Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/eGK4PJc9528chdnDwgb6Dw7TfuQ.roa
File: eGK4PJc9528chdnDwgb6Dw7TfuQ.roa (raw, json)
Hash identifier: gyceH7SC6WdsdF+DSh9rEElTsc7xNUehRzQzmK1UHVk=
Subject key identifier: 78:62:B8:3C:97:3D:E7:6F:1C:85:D9:C3:C2:06:FA:0F:0E:D3:7E:E4
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0186F393AD43089506D91DBA9F9A46AC1617
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/eGK4PJc9528chdnDwgb6Dw7TfuQ.roa
Signing time: Sat 18 Mar 2023 07:16:27 +0000
ROA not before: Sat 18 Mar 2023 07:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 109.122.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:93:ad:43:08:95:06:d9:1d:ba:9f:9a:46:ac:16:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 18 07:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7862b83c973de76f1c85d9c3c206fa0f0ed37ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:b2:e8:3f:21:1c:b4:07:89:49:92:89:b9:
48:46:f6:2f:4c:91:e5:19:ca:b3:16:ea:06:22:5c:
86:d0:3a:e1:af:99:e2:ba:15:a4:50:7e:21:3f:60:
5d:24:76:ee:14:2f:e4:cd:63:d3:44:e7:32:a3:3f:
ec:67:99:35:c4:36:1b:18:7e:f3:8d:fb:29:22:aa:
33:36:12:1a:3c:52:6f:54:5d:fe:3c:c8:27:e8:40:
a6:c3:ed:00:68:0f:17:c9:9c:7d:c5:07:fb:37:2e:
e4:a0:5c:4a:10:aa:51:22:69:f1:14:ec:10:24:c7:
83:3e:02:69:12:ab:b1:fc:c1:59:a7:91:6b:9d:f5:
db:2b:2c:19:e4:17:68:95:35:22:a1:fd:2d:da:f5:
c7:64:dc:ae:e9:4a:ec:aa:6b:65:a4:8a:31:35:93:
f3:77:d4:fc:37:f3:83:11:6c:f7:31:e9:88:04:c8:
34:bf:27:27:55:86:b2:be:19:d5:f8:45:fb:25:92:
f3:6d:40:58:1f:f9:7a:4b:45:2c:8e:11:f8:55:95:
9e:86:c9:ed:0d:87:0e:e4:e8:d3:7f:e1:41:dc:c1:
5a:58:64:44:71:14:7a:e4:f6:b9:f7:43:66:d7:6f:
91:2b:07:ba:53:c8:bb:d6:60:50:f7:af:b8:32:4d:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:62:B8:3C:97:3D:E7:6F:1C:85:D9:C3:C2:06:FA:0F:0E:D3:7E:E4
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/eGK4PJc9528chdnDwgb6Dw7TfuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b1:31:18:cc:f1:a0:2d:48:7a:fc:dd:2d:63:6e:90:d0:17:
62:1f:0e:42:f0:0c:ad:f7:a6:48:f7:93:a3:50:69:8c:bf:d5:
d0:b2:1b:85:d3:5d:be:af:d4:05:99:44:08:2f:d7:11:22:6f:
d9:7f:42:92:8a:7e:fc:9f:78:16:3b:fc:e5:8a:a0:4f:c8:29:
92:50:49:d2:f7:1e:bf:e3:4b:ef:6a:52:06:c1:3a:d5:e0:e5:
4f:09:3c:16:b5:57:ec:08:3f:0c:d6:08:08:9a:ed:eb:fc:ab:
59:5d:e0:6a:01:3a:bd:c4:6a:eb:e7:94:a5:82:de:0a:ba:c2:
56:c6:5b:09:08:02:e9:6f:1c:3e:d0:ae:06:47:1e:77:44:f3:
77:68:bc:b1:4a:c9:92:bb:03:4e:e8:21:14:42:a6:1e:e9:e2:
7f:39:3e:7f:2d:32:e6:77:35:cb:b9:ad:24:6a:21:09:1c:58:
2d:59:e8:ef:b4:f4:0a:29:47:f9:b4:9a:cd:f1:21:50:ba:9d:
4e:50:ea:33:8c:62:4e:ee:e0:1e:81:d9:3f:af:fd:a7:00:09:
71:76:ee:94:6e:2f:ba:3d:15:28:75:8e:33:43:d6:3a:3f:32:
a9:a4:14:5e:9e:89:01:6d:47:2e:22:00:78:39:0e:b1:71:9d:
61:94:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org