Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/dGZxU2Co9yh7bgyLP-Gs7XtfC6c.roa
File: dGZxU2Co9yh7bgyLP-Gs7XtfC6c.roa (raw, json)
Hash identifier: jFT2n1+sPgijVI5yE7BYxhRsoPtgXpYmZzH4Brah/Z0=
Subject key identifier: 74:66:71:53:60:A8:F7:28:7B:6E:0C:8B:3F:E1:AC:ED:7B:5F:0B:A7
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184AE499DF2204E6B842FD6DC1940FBE198
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/dGZxU2Co9yh7bgyLP-Gs7XtfC6c.roa
Signing time: Fri 25 Nov 2022 10:16:10 +0000
ROA not before: Fri 25 Nov 2022 10:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:49:9d:f2:20:4e:6b:84:2f:d6:dc:19:40:fb:e1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 25 10:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7466715360a8f7287b6e0c8b3fe1aced7b5f0ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:a0:65:17:d2:1a:ac:4e:2d:36:c6:f6:bf:
52:33:7a:ca:ec:bf:29:b8:50:a1:9f:52:3e:d3:21:
9d:08:69:67:68:79:c0:90:13:5a:94:47:40:30:70:
5a:89:56:13:e1:80:67:bc:3b:1b:12:e3:ba:7c:50:
9a:d7:55:cc:95:17:5f:68:f9:57:8c:60:dd:55:9f:
20:48:3d:0d:79:bd:d5:f4:b3:b3:62:de:6c:0b:cc:
41:13:20:2f:87:52:f3:1e:23:74:aa:e6:74:00:c5:
16:65:50:e0:3e:45:83:fe:95:38:11:a7:16:3b:75:
79:05:e1:aa:13:af:d5:88:d9:dd:34:31:0f:e8:f1:
22:3d:a2:16:46:dc:24:f3:4f:6e:ee:87:da:71:76:
51:17:43:b6:da:e8:fd:c6:cd:b3:26:2c:00:1f:0e:
38:43:cf:8e:24:c9:5e:e1:f0:f1:fa:1d:21:87:bc:
d6:2e:da:21:33:12:f7:35:f0:23:03:dc:06:57:a4:
19:79:12:60:0e:70:6a:1b:10:9b:28:54:4f:73:54:
ff:30:3c:55:03:c4:51:2e:e5:f5:69:ba:fc:e5:63:
02:8b:15:49:60:9a:ec:32:37:9e:81:e7:2d:77:08:
cc:e0:f0:a4:5b:ac:3f:6a:c2:15:3a:c3:a2:e6:25:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:71:53:60:A8:F7:28:7B:6E:0C:8B:3F:E1:AC:ED:7B:5F:0B:A7
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/dGZxU2Co9yh7bgyLP-Gs7XtfC6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e0:ad:17:54:8f:ba:27:82:3f:c2:6b:52:5e:33:f0:7c:cb:
20:95:47:af:08:31:1c:68:a0:4a:16:de:8b:e4:dd:bc:76:b6:
46:75:f3:74:a1:fd:b4:86:5d:b8:9d:1e:79:2c:8e:1c:3f:82:
af:ce:0f:d3:37:1c:6c:ce:f0:34:c4:ea:1f:78:ed:16:9a:db:
fd:bb:dc:c9:90:09:1c:b2:e6:52:64:dd:86:64:58:f2:58:65:
d2:89:d8:ef:0e:ff:31:38:3c:3e:06:5e:81:39:a0:92:4e:8c:
6a:3c:21:68:26:b2:4e:aa:1e:43:8e:64:83:1a:48:92:d2:74:
5c:50:18:3f:a3:b2:26:ee:51:e5:f8:1a:e7:64:79:73:b4:2b:
ef:0c:ba:a4:d6:e2:9f:6d:83:5a:c9:4a:16:17:21:74:ee:7e:
5e:a6:55:4f:4a:e7:f9:89:09:14:d4:da:50:1e:92:9d:48:44:
72:61:b4:55:55:72:14:8a:be:51:bc:47:c8:a8:e2:ce:2c:e6:
5b:e3:60:32:d0:88:74:28:c5:22:a4:d1:98:c9:dc:da:3d:81:
bf:d2:6e:cd:3a:45:d5:3f:00:ba:d2:f4:2b:21:e4:24:a7:fa:
d7:68:e6:54:97:2c:20:5b:30:49:22:c3:78:4f:57:3f:c7:33:
6f:87:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org