfKPZLpJSiV1XKXuMijwkMTMJA3OnbZ5764E9NQp+x/bH2WSkyck+X7ipwo/6u
vdVq1fvoJJqlKA7/DHDQqrssBfoRhf1UAzow59eFCRZK1y0rYVofu2e2rA9s+fEG
4NLFZyQOJrd3vINlyCbawiEHyuNhdhcDAb1L2OMZ9+Ee
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org