Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/w1wF0_mYnjP5OMVSUx5c-xWQ09c.roa
File: w1wF0_mYnjP5OMVSUx5c-xWQ09c.roa (raw, json)
Hash identifier: Ln6LEGXIsxqWpSifOdXte+NlW+20Q7ohMGNNzwr5qFM=
Subject key identifier: C3:5C:05:D3:F9:98:9E:33:F9:38:C5:52:53:1E:5C:FB:15:90:D3:D7
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01842DC3729F1F2B6CBFCEE2EBE465F58A5A
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/w1wF0_mYnjP5OMVSUx5c-xWQ09c.roa
Signing time: Mon 31 Oct 2022 11:18:14 +0000
ROA not before: Mon 31 Oct 2022 11:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:c3:72:9f:1f:2b:6c:bf:ce:e2:eb:e4:65:f5:8a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 31 11:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c35c05d3f9989e33f938c552531e5cfb1590d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:cc:cd:28:b8:54:30:ce:53:00:03:76:17:
75:57:79:96:17:26:a2:18:f2:cd:4c:16:2a:b5:5e:
91:3e:f9:ed:9c:03:0a:4e:ad:af:fc:28:ae:01:cf:
2b:cd:fc:13:0b:74:87:50:01:14:69:2f:89:2e:77:
f3:15:f2:91:cd:5d:39:9b:c2:6b:4a:14:82:5d:da:
87:55:58:3f:e1:a7:42:de:0a:53:24:ad:21:30:6e:
18:89:fb:8b:c8:f6:37:10:01:34:e6:02:e0:2b:4a:
6e:13:95:ad:d6:ef:2b:56:ca:84:cd:90:8e:22:ac:
a5:c9:cd:23:15:59:b8:10:2e:d2:67:c5:74:b5:ee:
ef:12:8a:2a:db:c6:6c:41:8c:5b:19:9c:d8:61:24:
9b:5e:da:a8:5e:df:76:67:ca:fb:a5:4f:1d:ed:ae:
cc:9a:af:e8:80:e4:85:39:f0:d8:47:e5:7f:d3:10:
58:49:79:51:38:24:42:ec:72:e6:eb:db:22:c4:f4:
8e:b9:77:6c:44:28:0e:74:d4:46:df:98:31:73:ab:
59:cc:3c:93:aa:1b:5e:00:c9:44:bf:e1:be:99:9a:
e7:a6:c8:a5:71:7e:bb:7c:ce:ca:42:0c:00:6c:a9:
c3:79:67:e3:c2:0c:3a:b0:b8:48:0c:82:d2:9d:74:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:05:D3:F9:98:9E:33:F9:38:C5:52:53:1E:5C:FB:15:90:D3:D7
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/w1wF0_mYnjP5OMVSUx5c-xWQ09c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5c:bf:b8:23:21:48:af:e4:e1:82:35:4b:86:f3:0b:ba:5d:
c1:b4:eb:9a:4b:46:3e:a9:0c:96:46:59:05:14:d0:d6:ce:9d:
97:43:50:78:25:66:a4:7f:8a:69:03:f4:de:0a:ad:8f:61:b3:
68:73:15:22:8b:9f:3d:79:26:a4:03:4c:cb:11:36:df:ba:0c:
b8:31:2b:24:76:57:85:34:4c:ef:16:1e:87:d1:de:83:37:1e:
fc:e4:79:7a:3c:42:19:b1:7c:6b:c9:4d:3e:c1:4a:1f:43:2b:
34:4d:39:19:bf:df:02:67:be:38:c2:4d:8c:39:ae:d9:b5:52:
fa:c6:60:4f:4d:5e:d7:c6:70:44:4f:21:59:f7:e4:57:e6:5a:
af:62:d5:b7:63:a6:40:f1:a9:4f:9b:80:06:00:2d:3b:c3:f4:
a7:85:43:a7:5a:b3:48:26:a5:f7:e7:d1:1e:45:ad:21:bc:88:
e0:21:16:df:cb:44:8b:75:1c:87:c4:bb:79:b6:64:c8:a0:4d:
05:ed:af:ce:53:e8:fc:79:47:01:c7:7d:55:53:a2:11:b9:cc:
df:77:a0:bc:84:a8:d2:0d:54:02:21:aa:d0:63:f7:37:c3:91:
d3:f3:57:bd:ec:55:69:80:87:ac:6f:2f:b3:f6:e9:09:a4:d7:
a3:74:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org