Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/iRmnI98t_Jxj2fKlcfFD4-lydaY.roa
File: iRmnI98t_Jxj2fKlcfFD4-lydaY.roa (raw, json)
Hash identifier: k3NlNVtwodGpq4lj9FPOEtZyYawb7W0X8e6BWpg7Jyw=
Subject key identifier: 89:19:A7:23:DF:2D:FC:9C:63:D9:F2:A5:71:F1:43:E3:E9:72:75:A6
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0186D5B4FBB874443ED9974E018564F7A480
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/iRmnI98t_Jxj2fKlcfFD4-lydaY.roa
Signing time: Sun 12 Mar 2023 12:04:13 +0000
ROA not before: Sun 12 Mar 2023 12:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:b4:fb:b8:74:44:3e:d9:97:4e:01:85:64:f7:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 12 12:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8919a723df2dfc9c63d9f2a571f143e3e97275a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:2b:40:08:ed:46:49:bf:37:ce:46:78:52:
55:f4:ba:ce:98:8c:85:5d:29:94:0a:e4:36:25:29:
40:38:13:a1:dd:13:67:14:4a:36:40:1a:df:b0:79:
05:05:4d:b4:bf:fd:87:d0:65:65:af:5f:03:c7:03:
d3:e2:b9:41:f6:cc:e9:92:5b:5c:de:9c:88:9b:79:
0f:ef:98:37:e7:9c:cb:3c:c7:fa:d9:ca:19:d6:f4:
e7:cc:74:68:47:84:f5:81:10:d4:9e:d2:06:47:ee:
5c:f0:e4:87:71:e2:6e:7b:72:53:1c:4b:64:28:a0:
eb:32:6f:f8:57:29:97:27:28:68:a2:34:31:7b:9e:
c5:6b:28:48:f9:8d:4e:4a:d5:b2:cd:86:a1:78:4a:
a6:4e:33:dc:89:d2:ff:2e:29:dc:ef:9e:a8:79:a0:
f6:9a:1a:04:ed:f3:e0:dd:aa:75:f5:9b:0a:2e:59:
ad:b0:8a:ec:74:05:f9:7d:32:2d:85:cd:c5:ae:09:
51:88:a5:2c:e8:db:2d:d0:2c:d6:cd:59:3f:a3:29:
b2:13:b5:fd:c2:18:54:26:d5:83:7f:52:61:7c:f8:
28:4d:fc:65:25:41:2e:a4:38:f9:9a:a2:e7:d2:1f:
61:bf:3a:b7:3f:3c:2b:5b:2c:5b:a3:8b:29:9b:83:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:A7:23:DF:2D:FC:9C:63:D9:F2:A5:71:F1:43:E3:E9:72:75:A6
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/iRmnI98t_Jxj2fKlcfFD4-lydaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d3:0b:3c:45:ac:41:a6:4b:3c:1d:c8:6f:0c:db:4e:44:37:
23:1b:48:fa:7e:b4:df:b5:8f:45:ce:75:c5:ac:62:cd:92:bf:
19:c0:a2:ec:f6:9c:dc:34:53:79:10:85:70:aa:ac:ad:e9:64:
dd:55:48:36:37:36:7f:26:49:13:71:f5:e0:56:dc:f6:dd:80:
08:eb:9f:fb:bf:d6:95:a2:4e:3f:29:42:1c:b0:70:3d:eb:cd:
c3:73:88:36:e9:1b:c3:28:e8:ff:f6:d7:05:a0:80:72:32:31:
40:3a:b3:2e:64:66:c8:a3:14:65:40:e8:66:ca:d4:53:4e:2d:
85:65:1e:39:b7:54:98:c3:4b:62:ec:e4:6b:25:83:00:f5:c3:
76:fe:76:c8:d8:f9:a2:92:97:58:77:f0:c0:77:d3:e1:5d:69:
e4:fe:6e:83:c6:06:f0:f6:6b:11:75:f9:85:5f:18:15:55:dc:
36:c0:65:c4:7b:5c:98:88:1c:0b:6c:2f:e6:f6:76:29:d2:25:
4d:26:80:14:de:ca:ae:cd:2e:67:b1:1d:30:bd:13:32:b9:41:
6e:b1:90:86:91:b4:05:01:0d:b6:05:3b:f2:63:5f:a1:f5:95:
33:10:97:ca:13:34:d4:98:7d:ea:34:25:60:af:de:04:2e:95:
f0:aa:ce:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbVtPu4dEQ+2ZdOAYVk96SAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMzEyMTIwNDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTE5YTcyM2RmMmRmYzljNjNkOWYyYTU3MWYxNDNlM2U5NzI3NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZMrQAjtRkm/N85GeFJV9LrOmIyF
XSmUCuQ2JSlAOBOh3RNnFEo2QBrfsHkFBU20v/2H0GVlr18DxwPT4rlB9szpkltc
3pyIm3kP75g355zLPMf62coZ1vTnzHRoR4T1gRDUntIGR+5c8OSHceJue3JTHEtk
KKDrMm/4VymXJyhoojQxe57FayhI+Y1OStWyzYaheEqmTjPcidL/Linc756oeaD2
mhoE7fPg3ap19ZsKLlmtsIrsdAX5fTIthc3FrglRiKUs6Nst0CzWzVk/oymyE7X9
whhUJtWDf1JhfPgoTfxlJUEupDj5mqLn0h9hvzq3PzwrWyxbo4spm4N42QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIkZpyPfLfycY9nypXHxQ+PpcnWmMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvaVJtbkk5OHRfSnhqMmZLbGNmRkQ0LWx5ZGFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrLMA0G
CSqGSIb3DQEBCwUAA4IBAQCL0ws8RaxBpks8HchvDNtORDcjG0j6frTftY9FznXF
rGLNkr8ZwKLs9pzcNFN5EIVwqqyt6WTdVUg2NzZ/JkkTcfXgVtz23YAI65/7v9aV
ok4/KUIcsHA9683Dc4g26RvDKOj/9tcFoIByMjFAOrMuZGbIoxRlQOhmytRTTi2F
ZR45t1SYw0ti7ORrJYMA9cN2/nbI2PmikpdYd/DAd9PhXWnk/m6Dxgbw9msRdfmF
XxgVVdw2wGXEe1yYiBwLbC/m9nYp0iVNJoAU3squzS5nsR0wvRMyuUFusZCGkbQF
AQ22BTvyY1+h9ZUzEJfKEzTUmH3qNCVgr94ELpXwqs7p
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org