Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/uOfWkxTzWNlvV5mwSD7Hce5H7Co.roa
File: uOfWkxTzWNlvV5mwSD7Hce5H7Co.roa (raw, json)
Hash identifier: IilLFWwsrpU4KJ80w/NSrEFjKJo9cYFCr79Rr3fZgk0=
Subject key identifier: B8:E7:D6:93:14:F3:58:D9:6F:57:99:B0:48:3E:C7:71:EE:47:EC:2A
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B51B3B6AC865AFC2F7895AA0F74AE
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/uOfWkxTzWNlvV5mwSD7Hce5H7Co.roa
Signing time: Sun 01 Jan 2023 21:44:45 +0000
ROA not before: Sun 01 Jan 2023 21:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33696
IP address blocks: 109.122.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:51:b3:b6:ac:86:5a:fc:2f:78:95:aa:0f:74:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8e7d69314f358d96f5799b0483ec771ee47ec2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:0b:64:d5:e0:34:30:a0:be:50:3c:cc:5c:
c2:45:a5:5e:cf:3f:34:d7:5e:6c:62:f1:6b:78:7c:
3d:f9:d5:b5:a2:f9:65:a0:4e:f0:b7:a3:6e:7f:31:
fd:1c:48:d6:df:bc:55:88:bb:1a:22:ef:4c:c9:66:
c8:02:f7:13:07:09:3d:34:54:0f:46:98:29:98:62:
50:24:df:f4:ed:4d:67:21:23:36:12:58:9d:be:76:
9c:eb:3f:cb:d8:80:28:29:9b:e0:3d:c1:33:ec:88:
b7:fd:ca:14:84:94:43:dd:29:02:5a:eb:d4:db:82:
ab:1a:f9:12:6a:57:4a:45:5d:c6:25:0b:90:a8:80:
87:b6:49:3c:6a:85:24:63:70:b1:84:d7:b0:21:44:
29:68:ac:b8:24:31:0c:d6:2a:95:82:5e:c2:eb:94:
23:f8:a6:1b:f5:6a:af:b4:61:1a:f2:9b:0c:0c:67:
cf:95:a0:c9:1f:56:3b:29:df:1c:a4:5f:4d:31:c7:
49:05:9e:ac:74:34:50:af:53:a0:74:cf:b2:aa:94:
cd:74:92:84:81:9a:ac:45:b8:05:ef:c2:ad:93:f7:
c1:a0:8a:82:42:f4:b1:14:2a:c6:7c:ed:18:ca:b6:
42:6a:f6:80:24:5c:8e:6a:a5:f6:eb:6d:69:a6:40:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:D6:93:14:F3:58:D9:6F:57:99:B0:48:3E:C7:71:EE:47:EC:2A
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/uOfWkxTzWNlvV5mwSD7Hce5H7Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.205.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5d:4d:2a:fa:8b:3d:90:82:7b:7c:26:b3:e0:a6:3f:ab:b3:
1e:53:fa:ea:aa:2d:df:9e:1e:6d:f1:86:58:7d:61:7a:e4:b7:
81:83:7f:76:03:84:bd:2b:c3:66:de:e9:bd:47:fd:99:39:9b:
ac:60:96:76:4b:a1:ed:7c:51:3e:93:82:41:2c:be:9c:1b:c8:
99:25:38:59:7d:53:b8:50:6b:2c:bf:ca:8c:48:81:38:8d:82:
41:95:6b:66:ec:31:68:ee:c1:75:ad:a5:ea:24:7c:81:6e:6d:
36:5d:1c:03:57:dd:c8:6d:dc:c8:f5:a9:99:be:b1:d9:03:c2:
7c:e5:15:f8:64:eb:85:10:b3:0f:b4:2a:91:7e:5f:13:0b:7c:
3b:7f:ca:b9:36:df:4d:e1:0e:88:e4:bd:45:fd:f3:a8:d8:81:
cd:96:46:5d:b2:a8:fe:f8:57:e0:32:36:76:af:66:7e:88:48:
c0:89:d4:d3:c1:1e:31:48:80:ac:74:88:0e:3c:c6:27:71:4c:
cc:18:fe:d7:60:79:bc:97:77:69:57:a8:76:56:75:4b:73:42:
63:ce:d5:19:17:3f:0b:a4:b5:98:e9:6b:f6:43:9d:45:0d:ea:
b6:91:f1:46:24:07:02:65:bf:b2:01:07:cc:b4:70:a3:49:d6:
7d:0e:b5:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS1GztqyGWvwveJWqD3SuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTAxMjE0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGU3ZDY5MzE0ZjM1OGQ5NmY1Nzk5YjA0ODNlYzc3MWVlNDdlYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MgLZNXgNDCgvlA8zFzCRaVezz80
115sYvFreHw9+dW1ovlloE7wt6NufzH9HEjW37xViLsaIu9MyWbIAvcTBwk9NFQP
RpgpmGJQJN/07U1nISM2Elidvnac6z/L2IAoKZvgPcEz7Ii3/coUhJRD3SkCWuvU
24KrGvkSaldKRV3GJQuQqICHtkk8aoUkY3CxhNewIUQpaKy4JDEM1iqVgl7C65Qj
+KYb9WqvtGEa8psMDGfPlaDJH1Y7Kd8cpF9NMcdJBZ6sdDRQr1OgdM+yqpTNdJKE
gZqsRbgF78Ktk/fBoIqCQvSxFCrGfO0YyrZCavaAJFyOaqX2621ppkDFkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjn1pMU81jZb1eZsEg+x3HuR+wqMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvdU9mV2t4VHpXTmx2VjVtd1NEN0hjZTVIN0NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrNMA0G
CSqGSIb3DQEBCwUAA4IBAQAEXU0q+os9kIJ7fCaz4KY/q7MeU/rqqi3fnh5t8YZY
fWF65LeBg392A4S9K8Nm3um9R/2ZOZusYJZ2S6HtfFE+k4JBLL6cG8iZJThZfVO4
UGssv8qMSIE4jYJBlWtm7DFo7sF1raXqJHyBbm02XRwDV93IbdzI9amZvrHZA8J8
5RX4ZOuFELMPtCqRfl8TC3w7f8q5Nt9N4Q6I5L1F/fOo2IHNlkZdsqj++FfgMjZ2
r2Z+iEjAidTTwR4xSICsdIgOPMYncUzMGP7XYHm8l3dpV6h2VnVLc0JjztUZFz8L
pLWY6Wv2Q51FDeq2kfFGJAcCZb+yAQfMtHCjSdZ9DrW0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org