Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bOGgTd2HpJmsgam_nrzpQ9t1KNg.roa
File: bOGgTd2HpJmsgam_nrzpQ9t1KNg.roa (raw, json)
Hash identifier: txVX9+xeCCMUlnIVxK5K8KZ4BBsAY73v55+5CIsl5aM=
Subject key identifier: 6C:E1:A0:4D:DD:87:A4:99:AC:81:A9:BF:9E:BC:E9:43:DB:75:28:D8
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01859C3F66425B9172CF1159B464E5826D63
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bOGgTd2HpJmsgam_nrzpQ9t1KNg.roa
Signing time: Tue 10 Jan 2023 15:14:38 +0000
ROA not before: Tue 10 Jan 2023 15:14:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:3f:66:42:5b:91:72:cf:11:59:b4:64:e5:82:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 10 15:14:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce1a04ddd87a499ac81a9bf9ebce943db7528d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:9d:9d:c0:26:db:26:b0:95:9f:66:92:47:
16:18:a1:a7:2a:a4:ef:8a:51:d4:f1:cd:80:72:d8:
55:9e:4f:91:c2:79:4e:6b:a5:b4:93:a3:d9:57:5f:
30:b6:08:33:11:d8:5a:09:08:21:98:d6:1f:98:d0:
79:40:b4:13:45:e6:a2:6d:2b:b0:86:7d:91:6f:de:
15:ad:a9:ff:22:31:6c:0b:97:06:27:ed:95:42:aa:
8e:56:00:93:3e:8c:44:6d:f7:3c:91:8f:c5:a1:cf:
e9:05:13:0d:65:4b:a7:b6:1e:e5:f0:65:ed:41:04:
4f:42:4e:da:a5:02:8d:0f:a3:02:48:65:55:ed:3d:
18:b0:07:ff:21:2d:e0:6b:2b:1d:f8:00:32:72:51:
18:2e:72:2b:6f:b3:9f:69:4d:06:fe:b4:9b:0d:b8:
48:a2:4c:79:7c:82:6a:49:9b:aa:42:fc:9a:66:c5:
ef:38:55:13:ca:df:2b:cd:a3:9b:8c:c8:5e:65:87:
40:f5:e1:f0:6e:3b:73:f9:2f:8a:30:24:c5:45:a8:
0a:20:46:87:32:c9:e5:2b:7c:60:5b:07:d2:78:dd:
fb:97:02:25:51:35:54:30:ed:6b:1c:e5:8c:63:ba:
ee:39:d9:d8:3a:82:1d:93:5c:0f:41:12:7e:33:48:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E1:A0:4D:DD:87:A4:99:AC:81:A9:BF:9E:BC:E9:43:DB:75:28:D8
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bOGgTd2HpJmsgam_nrzpQ9t1KNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ee:8c:6a:a6:39:31:1b:21:76:b8:ca:56:bb:29:e3:36:d7:
5d:04:42:67:9e:f0:13:db:a6:85:83:ad:ae:b8:e9:3b:71:df:
45:bd:17:fe:35:f6:2d:a1:71:2a:b5:66:bd:44:2b:ce:f8:fa:
62:c2:e5:0e:ea:b1:75:15:02:f5:70:b6:e3:45:fa:f4:2a:b6:
e3:b2:8e:cc:be:87:58:81:59:fd:fe:b2:a2:96:ca:8e:09:34:
0d:93:5f:3f:14:bb:03:85:91:7b:91:de:6d:46:bc:b0:0c:46:
f9:94:f0:fb:f6:c7:54:a3:6a:c9:b2:3c:82:c9:f4:9a:1a:01:
45:70:f0:4d:cc:d9:77:d2:80:1c:78:50:bd:7e:84:e4:1e:25:
33:f3:42:8a:e5:79:8f:ac:d0:5f:72:3c:15:4a:0e:ad:d1:1c:
61:26:f5:45:c5:f0:45:08:b8:77:dc:4b:18:00:38:cd:61:cb:
91:14:ae:01:92:bf:20:a0:99:3c:0c:16:19:1d:33:75:f3:8c:
e4:c5:9c:b2:b7:19:89:dd:c9:af:bb:83:9f:3c:50:bf:92:8d:
b8:0b:81:e3:a9:54:21:40:59:63:16:e9:de:58:e3:da:42:2a:
fc:37:76:08:ee:55:a4:28:cb:ad:49:4d:92:df:a4:d2:76:c5:
e0:7f:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org