Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/5-DvhIYclQELFYlioeLW7cJKB-I.roa
File: 5-DvhIYclQELFYlioeLW7cJKB-I.roa (raw, json)
Hash identifier: yaUDbsZq8VVmuqwPp35NF9OSIH4pTkgZitW+5Dlsw9g=
Subject key identifier: E7:E0:EF:84:86:1C:95:01:0B:15:89:62:A1:E2:D6:ED:C2:4A:07:E2
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5A0E82A39C81778F049AA52B4FBD
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/5-DvhIYclQELFYlioeLW7cJKB-I.roa
Signing time: Sun 01 Jan 2023 21:44:47 +0000
ROA not before: Sun 01 Jan 2023 21:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 109.122.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5a:0e:82:a3:9c:81:77:8f:04:9a:a5:2b:4f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7e0ef84861c95010b158962a1e2d6edc24a07e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:34:9c:5f:94:7e:ee:8d:e4:25:31:c0:d9:
64:58:2a:eb:98:d7:7c:5d:35:ec:df:ed:7a:ef:78:
50:bd:dd:31:0a:cd:f6:da:f3:78:58:48:f5:b3:56:
4e:dd:cb:8e:da:84:ef:d6:cb:ac:d3:45:93:51:de:
d6:87:52:52:d4:11:b1:1a:b4:cb:68:f6:90:0b:18:
e1:ce:3f:e6:e5:40:80:86:14:24:9d:95:14:e1:e7:
05:ed:50:9b:33:61:cf:20:6b:f9:07:95:26:b3:58:
98:50:f7:38:58:10:9e:16:6f:e6:ea:be:70:70:f4:
e3:20:8b:0a:f5:7e:28:02:46:ef:b7:09:a9:9a:94:
77:57:86:a1:a7:bb:b0:6a:7d:9d:87:93:48:4d:13:
2e:31:e1:22:04:66:8f:7a:19:5e:9d:d7:bb:0e:b2:
e5:72:76:86:2a:3d:e0:ad:14:82:d2:25:e7:9f:f1:
6d:0c:63:c4:28:0a:bb:b2:df:da:fd:cf:7b:c3:ff:
47:d9:ec:59:67:82:dd:ad:e7:4b:06:32:3a:09:ac:
bf:04:66:64:21:2f:33:32:75:88:31:51:b8:25:00:
72:7e:56:5b:50:c3:fc:08:d0:7d:7f:04:30:e4:4a:
c4:11:f7:b2:1b:2c:20:4b:d6:81:fa:ff:76:1d:45:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:EF:84:86:1C:95:01:0B:15:89:62:A1:E2:D6:ED:C2:4A:07:E2
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/5-DvhIYclQELFYlioeLW7cJKB-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.219.0/24
Signature Algorithm: sha256WithRSAEncryption
40:64:0e:5d:63:42:00:b0:24:ba:90:4c:20:53:3c:72:e6:8c:
3c:85:04:eb:23:3a:dd:01:0d:6a:06:e3:ce:b2:7b:95:a0:38:
ca:03:73:b2:b4:16:3b:47:bd:78:a8:f9:59:4a:6f:66:e6:0f:
b7:42:4c:02:02:36:a6:8f:2b:df:21:f1:53:58:1c:6a:58:67:
8b:06:d6:a4:94:41:e6:fe:a2:ef:37:99:aa:c7:29:6a:28:f3:
f8:90:0e:44:da:d5:96:b9:94:b4:4a:3e:6f:ae:c9:46:4b:dd:
6c:ea:ab:dd:18:9f:70:fa:17:56:02:67:e4:b2:e5:17:69:ce:
2f:35:97:54:1c:d5:8b:ae:1d:74:ae:2d:eb:3a:db:57:75:9c:
50:f7:83:e0:fa:0e:bd:4a:c1:38:df:89:ea:88:5b:41:99:85:
b6:4e:ad:c4:53:45:c5:bc:02:2f:8a:30:76:ad:75:4a:c9:0a:
9e:a2:b4:68:1a:eb:29:16:83:1e:92:ae:71:18:c5:4d:50:9d:
6c:32:a3:b4:e0:19:3a:19:a0:e0:cc:ba:0d:00:b5:42:86:01:
b6:c1:95:2c:a6:6f:72:d3:f1:b9:c0:44:3a:94:ef:7b:10:d0:
7c:f7:f8:5f:ec:08:eb:16:24:cb:d6:13:9f:c2:d4:5d:cd:3f:
2c:12:fe:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS1oOgqOcgXePBJqlK0+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTAxMjE0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2UwZWY4NDg2MWM5NTAxMGIxNTg5NjJhMWUyZDZlZGMyNGEwN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlQ0nF+Ufu6N5CUxwNlkWCrrmNd8
XTXs3+1673hQvd0xCs322vN4WEj1s1ZO3cuO2oTv1sus00WTUd7Wh1JS1BGxGrTL
aPaQCxjhzj/m5UCAhhQknZUU4ecF7VCbM2HPIGv5B5Ums1iYUPc4WBCeFm/m6r5w
cPTjIIsK9X4oAkbvtwmpmpR3V4ahp7uwan2dh5NITRMuMeEiBGaPehlende7DrLl
cnaGKj3grRSC0iXnn/FtDGPEKAq7st/a/c97w/9H2exZZ4LdredLBjI6Cay/BGZk
IS8zMnWIMVG4JQByflZbUMP8CNB9fwQw5ErEEfeyGywgS9aB+v92HUV4mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOfg74SGHJUBCxWJYqHi1u3CSgfiMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvNS1EdmhJWWNsUUVMRllsaW9lTFc3Y0pLQi1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrbMA0G
CSqGSIb3DQEBCwUAA4IBAQBAZA5dY0IAsCS6kEwgUzxy5ow8hQTrIzrdAQ1qBuPO
snuVoDjKA3OytBY7R714qPlZSm9m5g+3QkwCAjamjyvfIfFTWBxqWGeLBtaklEHm
/qLvN5mqxylqKPP4kA5E2tWWuZS0Sj5vrslGS91s6qvdGJ9w+hdWAmfksuUXac4v
NZdUHNWLrh10ri3rOttXdZxQ94Pg+g69SsE434nqiFtBmYW2Tq3EU0XFvAIvijB2
rXVKyQqeorRoGuspFoMekq5xGMVNUJ1sMqO04Bk6GaDgzLoNALVChgG2wZUspm9y
0/G5wEQ6lO97ENB89/hf7AjrFiTL1hOfwtRdzT8sEv6z
-----END CERTIFICATE-----
Generated at Tue May 13 20:10:38 2025 by rpki-client