Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/evrbntjJEEwpn_b-hooyAmGp-Qw.roa
File: evrbntjJEEwpn_b-hooyAmGp-Qw.roa (raw, json)
Hash identifier: j8plAMt38SH112hmAfoMhu25r1L0W7PXlmAWYkh4XRk=
Subject key identifier: 7A:FA:DB:9E:D8:C9:10:4C:29:9F:F6:FE:86:8A:32:02:61:A9:F9:0C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06493F16
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/evrbntjJEEwpn_b-hooyAmGp-Qw.roa
Signing time: Sun 06 Mar 2022 07:30:30 +0000
ROA not before: Sun 06 Mar 2022 07:30:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.200.0/22 maxlen: 24
109.122.206.0/23 maxlen: 24
109.122.205.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.212.0/23 maxlen: 24
109.122.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105463574 (0x6493f16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 6 07:30:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7afadb9ed8c9104c299ff6fe868a320261a9f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:cd:9c:1d:26:d2:ac:a3:ad:2c:be:7c:78:
c2:ca:bc:af:49:28:ce:e3:de:dc:db:40:30:89:75:
20:5d:89:44:24:88:e7:cf:f1:74:07:e8:1b:e0:2e:
86:f8:36:83:1b:3c:5f:9d:4a:f8:12:76:ac:67:52:
a7:85:41:01:f8:28:0c:78:50:f0:93:d7:80:db:e9:
93:bc:05:ff:43:98:55:d4:e5:1a:03:4a:eb:5b:5e:
14:2e:bf:76:d8:33:5a:8a:b3:21:ae:82:5a:f8:3d:
de:cf:5d:ac:a4:c5:db:c7:de:d6:21:6a:22:85:74:
e1:cc:ba:46:72:89:13:72:ea:30:d8:7b:4e:54:a1:
51:3a:ff:0b:37:72:9d:5d:d3:81:78:57:92:9c:f3:
71:6a:02:4e:66:28:81:a1:5a:8b:d1:03:a0:7a:9f:
0c:20:d8:57:77:45:4a:7e:7c:c1:e0:45:d8:13:a3:
c9:b6:36:55:31:29:de:22:cf:cf:a2:bd:af:9b:95:
36:e9:30:6d:6a:a9:8d:7c:7e:68:2a:79:9b:a5:16:
4c:5f:bd:72:0a:35:51:74:84:f1:27:d6:2f:a1:cb:
d1:7c:9d:85:9b:d3:94:d7:c6:54:b3:ba:39:09:d3:
e3:85:cd:f8:bc:39:b8:9f:a2:9a:ae:1d:9d:bf:a0:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:DB:9E:D8:C9:10:4C:29:9F:F6:FE:86:8A:32:02:61:A9:F9:0C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/evrbntjJEEwpn_b-hooyAmGp-Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.205.0-109.122.207.255
109.122.209.0/24
109.122.211.0-109.122.213.255
Signature Algorithm: sha256WithRSAEncryption
ba:b4:10:63:f8:fd:b2:70:77:9b:49:e9:60:99:fe:f8:b9:1a:
4d:9a:77:0b:b2:21:40:31:80:fd:59:cc:41:ce:61:36:f4:8b:
29:33:d8:42:69:f4:a9:4d:71:74:4c:46:24:ca:39:43:9f:58:
34:03:7d:71:94:9b:68:d4:fa:9e:ad:e4:0b:5c:b0:01:e5:84:
63:fa:e1:0d:ea:16:d7:8c:e4:d5:36:cd:43:2c:90:6e:20:5e:
da:97:f7:e0:45:95:fd:fc:22:61:cc:37:eb:d1:3f:cf:5b:61:
b8:76:45:f1:79:a7:69:9a:e3:ba:78:8f:86:2d:f1:62:e7:97:
98:a7:08:eb:ee:b1:6a:2e:ef:3a:ae:b2:d0:31:c6:4e:61:d1:
72:18:6b:75:30:78:a4:2f:e7:31:8b:2c:fd:99:40:45:c4:f6:
fe:56:dd:bf:17:1c:01:f4:62:51:e5:d6:76:5a:75:5e:ed:28:
04:a0:64:34:67:98:cf:e6:b6:c0:30:08:bb:51:3b:c3:7a:6f:
d6:39:57:9d:a0:d9:a6:e5:34:e0:19:82:cc:56:c7:95:6c:11:
80:fe:b3:c3:6b:b1:c4:c4:5f:93:20:19:e6:d8:79:ea:2a:c7:
9a:46:30:b7:34:f7:ed:34:49:ae:74:f0:97:4c:b0:95:78:40:
3b:00:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org