Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/66TL6omYUoOM2YeidYcLcniYTFI.roa
File: 66TL6omYUoOM2YeidYcLcniYTFI.roa (raw, json)
Hash identifier: p4NzuGPPVMI/Oac+VUUBVyBDmycegAX6W/JIINcUPNc=
Subject key identifier: EB:A4:CB:EA:89:98:52:83:8C:D9:87:A2:75:87:0B:72:78:98:4C:52
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06541D9D
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/66TL6omYUoOM2YeidYcLcniYTFI.roa
Signing time: Thu 10 Mar 2022 13:49:39 +0000
ROA not before: Thu 10 Mar 2022 13:49:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 185.207.4.0/22 maxlen: 24
109.122.206.0/23 maxlen: 23
109.122.211.0/24 maxlen: 24
109.122.212.0/23 maxlen: 23
109.122.216.0/24 maxlen: 24
109.122.218.0/23 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106175901 (0x6541d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 10 13:49:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eba4cbea899852838cd987a275870b7278984c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:d3:30:23:64:a3:58:93:13:06:f5:91:11:
f4:b1:ad:7b:29:b9:d7:5b:23:23:11:fc:c5:24:45:
ce:4f:9b:62:58:d8:5d:63:92:48:26:94:3c:bb:bd:
cb:4e:20:87:f5:cc:cc:8c:c7:87:7b:63:62:fa:64:
f3:55:3b:10:ca:03:25:60:9d:ab:9d:03:3c:d2:93:
98:bb:f9:05:12:03:5b:b5:2c:a2:af:1d:41:a9:e0:
8b:24:47:b4:8f:2e:7d:00:b6:6e:04:f3:bc:96:c5:
ba:56:6b:86:0f:61:52:4a:08:0f:3c:61:ec:fd:b0:
55:09:c2:fa:25:af:59:79:d7:b8:9c:e1:4e:a9:6f:
8b:c5:d4:69:3e:68:47:29:16:ae:1c:58:39:13:84:
f6:fd:ca:d0:e3:47:b4:74:71:08:77:53:72:5b:2a:
05:78:92:8d:d0:5e:54:73:79:d9:a6:31:17:cb:48:
59:38:f1:23:a5:08:4c:e6:6f:51:d0:0f:66:96:7c:
11:4d:53:b1:88:be:7f:74:3e:c5:3f:50:23:a2:ab:
c0:2b:37:3b:33:c6:90:c2:c2:67:71:aa:a9:38:9f:
92:0e:49:ef:10:8a:8f:d2:5f:c0:a6:38:b7:8b:12:
6d:6e:1d:e7:8f:8a:4d:f4:a7:ce:41:47:a4:10:30:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:CB:EA:89:98:52:83:8C:D9:87:A2:75:87:0B:72:78:98:4C:52
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/66TL6omYUoOM2YeidYcLcniYTFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.206.0/23
109.122.211.0-109.122.213.255
109.122.216.0/24
109.122.218.0/23
109.122.223.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:bf:5f:2c:61:16:df:5b:dc:68:14:99:b0:52:b8:c7:aa:3c:
8b:78:20:91:ad:58:da:f7:8a:73:5c:9a:d0:8b:bf:46:16:14:
cf:ed:f4:53:29:0a:e0:2c:02:e5:9f:1b:0c:52:3c:6e:5d:6d:
b3:a8:58:1f:d7:45:10:47:91:3e:ac:35:3b:a2:a3:47:cf:c2:
72:f1:17:cf:14:7e:0f:d7:b9:9e:6f:30:28:78:52:6a:10:6d:
ed:d3:62:5c:04:bc:a4:63:71:3b:e9:a1:ca:9c:28:c1:4a:a7:
61:a4:84:5a:7e:81:df:c5:c7:f1:c1:63:90:6c:92:47:e1:dd:
2e:ea:a7:e2:1d:e2:e2:a7:3b:bb:fd:44:ef:3e:f0:45:24:71:
16:58:d9:6a:25:ce:fc:b8:da:a0:10:54:33:fe:48:44:f7:8f:
ae:db:c2:0e:31:dd:03:4e:f7:f1:21:7d:65:15:cc:44:e9:a4:
32:38:ab:49:ae:d0:91:0d:b4:07:5a:36:79:e9:0c:3b:ca:b1:
21:d9:22:ce:4f:44:0b:56:40:79:00:d1:91:45:d1:4a:3c:c6:
e8:19:bd:27:98:6f:21:11:5a:50:30:6e:a7:00:1e:ab:d8:9b:
46:0b:95:73:be:30:f3:1f:67:06:ba:fe:be:c3:a0:87:9d:36:
37:59:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:06:02 2025 by rpki-client