Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/zf6VP_Eifyh7VFtY0Ljs5BcJg6k.roa
File: zf6VP_Eifyh7VFtY0Ljs5BcJg6k.roa (raw, json)
Hash identifier: TOgW7IhIaSN7t5N79yFxgh4vIbEgi0ATkkoHw87snQA=
Subject key identifier: CD:FE:95:3F:F1:22:7F:28:7B:54:5B:58:D0:B8:EC:E4:17:09:83:A9
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185B94200A034246537871FF52A0D36295D
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/zf6VP_Eifyh7VFtY0Ljs5BcJg6k.roa
Signing time: Mon 16 Jan 2023 06:26:28 +0000
ROA not before: Mon 16 Jan 2023 06:26:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 109.122.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:42:00:a0:34:24:65:37:87:1f:f5:2a:0d:36:29:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 16 06:26:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdfe953ff1227f287b545b58d0b8ece4170983a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:69:2d:8e:30:c3:a9:1e:81:88:ff:14:22:
df:79:a2:69:08:3a:66:fe:1a:86:bb:65:18:49:22:
07:b5:eb:3c:a2:de:e4:92:2e:c7:41:55:1f:60:0f:
52:08:4f:9c:f9:5e:6e:7a:cc:93:3a:47:f0:12:ab:
be:e1:d6:9e:af:21:c8:3b:1e:25:b9:e2:5b:69:18:
e1:4e:7c:59:4a:63:98:e0:db:ea:f6:3c:35:1e:3e:
4c:8e:de:22:df:63:f9:77:01:9c:f5:6b:c2:ea:64:
b6:c3:29:44:e0:23:b1:da:d9:76:c3:cc:f7:79:ff:
67:84:82:fe:59:a2:2f:82:6d:e7:eb:12:18:2c:bf:
5a:be:dc:d3:8f:75:b1:22:69:03:61:e2:1b:75:1f:
b7:2a:85:a7:19:33:e5:c5:5c:ac:c4:fb:5b:a8:d4:
e2:9f:aa:56:8a:18:0a:18:81:c9:61:bd:d8:d9:c1:
c3:00:70:30:f8:d1:2f:60:eb:49:63:6e:c1:16:ef:
91:96:8e:b4:fd:97:37:ee:c6:31:b6:6e:f7:a0:02:
7a:4f:d7:f6:b3:21:b4:0b:9b:0d:4d:1c:66:0f:b9:
bc:1c:28:28:ab:9f:33:d5:16:87:37:5a:0a:f0:75:
4e:f1:7c:fc:39:98:dc:c4:3a:bd:6a:ea:cb:4d:37:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:95:3F:F1:22:7F:28:7B:54:5B:58:D0:B8:EC:E4:17:09:83:A9
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/zf6VP_Eifyh7VFtY0Ljs5BcJg6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.220.0/24
Signature Algorithm: sha256WithRSAEncryption
68:dd:2c:93:df:56:b9:d8:c8:e6:35:d9:37:f5:ae:62:6e:90:
e4:75:2a:f2:17:9c:16:55:66:45:d4:f1:a8:f0:9e:e3:46:83:
52:8d:3d:8a:c7:75:ca:8d:e3:c1:64:46:fa:c5:47:6f:fc:d5:
50:72:2c:a0:d7:d7:92:71:1b:d1:00:73:c0:dd:04:c7:ac:23:
46:b7:0d:cc:48:2c:1a:cd:d1:fe:a9:cd:c2:da:cf:40:de:5e:
5f:c8:a2:a8:be:8b:1e:c8:a9:69:5f:0e:72:0e:5c:70:5e:82:
d0:0d:6d:0d:ba:9f:59:d7:2c:a8:a5:1b:8b:ed:13:25:6f:09:
61:45:e9:d5:52:f2:6b:12:1a:35:64:4d:57:c7:1f:20:0a:a3:
01:fd:b9:45:1d:7e:1d:83:4e:d7:21:68:0c:a1:49:ec:8f:e6:
d0:79:9e:1e:a0:d9:03:b6:71:c9:d0:ce:e0:2a:d1:ee:ac:35:
a3:4d:ef:ba:5b:1f:6a:c0:74:4c:6f:95:e9:2f:98:50:06:27:
03:d3:a7:58:66:f6:80:2c:ae:82:32:5f:24:e3:3c:21:7e:d2:
49:be:69:b4:58:fc:0f:48:a0:89:74:9b:26:f4:e6:42:3d:3e:
30:17:f9:03:74:85:25:ee:57:52:a5:3c:c3:ff:2a:07:0f:f5:
75:84:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org