Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8SqWRLYRJSRfVXAtdyshN_qxkA8.roa
File: 8SqWRLYRJSRfVXAtdyshN_qxkA8.roa (raw, json)
Hash identifier: D0KxWgtcAQMM8VcYCaibH5CrCawY22maYuSqd4GZgKQ=
Subject key identifier: F1:2A:96:44:B6:11:25:24:5F:55:70:2D:77:2B:21:37:FA:B1:90:0F
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01848B78EB098440F8D415D4DDF80A5CC0EA
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8SqWRLYRJSRfVXAtdyshN_qxkA8.roa
Signing time: Fri 18 Nov 2022 16:01:08 +0000
ROA not before: Fri 18 Nov 2022 16:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 109.122.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:78:eb:09:84:40:f8:d4:15:d4:dd:f8:0a:5c:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 18 16:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f12a9644b61125245f55702d772b2137fab1900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:eb:60:8e:b9:d7:7f:24:15:fe:35:35:0c:
ca:c5:1a:ea:e6:b6:a2:ca:48:a4:ee:4b:bd:f6:09:
c5:1b:16:bd:0b:67:34:2b:f7:a1:b6:f5:6e:02:46:
01:8c:50:07:fe:ad:f0:b7:1d:08:32:da:00:ef:7c:
4a:19:e6:85:5b:0a:58:67:f4:98:d8:ba:ab:fa:b9:
7c:25:95:8c:73:d7:14:60:17:12:c6:1a:c9:86:c2:
f7:79:84:d6:a9:66:70:69:f8:14:08:7b:fd:00:70:
38:8b:e6:76:27:b6:37:87:4c:f7:5e:47:dd:3c:ec:
2b:6c:11:7c:f5:24:35:b8:54:7e:b6:78:97:1a:4b:
a9:13:a7:8e:ef:4e:33:c3:3d:93:69:19:69:9b:2d:
21:e0:22:09:1c:c2:b8:79:74:cc:36:a0:c6:44:76:
03:7e:82:90:b8:88:25:9a:46:36:cf:09:60:4b:29:
f5:8f:34:70:8d:6c:eb:a3:40:0e:2b:12:ef:9d:8f:
f0:2d:4c:04:21:3e:5f:f1:c0:3d:05:b2:1a:8e:67:
6d:9c:23:db:00:16:15:52:f6:6b:be:97:ed:81:7c:
ed:c2:1c:83:b2:a0:8e:b7:4b:5b:c6:e8:c9:20:ed:
c0:cb:a6:ab:7f:48:e5:d8:8f:4f:e2:f5:d7:ab:59:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:96:44:B6:11:25:24:5F:55:70:2D:77:2B:21:37:FA:B1:90:0F
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8SqWRLYRJSRfVXAtdyshN_qxkA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.219.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ec:b1:e7:fe:cd:9a:c0:58:b6:7c:cf:70:4b:9c:6a:1b:db:
58:59:b9:ac:f6:e6:d1:07:71:90:f8:ea:bc:94:87:21:d0:e7:
07:93:50:ce:71:5a:8e:fb:0d:f5:16:5f:af:55:49:b8:f4:ef:
a6:4d:bd:29:e4:2b:d6:7d:5a:44:89:8a:0a:58:d1:0d:87:ea:
15:d2:fa:62:e8:fc:ca:c5:12:f1:c5:a7:4f:63:27:45:0f:be:
1f:12:2f:ea:6c:9a:91:85:e6:5e:38:b2:54:eb:8a:f8:60:51:
86:83:1c:2c:c8:54:82:c8:a0:81:8b:bd:9d:9a:44:0a:58:76:
4b:1e:7b:19:68:c5:08:f5:09:b7:75:9e:38:15:23:cc:03:91:
bc:c3:0c:22:a6:cf:6f:00:09:17:ba:8a:60:ea:49:68:23:d2:
02:ad:69:bf:1e:f5:77:9a:76:4d:6a:3c:4b:3a:38:b5:99:cf:
37:43:c6:28:ba:98:c6:39:07:b2:d7:98:e3:3c:b2:eb:28:d4:
8b:fd:4e:65:42:9f:2f:58:0d:27:47:8c:ab:d5:72:17:85:95:
e2:e2:04:17:37:cc:a6:4d:ac:73:d4:4f:97:5a:9f:fa:9b:90:
79:b0:2d:1d:47:3d:6c:2b:03:b0:b9:48:06:1f:9e:3b:9b:f2:
7f:c4:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:28:43 2025 by rpki-client