Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/080Huo87Ywqv0kEFWxl_IoliCzY.roa
File: 080Huo87Ywqv0kEFWxl_IoliCzY.roa (raw, json)
Hash identifier: F0Lanu1d8EX19OOJogKuOoi1enBwhbLmYDWB7UKdi9M=
Subject key identifier: D3:CD:07:BA:8F:3B:63:0A:AF:D2:41:05:5B:19:7F:22:89:62:0B:36
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183C8E112FB541FD87E48C8BD76FDF73D83
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/080Huo87Ywqv0kEFWxl_IoliCzY.roa
Signing time: Tue 11 Oct 2022 21:08:57 +0000
ROA not before: Tue 11 Oct 2022 21:08:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 109.122.205.0/24 maxlen: 24
109.122.204.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:e1:12:fb:54:1f:d8:7e:48:c8:bd:76:fd:f7:3d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 11 21:08:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3cd07ba8f3b630aafd241055b197f2289620b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:d1:40:3e:d3:ff:52:39:df:c5:14:64:80:
29:12:2a:77:46:6a:52:e5:ae:6e:dc:93:e3:d3:be:
f0:0f:30:fc:a4:2b:3e:83:08:c3:15:e2:77:79:2d:
08:f6:18:bd:58:be:1c:b8:63:18:9d:f7:88:8e:22:
f2:2e:36:ae:e0:c4:3e:b8:f9:75:fc:f0:90:fb:f5:
87:2c:1e:f2:6a:94:03:70:7c:c2:13:c8:93:f3:99:
59:ec:f8:b1:d7:6c:ae:c6:eb:48:26:5f:40:a0:1b:
3a:7a:41:70:7c:33:7a:15:57:77:e5:e4:77:c3:8f:
a2:4e:c5:a5:a5:50:68:7a:9e:da:9c:2c:8a:bb:1f:
1a:96:94:91:19:fd:bb:86:6a:49:be:b4:12:5a:b5:
bd:0e:bc:ef:07:c3:9e:f9:8c:3e:d6:51:0b:5f:46:
a8:1f:76:ab:a6:ab:14:fc:de:b0:85:a3:ab:1d:c3:
dc:ab:fc:90:09:87:9c:10:74:71:57:ff:7e:d1:78:
a9:06:b2:9b:49:d9:f0:27:08:08:65:40:e8:8a:6a:
4c:c3:d3:9e:6c:70:23:1a:00:60:d5:ea:80:80:40:
6b:35:c4:a0:0b:9d:87:ee:d2:83:89:d8:25:51:21:
a4:ec:c8:33:5b:9a:19:f7:f9:a0:f5:9d:0a:4f:85:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:07:BA:8F:3B:63:0A:AF:D2:41:05:5B:19:7F:22:89:62:0B:36
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/080Huo87Ywqv0kEFWxl_IoliCzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.204.0/23
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d0:38:95:58:1a:ce:68:35:af:de:63:02:6d:eb:fc:c7:ad:
04:c3:9c:3f:ff:bf:29:fc:eb:35:aa:1d:5c:2d:51:49:b0:0b:
c4:b3:d8:43:f1:a1:c9:34:c3:44:4e:7a:96:b1:06:9a:cb:03:
f4:68:94:ed:65:5b:cb:9c:0f:95:3c:16:5a:80:49:57:13:d3:
3c:42:6c:56:76:9a:f3:88:22:df:ff:85:59:0b:37:81:0d:27:
41:19:a4:75:9b:a7:b4:0b:4e:b2:83:8c:3c:14:ef:6c:d6:d0:
f3:12:09:41:bc:de:37:62:21:ec:34:69:7f:b5:38:6c:56:dd:
6d:fe:e0:75:f0:39:12:7b:4f:c0:6b:e6:f9:86:89:dd:03:e8:
21:5a:6e:f8:6c:dc:28:e1:03:37:4f:43:91:c7:f4:d0:42:e1:
c0:0f:7f:43:3a:93:ae:39:73:55:b7:fb:f6:d4:d1:57:7c:8d:
20:eb:ae:68:81:12:25:52:36:05:57:ac:0b:61:72:a0:1d:0b:
8a:6c:48:88:f8:e5:de:2a:b3:3f:d1:a1:ee:ab:4e:46:0a:30:
c4:ad:0c:cd:e9:56:fb:04:4b:5c:69:94:d0:d4:85:5f:51:10:
ee:10:09:2b:ed:cf:f0:6a:1f:80:99:e5:6a:81:55:63:b4:c0:
1c:40:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:11:39 2025 by rpki-client