Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vkqq6BQApAGxjuhajvjDAZtya2w.roa
File: vkqq6BQApAGxjuhajvjDAZtya2w.roa (raw, json)
Hash identifier: l+iftLXSrob0ISMM9wne7Qalk6SVr0v6tsMgmKu92+M=
Subject key identifier: BE:4A:AA:E8:14:00:A4:01:B1:8E:E8:5A:8E:F8:C3:01:9B:72:6B:6C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01846A75A03DBE217AC628CD214E93A34A93
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vkqq6BQApAGxjuhajvjDAZtya2w.roa
Signing time: Sat 12 Nov 2022 06:10:04 +0000
ROA not before: Sat 12 Nov 2022 06:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 109.122.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6a:75:a0:3d:be:21:7a:c6:28:cd:21:4e:93:a3:4a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 12 06:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be4aaae81400a401b18ee85a8ef8c3019b726b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:e7:d5:77:45:6c:9b:00:06:e5:1e:1f:eb:
4c:87:ad:1f:fc:e8:5a:0f:31:3b:e2:d4:41:cc:f9:
17:b9:2f:3a:58:d6:23:5d:5e:02:86:5a:56:92:84:
60:b7:ed:52:1a:7b:a1:6e:89:6e:e7:ba:1b:92:d2:
7a:e9:96:97:94:fa:88:df:df:b9:04:69:9d:14:9e:
47:e1:46:e1:4f:79:7f:c3:49:fa:ed:5a:b4:c1:a0:
e4:41:45:21:4d:be:da:70:26:26:fe:e1:39:00:cc:
76:f9:7c:50:a8:2b:28:11:f6:5f:1b:fa:e9:53:60:
1d:99:09:45:76:f6:ea:0a:ee:8d:d0:0f:69:08:43:
79:0c:b2:eb:11:a4:76:bb:88:41:b8:fd:34:86:d9:
2e:02:43:a5:65:87:79:31:6d:3a:e8:1f:69:61:e0:
f6:cc:a9:61:a0:4d:ac:80:08:ee:87:d6:11:34:2f:
d7:9b:c1:09:71:64:9b:3c:63:80:69:a6:86:fa:87:
99:92:6c:04:22:54:dc:c0:32:24:67:9e:dc:45:7d:
0d:aa:78:6a:53:f6:b0:b5:7b:d1:a0:a1:54:75:20:
2e:6e:11:5f:76:43:6e:8f:5f:b5:f6:bf:f6:3d:93:
75:47:2b:48:ef:8a:cf:55:0b:e7:1e:ac:e4:8f:c2:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:AA:E8:14:00:A4:01:B1:8E:E8:5A:8E:F8:C3:01:9B:72:6B:6C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vkqq6BQApAGxjuhajvjDAZtya2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.215.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c4:b1:0f:96:2d:2e:6e:63:e6:eb:32:4c:93:7e:ac:07:44:
b3:b6:78:ff:2f:87:e7:ee:19:95:7f:36:ef:fa:e2:36:48:73:
63:15:e9:ea:4e:f1:7f:ef:64:cb:33:5b:db:dd:a2:1d:35:78:
98:c7:6f:5d:61:7c:94:e1:61:42:32:2b:81:c6:88:f5:3e:55:
27:0c:9a:35:5c:a4:62:dc:e5:40:9f:90:ab:ec:11:95:55:67:
c9:1a:45:42:b8:79:4e:c1:da:e1:fd:dd:de:3c:10:db:1f:33:
5e:81:dc:41:d0:d7:39:12:49:78:2d:05:58:69:11:a0:a0:a0:
c7:0c:f0:3e:03:bd:c9:11:e1:ab:b0:5a:e7:db:5a:8d:b8:0c:
42:bc:56:4c:e8:7a:91:68:10:d6:99:bf:21:3c:31:ef:9d:8f:
b1:63:d7:07:80:5a:6d:df:fe:00:0c:32:cd:c5:93:a2:ea:b9:
1e:09:97:a5:21:ae:05:01:7c:73:06:fc:3b:29:34:20:c6:4c:
52:57:f9:e9:4e:68:ea:43:d2:0a:20:c3:9b:4b:3a:0f:6a:d0:
bc:29:8f:2e:20:cc:e3:4f:7c:94:11:b3:c9:63:e2:f4:45:de:
70:70:52:fc:9a:b6:b5:d3:e4:2a:ff:7f:1e:f2:bf:a8:b4:b9:
2b:e1:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org