Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/4W-KpBuvhUmrhOQfFnG7arcfyng.roa
File: 4W-KpBuvhUmrhOQfFnG7arcfyng.roa (raw, json)
Hash identifier: TI/XACRDkogbtdlUAzP9OZ5Ppb5v6cb1hjYDrsVk95k=
Subject key identifier: E1:6F:8A:A4:1B:AF:85:49:AB:84:E4:1F:16:71:BB:6A:B7:1F:CA:78
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185C3B4C470397F49BFA10C61DF062E189D
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/4W-KpBuvhUmrhOQfFnG7arcfyng.roa
Signing time: Wed 18 Jan 2023 07:08:01 +0000
ROA not before: Wed 18 Jan 2023 07:08:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 109.122.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:b4:c4:70:39:7f:49:bf:a1:0c:61:df:06:2e:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 18 07:08:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e16f8aa41baf8549ab84e41f1671bb6ab71fca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:bc:2e:0d:1b:ce:fc:71:21:d1:28:e2:53:
ee:5c:10:7e:45:5c:d1:b0:be:b0:4b:e9:74:60:45:
64:75:e8:70:4a:a5:5a:c1:1c:24:65:60:60:cb:60:
5c:a9:f6:ef:c1:a1:f0:11:be:af:9f:3b:57:1b:1f:
30:d0:e1:0b:1c:e9:c7:80:cb:d3:29:bb:08:df:75:
96:7d:db:40:79:88:eb:60:68:2c:8d:73:d8:48:ea:
da:8b:eb:87:33:fd:c0:cd:6d:63:17:3f:dc:e0:f3:
55:9b:f4:aa:90:bd:4f:4e:aa:af:05:b5:64:63:7c:
3e:8d:f8:e4:66:3f:ee:17:f8:11:b4:46:f5:a2:0d:
b4:2a:15:ff:b0:46:f8:cc:82:13:5c:69:af:6d:9c:
53:99:9b:c3:dd:a3:9b:7e:f8:16:99:e9:40:35:b2:
4f:6b:83:72:8e:aa:eb:66:9b:45:b2:07:79:79:fc:
82:c4:f7:21:b8:52:38:99:37:5c:79:24:45:cf:1b:
75:99:9e:85:6f:a5:4c:9c:70:88:cf:82:5b:58:d7:
89:16:0b:f7:e0:62:fb:db:3c:7d:5e:60:41:3e:13:
ab:27:94:53:5a:e8:0a:02:6c:29:90:91:e7:69:f3:
86:5e:26:e0:c9:18:9b:8e:be:87:8b:bb:33:ce:33:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6F:8A:A4:1B:AF:85:49:AB:84:E4:1F:16:71:BB:6A:B7:1F:CA:78
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/4W-KpBuvhUmrhOQfFnG7arcfyng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:68:54:d0:dc:c3:f1:dc:71:79:fb:7a:1e:3e:f7:ea:de:b7:
20:b8:82:9e:4d:da:30:07:ba:94:69:75:e2:d2:60:2e:17:f3:
f9:c9:34:3d:20:64:9e:7d:f7:96:3d:cc:31:10:66:72:66:14:
fc:c2:0c:8c:4f:9f:40:b3:2e:44:e9:9a:10:a1:e5:61:28:08:
d7:32:fa:66:d6:44:dc:87:2a:b7:88:a6:08:14:2f:47:42:98:
4b:c1:61:09:ce:61:85:a0:e2:29:18:84:f6:61:fe:56:8d:f1:
0f:63:d2:cb:df:b4:04:b8:b0:ed:72:4c:a9:ec:2b:4d:9e:92:
25:0a:a7:b8:57:be:9f:b2:48:a2:27:07:fb:d8:35:d7:95:c5:
c4:20:07:89:7e:8b:40:bd:7f:e5:2e:d4:9b:56:78:ab:f5:59:
6f:f5:ce:9c:a0:da:31:6e:2e:cc:4f:7f:08:7e:54:e2:37:2e:
26:e4:f2:ad:8f:05:6b:5b:98:e9:d5:f6:cf:c6:e3:b7:be:27:
f4:f0:f1:30:9b:d9:f3:67:0b:dc:5b:ac:be:35:32:e5:69:68:
b5:e9:4f:96:b3:3d:08:16:98:66:39:b4:5f:22:9b:d1:dd:85:
0b:38:ba:1c:1f:81:f3:58:9a:d6:4d:b5:e2:13:ff:40:67:01:
53:cf:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:45:11 2025 by rpki-client