Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/0wBQuPtqqok0BINDORakQgd92gA.roa
File: 0wBQuPtqqok0BINDORakQgd92gA.roa (raw, json)
Hash identifier: fbJAPaoR9P/punfbIOMDxi26M2sqZIC62dM1G1sE0Js=
Subject key identifier: D3:00:50:B8:FB:6A:AA:89:34:04:83:43:39:16:A4:42:07:7D:DA:00
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184A52EC46AE1B9BACF1148A4A9AB1F8CA1
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/0wBQuPtqqok0BINDORakQgd92gA.roa
Signing time: Wed 23 Nov 2022 15:50:16 +0000
ROA not before: Wed 23 Nov 2022 15:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 109.122.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:2e:c4:6a:e1:b9:ba:cf:11:48:a4:a9:ab:1f:8c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 23 15:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d30050b8fb6aaa89340483433916a442077dda00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:0c:ad:3a:09:5a:44:bb:e4:09:1f:c4:ba:
a6:8e:d5:99:88:a5:31:43:c5:12:5d:84:a1:be:9b:
b9:04:52:d3:9f:19:be:c1:16:1b:f8:7a:1c:91:a5:
bd:db:7c:52:a5:fd:ad:15:ec:13:bb:d2:3c:cc:bc:
14:a1:c4:45:ee:72:06:a1:50:21:f4:07:75:ab:8d:
4a:7f:e3:f6:1b:22:90:3a:5d:f4:23:fd:44:ba:8b:
19:06:68:25:d1:b2:78:2c:03:35:79:03:dd:6f:64:
8a:1c:83:04:50:8d:f6:16:c7:ff:73:b2:00:39:17:
fa:ed:0d:16:fa:ce:33:ab:3a:6a:6c:5f:4d:ba:54:
fc:4c:57:92:f3:8a:b6:98:5a:8e:91:8d:75:a5:73:
47:97:d1:ca:93:bf:7b:69:40:8b:6f:88:93:b2:d8:
1e:57:de:98:e4:e8:ec:56:6c:1b:8c:0a:bc:e9:0e:
ed:86:2d:25:10:4a:b2:72:07:4c:8f:b7:c2:15:f1:
30:1d:a2:7b:ef:ca:4d:38:0d:46:6c:85:38:fe:c9:
9f:ad:fa:37:7c:60:54:bf:7d:48:54:ea:ec:37:0f:
02:fd:ef:f8:27:91:5d:2d:88:85:98:3d:80:2b:76:
0a:3e:96:4c:d9:c7:c3:62:e3:27:c8:5a:83:cc:b5:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:50:B8:FB:6A:AA:89:34:04:83:43:39:16:A4:42:07:7D:DA:00
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/0wBQuPtqqok0BINDORakQgd92gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
Signature Algorithm: sha256WithRSAEncryption
83:37:3b:e7:17:c9:f6:45:f7:a8:0d:aa:65:0d:3e:f2:16:11:
6b:d6:20:22:a8:13:53:d4:1a:3c:be:88:fb:48:19:25:47:0d:
9a:a2:db:2c:88:9f:41:fa:0c:15:19:da:bf:07:17:e7:8d:d7:
b5:ed:dd:c1:e3:3d:1c:a2:f8:9f:7b:55:da:1e:9d:aa:43:be:
f2:50:0a:7b:20:9c:e4:37:d6:ad:3e:e8:37:a4:01:dc:cc:c7:
c3:31:59:79:7c:e0:5e:16:64:17:81:b7:5d:22:fc:00:84:8b:
ac:ec:f3:45:20:22:fe:0a:b4:be:4c:d1:71:df:41:46:2d:19:
3d:d8:87:39:2f:d2:9b:9e:28:2c:79:87:1c:cd:05:f5:5e:57:
41:c8:0c:b5:62:f8:d4:65:84:fc:2e:87:42:44:8d:47:a3:b2:
f0:46:47:5f:3f:03:55:0a:2f:6f:e4:e3:0b:14:11:dd:90:c3:
f3:62:b0:5a:34:b9:0d:9d:92:77:7e:42:5f:22:31:d4:5a:3a:
81:33:3b:72:f1:39:ef:14:89:a0:f5:b2:7b:07:6f:bb:f1:d6:
14:6a:7b:9c:9f:fe:b8:a7:61:9d:53:9e:4d:74:b2:19:2f:50:
7a:36:e1:f4:a6:fa:e9:f7:3a:ea:46:7f:71:27:03:31:5a:2f:
22:1d:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:12:30 2025 by rpki-client