Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/mWmlHaMkLazKo4lBPP2dM5lM6oI.roa
File: mWmlHaMkLazKo4lBPP2dM5lM6oI.roa (raw, json)
Hash identifier: 9ZdBi4XXSKu1+gyPA9/a/YM46YXQxiI7i+aDjbSGKUE=
Subject key identifier: 99:69:A5:1D:A3:24:2D:AC:CA:A3:89:41:3C:FD:9D:33:99:4C:EA:82
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183C5231DECB01AE70E9682736264A0AC2C
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/mWmlHaMkLazKo4lBPP2dM5lM6oI.roa
Signing time: Tue 11 Oct 2022 03:42:36 +0000
ROA not before: Tue 11 Oct 2022 03:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 109.122.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:23:1d:ec:b0:1a:e7:0e:96:82:73:62:64:a0:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 11 03:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9969a51da3242daccaa389413cfd9d33994cea82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:0f:44:78:a6:4c:e7:1d:57:5d:99:c4:cf:
73:b7:0d:aa:8b:6f:8e:4f:d8:60:86:b7:e0:e6:86:
4e:63:cd:1b:bb:5e:a3:00:30:38:02:46:eb:e6:67:
50:77:ef:5a:23:1d:d6:35:cb:6e:fd:e2:dd:1e:d2:
c4:1b:e0:4f:42:88:0a:d8:22:92:ba:04:35:e8:09:
0f:5a:b7:1b:0c:7f:d6:8e:67:c8:df:3d:1a:6f:47:
f2:0f:a9:5b:b8:4c:73:6c:ea:d1:73:9b:b7:68:10:
7a:66:ee:b8:7d:1c:04:46:bb:ce:7a:76:f5:15:be:
9f:41:76:e8:fb:98:b8:d7:c1:be:14:8f:f6:43:41:
90:3b:73:6f:1e:c5:e8:98:90:86:6c:7b:78:bb:74:
2f:0a:2b:d3:30:23:3b:4a:1c:85:54:cb:b6:9b:e9:
e0:aa:67:70:51:7f:23:14:7f:38:de:be:c4:d5:f4:
a5:75:2a:d5:28:64:c3:dd:a6:46:3c:1a:27:b2:44:
67:c5:14:ec:c2:38:c9:a9:43:c7:ca:80:1c:49:8e:
52:1d:48:f1:33:96:2a:5a:26:8d:3d:d6:85:c2:64:
8a:f8:71:79:1b:4b:79:94:73:a8:e0:61:41:56:04:
29:67:f7:21:82:9c:16:96:67:24:53:9d:a6:2b:a9:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:69:A5:1D:A3:24:2D:AC:CA:A3:89:41:3C:FD:9D:33:99:4C:EA:82
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/mWmlHaMkLazKo4lBPP2dM5lM6oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cb:77:04:95:12:cc:88:fc:9b:d8:8f:c4:dc:82:cb:06:56:
49:5d:b1:ad:76:b2:4d:00:36:f5:27:ad:88:d4:fb:43:84:92:
6a:64:c2:fc:5c:d8:8c:b7:8d:8a:34:ca:ba:40:f2:ce:6b:c2:
ed:2b:32:cd:82:c3:bc:7e:13:60:64:be:35:36:17:0e:b5:ca:
3f:27:d8:d9:12:f3:c1:c1:15:d0:79:28:6b:5b:c4:52:1d:78:
f7:cf:a7:5a:c6:3a:8b:32:15:54:f4:9d:33:91:20:a8:d1:96:
8d:3a:68:b6:f5:5e:e5:6a:2c:81:fb:d0:10:f3:81:79:73:07:
29:71:b8:ff:94:75:21:69:97:f1:2e:59:e9:d8:c9:48:17:d7:
92:1e:2f:3f:4c:01:a8:75:8c:ca:4b:69:a3:e5:f8:0b:52:80:
bf:c9:79:56:75:40:66:49:61:93:10:92:b8:d5:8b:d7:76:ef:
68:a8:ce:a5:3a:24:3e:3c:a2:2f:c8:04:95:f7:ed:69:91:cc:
cc:39:ad:a1:b6:d2:cc:78:3a:cb:16:78:3e:d9:f7:e2:30:84:
bb:42:4b:d7:d9:3e:c1:6a:5c:1b:05:0e:c2:94:4b:a5:b7:b9:
38:6d:1d:cb:21:a0:1e:79:d2:a8:23:eb:2a:62:b1:2a:61:1b:
15:e1:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org