Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-hujDjoS5vrwKrlAjUJnXF6KbTE.roa
File: 1-hujDjoS5vrwKrlAjUJnXF6KbTE.roa (raw, json)
Hash identifier: ykxl3qakk59IZqvMT/Pe0dZvV3rw3pg10h1cHjWPB14=
Subject key identifier: FA:1B:A3:0E:3A:12:E6:FA:F0:2A:B9:40:8D:42:67:5C:5E:8A:6D:31
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 069A7479
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-hujDjoS5vrwKrlAjUJnXF6KbTE.roa
Signing time: Fri 08 Apr 2022 07:47:01 +0000
ROA not before: Fri 08 Apr 2022 07:47:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 185.207.4.0/22 maxlen: 24
109.122.206.0/23 maxlen: 23
109.122.211.0/24 maxlen: 24
109.122.212.0/23 maxlen: 23
109.122.218.0/23 maxlen: 23
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110785657 (0x69a7479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 8 07:47:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa1ba30e3a12e6faf02ab9408d42675c5e8a6d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:99:86:6c:1f:de:73:ed:fc:bc:94:6f:a7:
70:26:97:e1:ff:18:66:d7:87:fa:91:48:59:d6:b4:
6f:14:af:23:45:fd:f6:ec:74:f1:ab:3c:1b:d5:31:
08:c1:9d:57:01:08:ee:aa:c7:60:8d:84:33:bd:51:
01:99:70:36:36:40:3a:de:f6:df:7f:5c:b3:b2:6a:
21:2e:43:a4:9d:63:76:5e:0a:4c:e1:57:5e:f6:4e:
a9:5d:b6:2a:2b:21:47:ec:33:f3:f6:25:84:aa:87:
72:44:73:da:b4:74:69:d8:be:d2:36:83:cc:96:59:
ea:91:59:f6:cf:9f:59:a4:b3:16:c2:55:5f:49:4a:
6e:b0:fb:0e:6a:4f:8e:4c:d2:57:bd:7a:db:56:57:
dd:65:2b:31:8a:62:81:ad:dd:4a:4c:2c:1e:76:3c:
10:e6:e5:c8:f6:1f:e4:57:6b:7c:c7:f9:59:d8:52:
88:ac:b2:1e:35:95:a1:b7:3c:72:67:05:cd:18:c0:
17:05:f9:d0:73:1b:4f:d2:c5:4a:a9:5c:56:70:85:
c8:4f:85:74:fc:6b:cc:36:39:f6:70:bb:0b:32:e6:
8a:b5:0a:c3:4d:5e:4c:34:1d:ac:5d:a5:4f:e2:e5:
d9:2a:d6:34:73:3a:90:52:b4:64:8b:01:2e:97:f0:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:A3:0E:3A:12:E6:FA:F0:2A:B9:40:8D:42:67:5C:5E:8A:6D:31
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/1-hujDjoS5vrwKrlAjUJnXF6KbTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.206.0/23
109.122.211.0-109.122.213.255
109.122.218.0/23
109.122.223.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:7b:16:7f:07:4d:6c:f4:ff:9c:53:c3:1f:25:e9:46:27:e3:
c0:eb:19:81:5d:5c:27:47:f6:65:74:be:45:17:b5:f2:e4:1c:
80:34:4b:aa:68:1e:4b:44:29:a4:3d:e7:4e:b9:09:2b:8c:1f:
20:9d:3f:0e:9b:20:eb:c6:83:f9:d4:c9:35:eb:56:06:e1:e5:
78:5f:74:85:66:41:a3:05:3f:8d:b4:8f:a4:af:96:7f:47:d5:
97:cf:71:c9:d1:32:40:c9:0b:20:65:a5:42:40:30:ed:62:8b:
f6:ca:40:df:7e:9a:fd:c3:f6:d4:94:5d:89:0d:10:5e:46:ef:
63:eb:88:ff:e2:32:59:58:97:c1:84:b1:85:30:46:e0:c7:31:
90:cd:ec:0c:1d:9b:b5:8a:3b:c7:eb:39:0d:0b:27:1d:4b:7d:
18:c1:7b:97:80:4c:ed:5a:ff:5f:c1:7d:aa:02:5c:65:88:91:
24:3a:2f:ad:e3:b1:de:4e:b4:0a:4f:da:57:34:07:dc:47:9e:
51:2e:48:db:5c:dc:40:a0:2b:9f:d4:fa:1c:ee:bc:a3:67:80:
f3:4f:de:f4:73:8e:bc:0e:50:ea:6e:16:ab:4c:8e:fd:19:1a:
12:c9:ed:97:d2:a8:d7:03:0d:8b:2a:1c:af:1c:07:51:31:29:
cc:db:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:29:35 2025 by rpki-client