Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/7wdy4b21wDzwg1WLD_axwWSMP_A.roa
File: 7wdy4b21wDzwg1WLD_axwWSMP_A.roa (raw, json)
Hash identifier: mVVBVzEB4bWjtgm1waF2MazNUwu0mRT1JdPPq1tw4Ms=
Subject key identifier: EF:07:72:E1:BD:B5:C0:3C:F0:83:55:8B:0F:F6:B1:C1:64:8C:3F:F0
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183C8E113F7EC2C62AB7D823E008FBF03B1
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/7wdy4b21wDzwg1WLD_axwWSMP_A.roa
Signing time: Tue 11 Oct 2022 21:08:57 +0000
ROA not before: Tue 11 Oct 2022 21:08:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.194.0/24 maxlen: 24
109.122.206.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:e1:13:f7:ec:2c:62:ab:7d:82:3e:00:8f:bf:03:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 11 21:08:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef0772e1bdb5c03cf083558b0ff6b1c1648c3ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:5b:9a:af:f7:a8:1c:62:e1:50:59:e5:dc:
0a:14:5c:15:a8:50:72:62:56:db:68:4c:11:5e:df:
5b:5f:ef:44:af:53:4d:c2:3c:bb:d0:88:2d:dd:ca:
ba:ec:47:7c:b3:b5:c4:9a:c7:cd:65:85:6c:78:f3:
8e:6a:b2:ff:83:1a:3a:94:13:9e:f3:03:fa:f3:a1:
6c:c0:e8:89:28:73:96:6d:78:c7:b1:82:60:c6:1f:
4f:13:bf:25:d7:9f:10:18:d5:17:34:23:e0:ec:8a:
49:c3:2e:62:4a:16:fb:59:ec:ac:c5:e3:64:03:1c:
09:2d:db:e9:13:fe:dd:49:c8:1c:0a:7d:5f:0b:3d:
cf:c3:c0:6e:c5:26:80:8a:47:ed:ac:53:73:38:16:
28:c6:9b:15:f4:ec:db:e2:91:91:5a:37:18:90:14:
43:f8:64:be:04:23:e7:1a:52:3d:d9:9b:d3:96:9d:
d9:dc:5a:04:7c:4d:4f:1e:0f:8e:1c:74:33:30:bd:
e6:8f:ff:4f:8e:6b:26:4d:ca:c9:29:9a:21:b3:f3:
ae:62:d4:2b:7a:51:55:69:cf:41:74:35:ca:41:a9:
8b:97:84:2e:90:a0:d9:63:4f:d3:60:40:0e:c1:ad:
96:0f:90:3f:5c:4a:1c:da:08:61:ae:9a:bd:65:6b:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:72:E1:BD:B5:C0:3C:F0:83:55:8B:0F:F6:B1:C1:64:8C:3F:F0
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/7wdy4b21wDzwg1WLD_axwWSMP_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
109.122.206.0/24
109.122.208.0/24
109.122.215.0/24
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
01:bd:e7:17:26:39:af:8c:88:e1:8f:81:06:0a:e9:6a:3c:76:
2a:62:32:94:37:5c:d6:d5:a6:60:ce:31:ef:c0:d5:d9:70:25:
02:23:cf:15:71:b5:5b:cc:94:2a:14:b4:54:25:87:e3:ec:0f:
43:f7:49:84:a3:f3:b8:e0:56:ed:d9:7a:a7:c9:2c:d6:b0:39:
68:4e:59:97:6d:b9:ec:82:88:e3:4d:fc:b8:22:3c:23:8b:8f:
57:3c:2f:60:f7:24:ae:c1:8d:b9:3a:58:6b:69:68:24:b8:ca:
a4:b1:6c:8a:95:c3:42:55:8e:cc:43:28:20:a3:2f:a0:46:29:
88:9e:06:08:24:53:d5:14:95:79:c9:f1:6f:8a:d5:15:4d:26:
6f:3e:6f:74:a7:0d:b0:f4:5f:43:09:bc:c9:27:10:f8:ed:7d:
03:3b:4c:d5:1b:77:59:a2:b9:94:d1:00:ab:6b:27:7f:67:bb:
32:31:c7:b2:48:a6:7e:18:41:08:81:b6:a9:39:c0:ef:11:89:
50:07:d1:dc:5e:bb:80:55:5c:72:e3:1e:1d:13:b5:06:d8:98:
4c:52:d8:2d:48:3d:77:5b:40:95:e5:2c:c6:9c:c9:03:74:e6:
06:2f:6d:35:b7:8c:53:cd:17:f1:1c:2d:f2:01:52:f7:c5:3b:
4e:3d:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:37:31 2025 by rpki-client