Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/omz0UlLWlisKbxJaTWC3EWgP2cc.roa
File: omz0UlLWlisKbxJaTWC3EWgP2cc.roa (raw, json)
Hash identifier: ZBg08q3p1HnWeN3TwAyrxttLSg74xOos40y9eFVOOhY=
Subject key identifier: A2:6C:F4:52:52:D6:96:2B:0A:6F:12:5A:4D:60:B7:11:68:0F:D9:C7
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5C0AAB8C08735D5D2953EC052A2E
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/omz0UlLWlisKbxJaTWC3EWgP2cc.roa
Signing time: Sun 01 Jan 2023 21:44:47 +0000
ROA not before: Sun 01 Jan 2023 21:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5c:0a:ab:8c:08:73:5d:5d:29:53:ec:05:2a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a26cf45252d6962b0a6f125a4d60b711680fd9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:5f:5d:05:22:af:57:09:8e:13:ba:26:f4:
21:f4:0c:e9:15:fc:d8:81:c8:3a:d4:0d:b1:f7:15:
0a:75:07:6f:8f:75:19:95:d0:58:23:9d:e2:1e:bd:
54:c0:58:d2:a7:88:44:5e:c6:28:12:a9:e8:fb:6c:
52:5e:b5:0e:c8:94:7a:d6:14:79:6b:75:0a:8f:5e:
09:6c:f0:29:8b:46:39:ff:ca:19:91:f3:a6:8f:31:
42:a8:aa:66:08:c0:81:ca:9b:2d:d6:d1:b9:de:52:
62:0a:c6:87:3b:f1:ac:0e:c1:d1:ef:25:0e:72:b3:
8b:97:c3:64:82:30:e1:94:2e:10:cf:0a:17:d6:a2:
06:e4:11:18:84:8d:ef:1d:4f:46:ea:48:0b:33:71:
53:5f:05:93:89:13:a8:46:ce:c5:09:be:05:81:0e:
d6:65:98:78:c4:4e:06:e0:31:bd:c7:63:fd:97:68:
4b:f9:68:e6:4d:ff:29:d8:a8:ca:1c:ce:37:9a:4c:
04:c9:de:b5:3c:1b:b3:a4:5e:ab:cf:7c:4d:47:1c:
17:b9:db:10:89:05:b1:10:c2:db:4e:6c:5a:fd:d7:
5c:71:ae:48:d0:cb:4c:79:c4:ad:60:b1:25:1f:22:
b6:84:e7:01:6a:3e:bd:23:5e:3f:ac:21:01:b6:1f:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:F4:52:52:D6:96:2B:0A:6F:12:5A:4D:60:B7:11:68:0F:D9:C7
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/omz0UlLWlisKbxJaTWC3EWgP2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
Signature Algorithm: sha256WithRSAEncryption
30:86:86:30:56:70:ff:e8:6d:18:0f:2f:b9:61:c7:2d:01:36:
39:ea:97:2d:dd:c5:2a:44:e8:c4:5e:79:86:aa:da:2c:d5:a2:
75:8f:5e:c7:ee:9a:cf:50:ce:e0:20:37:61:c9:d7:c0:27:32:
c1:af:0c:4d:6b:4f:b2:27:79:dd:4b:9e:ee:1a:15:a8:f6:77:
0e:3b:37:12:c1:e9:7b:bf:66:10:a2:73:40:f8:f4:9c:9e:16:
47:fc:af:ec:4d:b3:e2:9a:92:91:34:54:ee:ca:6c:7b:a5:4c:
04:68:8f:a1:76:c4:57:d3:a1:86:9e:95:13:5e:e6:9f:2e:68:
df:86:0c:b4:68:b2:3f:bc:54:ab:c9:24:7d:a6:f5:34:2a:ef:
b4:87:a0:1c:9b:9b:e4:84:34:a0:82:99:0d:89:cc:4b:07:b8:
9c:96:0e:27:d7:66:a7:bc:57:f6:5b:ed:53:96:af:f8:fd:8d:
bf:a0:48:60:75:51:59:d4:0c:d4:16:f2:04:8c:13:c0:dd:a1:
3c:e4:f1:3b:e3:d6:11:d5:43:7d:6e:d0:be:7f:d5:2d:22:4c:
7c:70:ca:ae:dd:ce:2f:f9:36:ab:c9:3d:f4:27:5f:cf:d9:63:
62:96:ab:1d:5f:a0:6c:02:f3:6a:a1:e0:1a:df:3d:32:eb:69:
c2:2c:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org