Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/xyc2OFsGZJStWzRKxKSF7PXowfo.roa
File: xyc2OFsGZJStWzRKxKSF7PXowfo.roa (raw, json)
Hash identifier: 1HJlUS9Tk5X4FzEz1tWVJBqjE1Z1LzLpORpzakSi0ZY=
Subject key identifier: C7:27:36:38:5B:06:64:94:AD:5B:34:4A:C4:A4:85:EC:F5:E8:C1:FA
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01846A759F83EB9ECC480475B6E92E6E90F1
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/xyc2OFsGZJStWzRKxKSF7PXowfo.roa
Signing time: Sat 12 Nov 2022 06:10:04 +0000
ROA not before: Sat 12 Nov 2022 06:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33696
IP address blocks: 109.122.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6a:75:9f:83:eb:9e:cc:48:04:75:b6:e9:2e:6e:90:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 12 06:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c72736385b066494ad5b344ac4a485ecf5e8c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d5:25:bb:5c:e6:a1:86:46:3c:74:03:a3:41:
34:16:75:39:dd:f3:40:1d:a5:a3:43:a7:24:7d:36:
96:92:55:ef:df:49:6a:d1:74:57:90:7c:ae:a5:e5:
35:46:52:73:18:be:bc:95:8d:b7:36:6d:32:dd:36:
10:d4:1d:b2:9e:16:65:a3:30:87:60:80:0f:9a:d4:
e0:c3:88:35:d7:e5:4b:08:78:94:c6:76:2c:47:a1:
f6:c0:84:50:6b:bf:42:89:81:0b:00:a0:a8:23:39:
e5:bf:8a:d8:aa:d0:1b:39:5a:8f:41:32:c3:d7:3b:
85:29:de:4c:0d:a6:e8:6d:bf:3a:90:f3:b0:43:fd:
a2:0a:7e:63:a8:a0:29:16:c3:19:03:34:37:6d:c9:
7a:01:07:ea:79:0b:57:30:73:66:c8:82:6c:9b:53:
c7:70:70:50:d6:d4:07:7b:1a:c1:3b:02:2b:af:a8:
74:e0:da:42:5c:63:cd:28:6c:4f:2c:90:94:f5:06:
1d:27:bb:4e:8e:82:82:c9:fe:e3:ff:ba:8f:52:a7:
91:99:34:f9:66:e0:a2:53:40:50:ad:ae:95:7c:eb:
01:3a:d9:bd:4b:10:a8:2b:8f:36:f5:f9:2a:ae:81:
f0:8a:ce:09:f7:58:ca:39:3b:b8:58:e2:92:2c:39:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:36:38:5B:06:64:94:AD:5B:34:4A:C4:A4:85:EC:F5:E8:C1:FA
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/xyc2OFsGZJStWzRKxKSF7PXowfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:aa:5b:ef:15:44:a0:66:64:42:fe:95:b8:e6:a0:2e:92:4d:
0a:89:f7:c5:d8:1b:9d:92:7f:10:89:fb:1b:1e:f4:95:75:f3:
2c:25:1b:ab:f7:bf:1e:13:0b:4f:f2:d8:39:dd:7f:23:cf:b2:
54:b3:74:33:46:72:25:ff:a4:41:2a:25:68:67:80:9f:85:22:
80:14:68:46:28:75:d2:70:ee:3c:67:fa:ee:91:ca:3b:b6:29:
b6:81:cb:58:cb:54:35:31:47:50:03:53:4a:94:4a:15:0a:69:
03:43:2e:9c:aa:3d:b0:ae:e3:f2:75:56:8a:1a:1a:f1:c0:ef:
f5:b3:e0:4d:51:a2:d3:73:c3:35:45:f2:74:46:e7:74:34:cd:
98:ac:50:ef:fc:d4:c3:20:41:72:28:38:49:96:5c:8d:1b:d6:
68:45:b5:67:f5:03:40:32:a9:86:2d:d3:ea:76:c0:ef:9d:c8:
a7:40:0f:5b:68:de:52:8e:ab:9b:d0:dc:ab:99:74:40:83:f4:
88:20:a1:10:3e:7a:f3:50:43:d6:48:92:67:33:28:ce:48:e1:
1e:fe:17:26:87:ce:d4:66:71:24:61:12:6b:3a:05:45:b8:a7:
03:5c:c0:ab:1d:25:7c:f1:38:5a:cc:4e:45:5f:c0:d3:25:2a:
ce:bb:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org