Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/tvhiebz9wPQXDSbPaL3axISoPkQ.roa
File: tvhiebz9wPQXDSbPaL3axISoPkQ.roa (raw, json)
Hash identifier: ZBoJuNlBsfMeGueMLVh5sW9lI4ymNg/4QLX8nqafOoU=
Subject key identifier: B6:F8:62:79:BC:FD:C0:F4:17:0D:26:CF:68:BD:DA:C4:84:A8:3E:44
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0186F932E44A9B29D6443A530F33FB20F98E
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/tvhiebz9wPQXDSbPaL3axISoPkQ.roa
Signing time: Sun 19 Mar 2023 09:28:27 +0000
ROA not before: Sun 19 Mar 2023 09:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 109.122.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f9:32:e4:4a:9b:29:d6:44:3a:53:0f:33:fb:20:f9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 19 09:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6f86279bcfdc0f4170d26cf68bddac484a83e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7e:59:48:be:76:22:0d:f5:f8:12:6c:5c:20:
68:59:a6:b2:ed:ca:1c:eb:4b:c3:81:b2:13:e3:ed:
ef:ab:69:71:bd:df:24:52:8b:e3:93:10:5a:ac:7b:
cf:d9:e8:d2:ef:47:93:c3:95:06:bb:d2:59:33:f4:
66:2e:a1:cc:c4:9a:45:cb:d7:cf:7e:d8:f6:53:71:
63:4e:24:58:87:f7:f4:99:de:42:28:07:72:12:21:
57:32:50:18:26:80:bd:5f:10:64:86:02:c2:27:0d:
b9:12:52:0a:4a:60:07:1b:2f:09:80:d8:33:89:a5:
7a:fe:3f:f8:53:54:3e:fd:5c:27:af:f1:e8:90:97:
7d:24:db:b5:d8:57:77:6d:72:41:55:6e:89:b5:81:
db:25:01:bb:a3:46:7b:20:9d:f2:47:58:45:00:97:
9b:8a:0b:9e:da:81:58:d9:6f:d9:a4:b1:3a:bf:60:
43:55:1c:99:f4:d4:fc:2f:ca:5e:ef:60:4b:d3:4a:
5c:d5:54:b4:d2:32:3a:a7:04:ba:f0:ce:42:90:9f:
c2:10:37:c8:68:d2:c3:a7:97:40:6d:a7:cc:44:09:
d1:0f:e6:84:13:e1:8a:4c:b9:58:3e:df:73:71:0b:
6d:48:c2:d7:25:ae:aa:1d:90:66:5f:5a:21:3f:39:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:62:79:BC:FD:C0:F4:17:0D:26:CF:68:BD:DA:C4:84:A8:3E:44
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/tvhiebz9wPQXDSbPaL3axISoPkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
73:53:ed:71:3e:d7:aa:5e:b6:04:01:c2:ba:0a:97:3d:84:26:
a8:6b:97:d8:ba:4e:4b:d4:d3:74:00:b4:2e:88:fa:fd:06:2b:
3e:2f:0a:c4:bf:86:79:fa:08:d1:ec:d3:91:3d:a1:6b:69:39:
71:8f:ca:10:ed:b3:3f:83:63:43:4f:5f:36:82:41:a4:f1:e1:
14:f1:50:0e:97:ef:ee:14:ca:2b:60:ae:a2:6b:4f:38:07:00:
04:10:97:30:80:ca:62:72:0f:15:2e:a2:33:04:53:08:26:b9:
26:7c:29:45:c0:19:02:c5:ee:44:93:ef:dc:ea:cf:3e:2b:08:
e8:7d:2f:4c:78:4c:d1:7d:88:f5:a3:ba:fd:fd:d3:44:66:ed:
af:a1:a1:74:f3:53:d9:7a:ef:07:9e:0d:87:8e:a1:2c:ec:c6:
d9:6b:9c:6d:cb:16:bc:5e:b2:7b:a2:fb:06:75:03:71:7a:35:
5a:f0:e5:fd:de:8a:21:a8:69:4e:51:af:71:f6:7d:d0:dc:ed:
0e:8c:4b:e9:2e:02:6c:df:e7:b4:3a:54:85:34:68:40:83:83:
2e:a3:ca:45:01:c7:cc:62:83:00:68:80:78:47:86:3c:a1:93:
25:5c:5f:83:af:99:68:5a:2c:62:15:1b:30:7e:ad:14:2c:11:
24:18:b7:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb5MuRKmynWRDpTDzP7IPmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMzE5MDkyODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmY4NjI3OWJjZmRjMGY0MTcwZDI2Y2Y2OGJkZGFjNDg0YTgzZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh35ZSL52Ig31+BJsXCBoWaay7coc
60vDgbIT4+3vq2lxvd8kUovjkxBarHvP2ejS70eTw5UGu9JZM/RmLqHMxJpFy9fP
ftj2U3FjTiRYh/f0md5CKAdyEiFXMlAYJoC9XxBkhgLCJw25ElIKSmAHGy8JgNgz
iaV6/j/4U1Q+/Vwnr/HokJd9JNu12Fd3bXJBVW6JtYHbJQG7o0Z7IJ3yR1hFAJeb
igue2oFY2W/ZpLE6v2BDVRyZ9NT8L8pe72BL00pc1VS00jI6pwS68M5CkJ/CEDfI
aNLDp5dAbafMRAnRD+aEE+GKTLlYPt9zcQttSMLXJa6qHZBmX1ohPzm0uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLb4Ynm8/cD0Fw0mz2i92sSEqD5EMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvdHZoaWViejl3UFFYRFNiUGFMM2F4SVNvUGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrSMA0G
CSqGSIb3DQEBCwUAA4IBAQBzU+1xPteqXrYEAcK6Cpc9hCaoa5fYuk5L1NN0ALQu
iPr9Bis+LwrEv4Z5+gjR7NORPaFraTlxj8oQ7bM/g2NDT182gkGk8eEU8VAOl+/u
FMorYK6ia084BwAEEJcwgMpicg8VLqIzBFMIJrkmfClFwBkCxe5Ek+/c6s8+Kwjo
fS9MeEzRfYj1o7r9/dNEZu2voaF081PZeu8Hng2HjqEs7MbZa5xtyxa8XrJ7ovsG
dQNxejVa8OX93oohqGlOUa9x9n3Q3O0OjEvpLgJs3+e0OlSFNGhAg4Muo8pFAcfM
YoMAaIB4R4Y8oZMlXF+Dr5loWixiFRswfq0ULBEkGLfw
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org