Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ipovJgtlaRYVYh0CJIlseK_JIjU.roa
File: ipovJgtlaRYVYh0CJIlseK_JIjU.roa (raw, json)
Hash identifier: xxA1LbekVVy96lTtNAlhL1YykzHO5xOu+Eh15oWkCh8=
Subject key identifier: 8A:9A:2F:26:0B:65:69:16:15:62:1D:02:24:89:6C:78:AF:C9:22:35
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B552B2D6B46799ACF84916248AB91
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ipovJgtlaRYVYh0CJIlseK_JIjU.roa
Signing time: Sun 01 Jan 2023 21:44:46 +0000
ROA not before: Sun 01 Jan 2023 21:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 109.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:55:2b:2d:6b:46:79:9a:cf:84:91:62:48:ab:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a9a2f260b65691615621d0224896c78afc92235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:30:b6:b2:1a:68:38:ee:e7:e3:51:97:36:
51:19:63:99:f3:38:3f:e7:14:48:1a:0d:35:8d:ab:
94:fe:62:18:98:67:97:90:06:75:5f:bf:f7:86:42:
41:7e:83:50:33:be:c7:b5:a4:36:49:04:d4:f6:d6:
88:3f:c4:91:56:e7:44:df:05:77:c2:e3:17:4e:24:
9a:90:68:5f:f3:8a:cb:d3:1d:d3:3a:96:b0:d2:0f:
7f:3c:04:ad:47:bc:e6:d1:80:6c:f8:c3:e3:5b:fe:
20:96:46:39:a7:e8:b1:06:15:e9:6d:bf:3d:d8:dc:
2e:b7:79:c1:4a:4a:f9:c5:72:11:c0:33:18:28:2f:
99:45:f4:51:54:c4:d2:7b:ff:b7:d8:96:34:ae:de:
b3:be:eb:76:13:d3:3a:17:31:d8:a3:70:e4:f3:3a:
cc:5d:37:c2:92:39:0f:1b:29:8c:ef:79:0b:c8:5b:
e8:8e:50:04:98:85:d2:9d:8a:f7:b0:3c:7d:c4:8d:
99:7c:a4:de:1e:49:31:c1:bb:d9:3e:fa:6a:5e:e5:
29:85:53:84:5f:42:7f:3f:57:70:b9:62:67:8d:c1:
ec:6c:0d:ae:a7:be:fe:9a:cf:11:87:f6:12:e5:a8:
37:b1:41:a5:fd:f3:60:21:15:cd:d6:06:06:cf:6d:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9A:2F:26:0B:65:69:16:15:62:1D:02:24:89:6C:78:AF:C9:22:35
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ipovJgtlaRYVYh0CJIlseK_JIjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5f:16:88:30:65:a8:4f:0d:bc:d3:c9:ac:6f:06:eb:21:3b:
ad:5f:3a:81:b4:22:bf:48:43:e6:15:a2:13:0b:0a:88:9d:85:
4f:b8:7d:60:82:5b:29:94:f4:f8:e5:fc:72:24:55:2d:f8:7d:
71:c9:97:10:37:2c:22:b5:f2:e1:be:67:af:cd:d8:ed:29:cb:
96:c3:bf:d2:2c:79:05:2f:84:90:43:3f:74:ea:89:b3:de:e3:
c5:1a:e8:f1:a6:7f:fc:fa:f2:ad:38:97:cf:1c:3f:55:5a:b0:
d5:0c:8d:c2:16:93:36:ed:80:6e:2b:9a:73:e8:9d:27:00:06:
13:80:b9:46:51:66:63:63:b7:bf:b1:63:45:18:6f:f1:fd:e5:
25:2b:d5:22:b2:91:29:73:1d:18:0e:fe:78:ce:2d:f6:08:ec:
e6:f1:96:e8:95:53:23:dc:20:44:1e:21:94:b9:67:6f:9f:44:
64:47:c7:9c:fc:96:bb:7c:f0:1c:f0:f6:09:65:e2:cb:c8:1b:
37:6c:e9:74:21:7e:6b:ff:11:de:c0:90:9d:43:b7:a7:5b:d3:
00:ac:cf:1e:d7:84:44:8a:4e:24:3b:90:47:83:d9:cb:4b:58:
1f:fe:2a:01:c8:ab:f0:22:e3:56:7b:66:ba:49:d3:f3:0f:92:
29:49:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org