Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-Zac-q-gBpS1Tlq3V4bRqSGGD20.roa
File: 1-Zac-q-gBpS1Tlq3V4bRqSGGD20.roa (raw, json)
Hash identifier: ecw9CprKJufmextfjIKmBu4vzMgybOBGD8atbLuMsRw=
Subject key identifier: F9:96:9C:FA:AF:A0:06:94:B5:4E:5A:B7:57:86:D1:A9:21:86:0F:6D
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183B1B2A1349033D1FAF45F9396E324D179
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-Zac-q-gBpS1Tlq3V4bRqSGGD20.roa
Signing time: Fri 07 Oct 2022 09:06:57 +0000
ROA not before: Fri 07 Oct 2022 09:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 109.122.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:b2:a1:34:90:33:d1:fa:f4:5f:93:96:e3:24:d1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 7 09:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9969cfaafa00694b54e5ab75786d1a921860f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:02:6c:ee:bd:74:72:70:54:92:b4:be:95:
20:57:29:92:0e:07:81:3f:c5:ae:17:bd:86:3c:af:
33:d3:6b:3b:af:37:13:00:05:d6:b4:10:85:6a:ec:
31:41:4c:86:f2:07:0e:4f:0d:75:f7:2c:be:e4:d4:
31:16:64:23:5c:8a:ee:1f:3b:13:62:84:13:84:15:
56:72:8e:ea:c3:2a:9e:1e:b8:44:e1:c8:33:60:6f:
87:a0:bb:e9:0c:af:23:4b:34:74:f3:3e:61:14:7a:
76:03:f8:c5:ba:08:e9:75:d4:8e:b0:c4:e0:b0:90:
95:c3:9f:8c:27:db:5b:a2:cc:f8:e4:5d:96:50:ca:
5f:dc:1e:1c:db:59:58:87:4d:73:7a:51:cb:3e:e5:
5d:55:b8:78:b8:b7:9a:c0:d3:fb:05:c8:c3:ca:e0:
a6:81:01:6c:11:d0:69:21:b0:ab:30:02:17:23:7b:
32:57:99:b1:26:b3:ba:f4:28:60:f5:74:74:ac:1c:
b8:77:81:71:03:b8:94:2d:52:7c:d9:19:b3:4d:e2:
bd:c8:d2:c9:50:a7:46:ee:ba:e2:e3:dd:7c:1e:c1:
40:ba:38:10:55:2c:96:6d:ec:4d:36:4a:e8:80:bd:
58:84:16:69:7a:12:e3:f0:ee:d1:8a:af:7b:65:d8:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:9C:FA:AF:A0:06:94:B5:4E:5A:B7:57:86:D1:A9:21:86:0F:6D
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-Zac-q-gBpS1Tlq3V4bRqSGGD20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b8:8b:b5:d6:ac:0d:54:a6:0b:70:45:2a:46:63:31:cb:df:
9b:b1:a3:ad:9a:55:7a:57:e6:fd:11:56:5d:92:b3:7f:d4:46:
03:cd:2b:c3:57:cc:df:bf:1b:1f:21:92:4b:45:ef:65:cc:3a:
1d:5b:e0:d5:29:5f:ed:67:f3:7c:33:7c:f5:0c:81:4c:19:74:
4b:ef:ef:f1:b3:75:8c:d6:b8:e0:f3:75:cd:85:db:81:59:44:
43:c0:86:84:7b:9f:d2:1a:19:3f:aa:f3:ac:92:f5:11:e7:89:
72:da:4a:3b:10:2a:15:05:70:61:b4:21:77:5a:20:57:9a:23:
cf:a2:b1:c0:d0:a9:9f:93:ae:bd:0c:ad:57:f3:e6:19:a5:0b:
66:9f:7f:40:47:3d:5c:98:16:b4:0a:b6:ae:11:26:56:be:3b:
fd:b5:4e:17:4b:fc:de:2a:2b:e0:6e:c8:ea:3f:fd:56:42:64:
4d:74:cb:8c:87:1d:24:ba:5b:fa:07:79:a0:ef:94:99:e9:c6:
42:fc:f9:b7:7f:45:f4:ed:96:6f:43:f3:1d:b2:83:7e:bb:1b:
11:0f:8a:7e:65:19:82:b5:0f:13:9c:25:63:26:4f:80:dc:9e:
87:0d:a0:3a:23:a0:d1:cf:9e:52:4f:c5:f7:12:22:ca:74:d4:
c8:0b:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:13:44 2025 by rpki-client