Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/v-G25i-EG09kGYQwccwI-noMW18.roa
File: v-G25i-EG09kGYQwccwI-noMW18.roa (raw, json)
Hash identifier: Dtybj/bMqTzhZm2H391uIeZ0NI8QPzqJtL+I8bhcrcE=
Subject key identifier: BF:E1:B6:E6:2F:84:1B:4F:64:19:84:30:71:CC:08:FA:7A:0C:5B:5F
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06C6753D
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/v-G25i-EG09kGYQwccwI-noMW18.roa
Signing time: Tue 26 Apr 2022 07:03:07 +0000
ROA not before: Tue 26 Apr 2022 07:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 109.122.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113669437 (0x6c6753d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 26 07:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe1b6e62f841b4f6419843071cc08fa7a0c5b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:30:9c:34:50:38:f9:74:2f:f6:16:36:6b:
2f:22:09:23:8e:9a:fb:c6:ad:86:32:d4:60:ad:95:
bd:8f:1b:40:24:b4:ee:a9:79:fd:2e:9c:b5:55:79:
2a:64:a7:6d:22:bc:12:13:2d:a7:47:18:4f:b8:a7:
b5:4e:81:2e:2c:70:5b:d0:81:5c:8f:a2:11:b5:29:
63:39:72:5a:12:16:f1:98:e9:01:9d:f9:e2:f8:2f:
2b:d1:ce:0a:95:bf:d1:01:b1:8b:30:c1:cc:a1:33:
23:25:bb:16:ee:85:62:5a:5f:ef:55:d1:23:04:b0:
31:1a:3d:91:0e:a3:ad:14:8a:25:d9:00:a4:b5:17:
d2:d5:02:ba:01:bb:de:e1:ae:c1:64:b4:54:b5:24:
fa:74:dd:50:1f:d9:40:4c:86:1a:e1:6a:ef:76:da:
29:23:5a:4f:d5:e2:ce:1a:a2:5a:4f:e3:3a:ca:2f:
a2:56:5d:ce:a2:61:70:6c:18:70:f6:4e:37:a9:9d:
45:85:ab:01:2e:5e:47:36:e9:1b:1b:24:b1:8b:88:
73:e5:19:db:82:2d:93:53:59:ee:a1:ac:fa:64:c3:
8e:fb:64:0c:bd:16:48:ec:99:7f:b2:81:17:1d:0f:
86:7a:55:d4:2c:3c:ca:3f:4a:87:bc:bc:ab:f2:0b:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E1:B6:E6:2F:84:1B:4F:64:19:84:30:71:CC:08:FA:7A:0C:5B:5F
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/v-G25i-EG09kGYQwccwI-noMW18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
Signature Algorithm: sha256WithRSAEncryption
60:56:3c:27:b7:2e:b9:88:31:0f:fd:4a:31:20:bc:96:eb:62:
2f:ec:f8:76:e1:85:28:c6:31:6d:1c:8a:33:0e:b0:dd:3e:a0:
7c:45:df:50:34:f4:cc:35:39:4f:25:b5:6d:cd:5d:ae:e3:4a:
35:41:1d:c9:7e:3a:09:e6:22:e6:f9:31:e5:f9:37:58:61:d5:
46:75:9a:3a:0f:12:29:67:16:7d:80:94:cf:b5:05:58:fa:e5:
bd:52:7d:2a:f1:97:a1:c8:65:85:a2:f5:98:dd:59:ee:21:92:
2d:54:76:45:10:fb:78:fc:3e:2f:d5:bb:bc:43:14:bd:47:88:
ae:ee:5f:92:00:29:57:0b:d6:57:ab:b9:e2:ad:be:a3:b9:85:
29:24:9e:8e:d1:13:14:47:22:47:37:14:f4:d1:b1:40:6c:2c:
45:ff:7e:c6:3f:ce:3c:5b:72:a9:c1:c0:b7:dd:43:65:d4:52:
b4:1b:a6:e4:a9:37:7e:44:c1:5b:07:ed:8f:b4:9f:72:a3:fa:
3e:64:bc:15:a1:f6:43:71:bf:4f:2d:9d:0b:6b:aa:2b:05:3c:
84:2c:23:14:e2:97:42:b6:e3:e3:75:d4:1f:f0:9f:79:66:ca:
6d:57:ec:7f:58:eb:88:57:8e:a3:a0:04:98:b8:21:55:e8:61:
d9:bd:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org