Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/oJpg2N2b9Ectk43oeJ9D7Qdzw7Q.roa
File: oJpg2N2b9Ectk43oeJ9D7Qdzw7Q.roa (raw, json)
Hash identifier: nWoP0q256ezmtkKXLryoZpLR8nEqvCV2ukJSD/IQPok=
Subject key identifier: A0:9A:60:D8:DD:9B:F4:47:2D:93:8D:E8:78:9F:43:ED:07:73:C3:B4
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B59AA1ACFBE2702D9A0ABE552F096
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/oJpg2N2b9Ectk43oeJ9D7Qdzw7Q.roa
Signing time: Sun 01 Jan 2023 21:44:47 +0000
ROA not before: Sun 01 Jan 2023 21:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200586
IP address blocks: 109.122.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:59:aa:1a:cf:be:27:02:d9:a0:ab:e5:52:f0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a09a60d8dd9bf4472d938de8789f43ed0773c3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:a6:d6:21:1b:69:3f:6c:4b:6f:11:f9:85:
e0:b7:02:cf:a6:ee:14:0c:7e:8f:69:17:8a:7b:3b:
00:02:b7:93:19:b0:d8:e3:b4:e9:1a:56:b1:13:88:
c2:33:c5:2c:af:f3:ec:d2:60:dd:e7:6f:2c:fd:c5:
18:be:4a:75:14:5e:b2:1a:a0:11:03:c8:cc:e8:65:
cd:16:df:51:00:04:78:65:92:5f:e0:d4:d4:e3:f0:
f2:c1:f4:3b:19:86:e0:8b:19:26:f8:d6:1f:fd:6f:
67:48:54:52:96:11:65:51:5e:e3:a7:15:c3:2e:da:
42:e3:1d:30:45:23:93:b2:f7:c0:69:e7:63:e2:ea:
c9:b3:ba:a8:56:89:f5:2e:06:17:9e:11:b6:1c:4e:
5e:50:24:7d:d8:1c:39:f0:b8:00:53:84:32:e5:1b:
e6:b8:75:40:f3:24:05:67:37:ea:ee:e3:b6:ef:4e:
5d:ea:2a:27:3d:52:17:61:49:f7:52:8d:25:87:26:
93:0d:77:dd:f3:ec:eb:2b:0a:4a:f8:a5:e7:02:f2:
96:a2:1b:9d:92:2a:40:70:89:a2:d0:1a:f3:ff:16:
df:b6:53:8a:57:49:65:50:2a:ff:14:62:a2:70:bd:
42:31:91:b4:41:1e:75:95:9c:36:df:39:17:43:b9:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:60:D8:DD:9B:F4:47:2D:93:8D:E8:78:9F:43:ED:07:73:C3:B4
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/oJpg2N2b9Ectk43oeJ9D7Qdzw7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.216.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ae:42:39:cd:0b:4c:9d:0d:56:90:3f:ae:36:0d:62:71:f7:
bb:30:c1:3e:96:72:3e:30:b2:d4:b6:51:43:eb:09:bb:92:bf:
49:e3:27:a3:f7:bb:3a:aa:34:71:4b:fc:72:32:e4:c8:fb:c5:
98:da:98:6c:cb:3d:00:25:1c:9c:16:99:cb:98:08:27:46:56:
89:0e:7e:71:e1:f7:08:b6:d6:2a:19:2a:8e:10:8f:13:c4:94:
e2:e2:85:3f:59:a8:44:a5:df:0f:e2:51:7f:9d:6b:60:88:6c:
7b:08:ff:44:5d:31:e3:af:c8:e5:ea:82:c9:40:c0:3d:5c:31:
45:21:e6:a4:e9:5e:a5:98:62:79:09:9e:83:45:9c:0a:d2:aa:
c2:fd:63:98:60:d1:b9:00:3c:2c:59:57:02:28:3c:03:46:55:
04:57:21:e4:9f:4f:d3:eb:e4:53:3d:47:03:ef:85:17:8e:d8:
fd:78:0d:4a:43:6a:57:75:65:3d:a4:91:33:b7:c2:05:59:58:
a9:aa:52:4a:e8:3c:df:72:6b:5b:19:81:8e:6d:cd:03:58:f5:
55:d8:f6:c9:d4:ab:42:d1:f4:1f:8f:bf:8a:c3:2c:e0:3c:a1:
66:91:b3:b5:8e:30:30:0e:2a:2d:4d:b6:b3:cf:aa:cc:e7:e0:
54:ba:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org