Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/gYSssWuITRb9mNY3ld4lPYLc0ts.roa
File: gYSssWuITRb9mNY3ld4lPYLc0ts.roa (raw, json)
Hash identifier: WUXA5IcyZNIk9KUKoMTmJ26YeXFQf16PS/U4U8wR8AY=
Subject key identifier: 81:84:AC:B1:6B:88:4D:16:FD:98:D6:37:95:DE:25:3D:82:DC:D2:DB
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B503097A2D7C0A539C14F352EC94F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/gYSssWuITRb9mNY3ld4lPYLc0ts.roa
Signing time: Sun 01 Jan 2023 21:44:44 +0000
ROA not before: Sun 01 Jan 2023 21:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 109.122.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:50:30:97:a2:d7:c0:a5:39:c1:4f:35:2e:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8184acb16b884d16fd98d63795de253d82dcd2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:1f:31:27:1f:4c:d4:a1:6a:d4:4c:4e:92:
1c:32:9b:28:63:e7:64:83:47:cc:c4:36:14:39:b8:
d1:15:12:9c:40:de:90:8d:51:64:43:07:1c:b5:f1:
6f:1e:9f:69:b6:6a:45:ff:ac:c1:b3:72:eb:68:95:
23:71:04:4d:c2:d2:a7:f5:c2:37:a5:4b:39:7d:c1:
3a:90:83:b3:7e:fa:c2:1a:a1:f9:1b:a8:cc:ef:74:
57:a7:19:78:82:82:88:8e:06:4b:c1:94:a0:c5:97:
08:fd:0d:33:3e:3a:ed:81:95:43:0e:8a:97:07:8c:
24:0a:2d:29:44:c0:fe:75:8f:92:68:2b:8d:8b:35:
d3:39:18:c2:73:89:09:0e:d4:0d:97:6b:ed:5c:d2:
da:c5:9c:02:f4:24:65:65:40:3b:4e:3f:ce:22:65:
33:b9:14:ae:d9:97:53:01:2a:88:cc:22:10:49:05:
10:af:0a:b5:77:ab:ee:d1:08:c4:a7:d1:1f:a0:89:
da:1d:6c:40:3e:ef:87:ba:0f:60:62:1a:1a:b1:b7:
31:b0:87:3b:0f:21:64:a1:5c:69:0a:bd:11:d5:f8:
e7:47:a8:aa:8f:60:95:78:b8:c5:a9:5f:7f:3a:30:
9d:be:30:0c:60:85:c6:85:fc:fe:e0:92:88:51:cb:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:84:AC:B1:6B:88:4D:16:FD:98:D6:37:95:DE:25:3D:82:DC:D2:DB
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/gYSssWuITRb9mNY3ld4lPYLc0ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.204.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d5:c3:96:ab:f8:0a:4e:c7:78:e2:67:1f:3f:18:9e:95:cb:
ba:77:1e:49:b7:02:44:1e:68:4f:dd:fc:46:9d:60:aa:d4:c9:
5e:f5:3b:43:77:4c:30:1f:a7:c7:14:ee:15:0d:ca:7d:41:bd:
d9:fb:4d:57:ea:6d:f1:eb:4f:1e:10:c1:57:cc:d4:25:f1:6a:
47:f7:a2:a4:ec:5b:d3:74:cc:d7:10:73:d7:61:a9:e1:ef:ca:
42:2c:88:aa:35:27:70:64:cf:5c:59:6d:17:78:39:05:ef:db:
e5:10:d2:7b:62:ae:2e:f5:40:70:f1:ed:43:c6:aa:1f:01:17:
55:7e:ee:c1:77:63:14:41:7d:3e:34:bd:70:74:58:05:0f:a8:
b7:0d:14:9c:b3:8a:6a:b7:12:3b:9c:39:eb:90:b5:62:50:73:
3c:f6:8b:3d:4f:fa:02:8d:cf:aa:3a:82:8a:b8:9c:2a:03:84:
6f:92:63:b1:7d:f9:4e:ee:32:b5:12:99:ee:fb:74:08:5a:1a:
da:fa:2b:13:4f:17:f7:13:3d:ec:e4:5e:1f:11:c9:65:5d:56:
de:d2:72:7b:99:da:d3:23:bd:18:41:53:50:75:7a:c4:77:9d:
9c:4d:58:57:1e:17:41:bf:34:36:39:2e:73:7f:0f:bb:d7:e2:
2e:bf:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org