Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/gN6ldb0UIai8guWGHSeO40gtM_0.roa
File: gN6ldb0UIai8guWGHSeO40gtM_0.roa (raw, json)
Hash identifier: 0dckbhWONiSQD0rpmQym6lvqhrIuewmdKKIq+KbK3+8=
Subject key identifier: 80:DE:A5:75:BD:14:21:A8:BC:82:E5:86:1D:27:8E:E3:48:2D:33:FD
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B58CB81B3A9B6A796604EC8EED9A3
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/gN6ldb0UIai8guWGHSeO40gtM_0.roa
Signing time: Sun 01 Jan 2023 21:44:46 +0000
ROA not before: Sun 01 Jan 2023 21:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150398
IP address blocks: 109.122.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:58:cb:81:b3:a9:b6:a7:96:60:4e:c8:ee:d9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80dea575bd1421a8bc82e5861d278ee3482d33fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:c9:eb:b9:d3:ab:f6:19:41:76:34:e2:29:
a7:6d:80:a8:a2:cb:5e:9a:34:eb:69:5b:d7:0c:5c:
80:51:db:55:57:65:4d:f2:ac:0b:cf:b0:ad:1d:e9:
6d:04:93:51:84:12:2c:65:1f:b4:ba:a0:4b:65:8d:
00:8f:11:62:6a:7a:73:2d:1b:3f:ba:66:7c:fd:14:
fa:7f:11:95:fe:f4:b4:a8:78:08:9a:80:ad:50:4a:
ad:73:07:19:21:0a:88:b7:7c:39:45:82:6b:d6:a2:
25:05:a9:2c:97:89:dc:12:9e:15:88:6a:eb:c7:ca:
54:bd:1d:e0:0b:5e:fc:d3:cb:3f:fe:41:a5:c1:0a:
3e:88:46:ab:ca:24:bc:32:55:49:f8:45:90:aa:13:
c8:3d:ec:0b:39:16:e5:ff:0f:5e:e7:53:1a:c4:e4:
1e:f6:bb:8a:06:19:2c:f8:2e:f9:27:48:67:a9:7f:
1e:c5:5f:b8:33:2e:84:9a:b6:26:29:c2:ae:e4:98:
2d:1a:44:53:7b:bb:f2:94:23:bb:ca:75:86:f1:8a:
8d:5c:87:e2:5e:5a:f7:e0:0e:47:54:96:ba:51:7a:
1b:89:e2:47:46:3a:6d:8d:8c:c9:6f:9b:80:6f:30:
b9:f6:78:a2:ec:db:09:2f:e8:a1:60:60:8f:9f:76:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:A5:75:BD:14:21:A8:BC:82:E5:86:1D:27:8E:E3:48:2D:33:FD
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/gN6ldb0UIai8guWGHSeO40gtM_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6c:67:8b:c3:eb:81:7b:2d:fe:0b:74:bf:95:b0:83:5a:24:
1f:82:2d:d5:c0:88:58:ad:e2:1f:2d:87:01:d8:59:68:6d:99:
26:90:83:c9:b2:1e:75:a2:40:c4:e3:81:6c:29:48:28:64:a1:
23:dc:1a:0b:0b:d3:f0:ca:d2:2c:44:c3:32:c4:f8:5d:43:5d:
8a:9a:04:bc:1a:34:c8:1c:42:14:fc:28:da:f5:af:0d:8e:87:
d8:02:31:ae:c7:4c:90:99:d4:b7:7e:d9:d7:d0:81:5f:00:3e:
d7:bf:9e:cf:f3:59:0a:a9:dd:8b:d4:95:41:de:eb:0a:60:d6:
72:6b:9b:53:a2:26:eb:49:07:ba:71:11:6a:13:4d:96:a0:d3:
79:c4:10:ee:a3:ea:38:9f:e6:3e:94:85:9f:d7:8f:d7:cf:76:
76:96:71:6c:7f:ca:d9:6c:21:f1:a1:26:be:d9:2e:da:05:1b:
d5:7a:10:bc:93:de:cf:fa:8b:a8:5b:c2:82:3e:8a:7c:c7:87:
e9:5f:1a:53:1b:c2:4e:6e:d7:b8:5c:81:0b:8d:98:2a:bf:3d:
48:65:9f:aa:09:7d:cb:a9:82:47:0e:b0:14:a7:9d:f7:bf:59:
0f:ee:18:05:dd:d6:4e:89:d0:89:48:c8:f5:b3:7f:97:a8:79:
3e:87:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org