Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/xWh4mmd8uiv_y00M6lbSq7D0Nus.roa
File: xWh4mmd8uiv_y00M6lbSq7D0Nus.roa (raw, json)
Hash identifier: /jpnYwgrY6ptitWJhoQrxQxPhCeTQ7ffPEb/0pfLHJ8=
Subject key identifier: C5:68:78:9A:67:7C:BA:2B:FF:CB:4D:0C:EA:56:D2:AB:B0:F4:36:EB
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01844D2DFAD4A8ECD974D856FA013EBCFFA4
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/xWh4mmd8uiv_y00M6lbSq7D0Nus.roa
Signing time: Sun 06 Nov 2022 13:42:49 +0000
ROA not before: Sun 06 Nov 2022 13:42:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60699
IP address blocks: 109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4d:2d:fa:d4:a8:ec:d9:74:d8:56:fa:01:3e:bc:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 6 13:42:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c568789a677cba2bffcb4d0cea56d2abb0f436eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:70:00:29:22:38:16:9c:b3:da:a7:e2:a8:
ad:4e:14:b0:49:bf:9f:b0:4f:29:58:c8:19:db:c5:
00:53:0f:5e:3e:9a:58:6e:09:86:80:35:06:5c:8b:
91:a6:ac:27:ed:e0:29:37:db:8c:46:1c:43:59:e8:
a2:23:3e:87:f1:36:aa:ba:e2:1e:6c:b1:10:42:fc:
2d:f4:6c:04:3e:49:d4:65:c6:b4:d2:f4:3e:ec:44:
ad:79:62:0e:86:e9:1a:ff:07:49:de:7c:d2:37:5a:
00:f7:1f:7f:f6:a8:22:0e:4f:82:cd:75:08:51:e1:
55:c5:78:09:a4:3f:90:ba:95:e8:04:92:79:b1:a1:
96:f3:94:0b:6a:2e:d7:c4:55:14:a3:f5:76:a0:ab:
7f:ac:34:b3:75:f3:cd:5d:cc:98:af:9a:a0:32:20:
0f:95:58:ca:b6:77:30:1d:02:9e:81:0e:60:92:f2:
e3:20:da:aa:b9:07:46:3a:7d:2d:8f:35:5a:55:a3:
1d:33:05:60:ee:6b:98:16:3e:b1:eb:a1:7b:95:5f:
74:46:19:3e:e7:2c:d8:d8:a0:d6:d1:bd:94:b2:5b:
55:e4:9e:05:71:13:18:50:ec:92:9f:4f:1f:51:6e:
cf:d7:8f:8a:3a:39:c6:73:c4:d6:3a:be:76:7f:fc:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:78:9A:67:7C:BA:2B:FF:CB:4D:0C:EA:56:D2:AB:B0:F4:36:EB
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/xWh4mmd8uiv_y00M6lbSq7D0Nus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
82:84:5b:c0:48:1f:60:29:e9:b9:b3:e2:5e:10:c2:32:92:c9:
81:70:68:5e:32:04:63:f7:86:91:33:89:df:c6:84:d0:02:1d:
c8:de:8f:f0:ac:b6:0a:7c:74:cb:79:d1:f0:9b:31:20:bc:3c:
26:b4:da:3f:68:2d:b5:b3:25:a2:6b:9b:90:29:2c:d2:45:b0:
02:73:45:5e:16:6f:1c:49:75:37:f7:84:0f:4f:3c:8c:0f:10:
e6:98:02:6a:d9:ff:ef:6a:e1:af:03:37:d6:e4:cb:12:9e:5d:
2f:55:a6:75:ae:78:fa:30:cc:54:36:f0:4e:82:6a:30:23:30:
3b:dd:ba:0c:50:c4:d0:ae:a2:8e:c3:df:67:59:f1:af:fa:7b:
d5:63:9e:3a:9b:1b:9d:be:06:c9:91:94:6b:4c:64:75:44:49:
18:36:3b:93:97:2c:ad:fd:a6:79:f8:3b:1c:ef:02:22:d0:66:
b0:ab:2a:70:8d:4e:76:b1:b2:68:c7:71:7a:34:e4:24:4a:21:
c4:4d:50:9b:5d:22:7e:56:14:ef:34:2a:2a:03:25:9e:99:f3:
80:87:28:f0:b7:3c:5d:96:a8:3b:8e:b5:b7:ec:0f:56:af:e9:
b6:4c:ac:89:7d:b6:82:ba:86:e1:73:63:32:55:78:0a:f1:12:
ef:d5:79:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRNLfrUqOzZdNhW+gE+vP+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMTA2MTM0MjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTY4Nzg5YTY3N2NiYTJiZmZjYjRkMGNlYTU2ZDJhYmIwZjQzNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDBwACkiOBacs9qn4qitThSwSb+f
sE8pWMgZ28UAUw9ePppYbgmGgDUGXIuRpqwn7eApN9uMRhxDWeiiIz6H8TaquuIe
bLEQQvwt9GwEPknUZca00vQ+7ESteWIOhuka/wdJ3nzSN1oA9x9/9qgiDk+CzXUI
UeFVxXgJpD+QupXoBJJ5saGW85QLai7XxFUUo/V2oKt/rDSzdfPNXcyYr5qgMiAP
lVjKtncwHQKegQ5gkvLjINqquQdGOn0tjzVaVaMdMwVg7muYFj6x66F7lV90Rhk+
5yzY2KDW0b2UsltV5J4FcRMYUOySn08fUW7P14+KOjnGc8TWOr52f/wHGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMVoeJpnfLor/8tNDOpW0quw9DbrMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEveFdoNG1tZDh1aXZfeTAwTTZsYlNxN0QwTnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrfMA0G
CSqGSIb3DQEBCwUAA4IBAQCChFvASB9gKem5s+JeEMIyksmBcGheMgRj94aRM4nf
xoTQAh3I3o/wrLYKfHTLedHwmzEgvDwmtNo/aC21syWia5uQKSzSRbACc0VeFm8c
SXU394QPTzyMDxDmmAJq2f/vauGvAzfW5MsSnl0vVaZ1rnj6MMxUNvBOgmowIzA7
3boMUMTQrqKOw99nWfGv+nvVY546mxudvgbJkZRrTGR1REkYNjuTlyyt/aZ5+Dsc
7wIi0GawqypwjU52sbJox3F6NOQkSiHETVCbXSJ+VhTvNCoqAyWemfOAhyjwtzxd
lqg7jrW37A9Wr+m2TKyJfbaCuobhc2MyVXgK8RLv1Xnx
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org