Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8WzDUnU62y8XaTpoVEmnqTQgguo.roa
File: 8WzDUnU62y8XaTpoVEmnqTQgguo.roa (raw, json)
Hash identifier: uFoKBzVP+8pXACzrn+GHITGWjn1e0YnvRf7YleASkiA=
Subject key identifier: F1:6C:C3:52:75:3A:DB:2F:17:69:3A:68:54:49:A7:A9:34:20:82:EA
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018475F7CBD944075AC23C0D8C7DEAEA000E
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8WzDUnU62y8XaTpoVEmnqTQgguo.roa
Signing time: Mon 14 Nov 2022 11:48:04 +0000
ROA not before: Mon 14 Nov 2022 11:48:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 109.122.206.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:f7:cb:d9:44:07:5a:c2:3c:0d:8c:7d:ea:ea:00:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 14 11:48:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f16cc352753adb2f17693a685449a7a9342082ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:0b:91:f1:f1:df:2b:46:b0:13:6e:36:62:
c2:05:7a:a1:ab:04:f8:0b:7a:ec:83:37:79:92:5d:
a0:85:e3:41:c1:6d:12:5a:a7:e2:e0:48:cb:71:0c:
10:0a:d0:8a:9d:77:6b:41:bc:69:5a:bf:0e:a2:9f:
f5:8d:66:f4:f8:73:9f:5a:68:77:e7:07:d6:3b:66:
90:3d:bb:ab:67:5c:85:6e:73:89:29:aa:ac:5b:f5:
6f:02:a4:26:fe:95:c1:94:fa:5d:77:d9:2a:3e:a5:
56:18:5d:ca:a9:b3:b9:36:69:1f:5e:14:63:4a:59:
4e:b8:84:64:1d:5d:a6:2a:29:b9:e3:d6:3e:2b:85:
47:9a:70:9d:39:9c:d6:40:3b:8d:24:cb:ad:b9:a7:
3e:77:b9:10:12:68:e1:51:45:a3:7e:b0:f6:8d:26:
8e:dd:e6:e9:fe:d0:73:59:d5:22:93:95:fd:69:1d:
2d:94:ea:80:b1:e6:6b:c5:ec:13:75:d8:90:bf:81:
74:55:9e:11:1a:c7:9f:a5:9b:96:2c:35:34:e5:17:
84:75:7e:6a:7f:50:da:29:83:67:ae:1b:71:dd:52:
f3:27:d4:d8:3f:22:1e:6c:f5:5a:35:bd:c7:cf:db:
17:22:9e:b7:70:fd:26:ef:59:b0:e0:98:9e:80:8c:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:C3:52:75:3A:DB:2F:17:69:3A:68:54:49:A7:A9:34:20:82:EA
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/8WzDUnU62y8XaTpoVEmnqTQgguo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.202.0/24
109.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
68:28:29:fc:09:b9:13:b4:f9:ce:70:15:4f:f2:1d:d1:60:93:
02:b2:02:9c:20:3c:79:ff:0d:e8:a0:7b:b6:75:37:25:04:d9:
ac:99:b3:c1:89:a2:66:33:94:82:17:00:09:92:37:51:d7:f8:
26:df:13:4d:ae:97:da:0c:c8:2f:eb:3c:3f:71:8d:fd:e6:b7:
36:8f:1b:1c:ca:fa:07:39:42:af:c9:40:ea:c5:e6:b5:c0:93:
51:f3:38:3d:e3:d0:80:f1:83:61:98:62:20:b3:af:af:6c:ae:
a0:95:7b:e7:5d:3d:e5:e5:e0:af:23:95:08:98:32:56:bc:a6:
d3:b1:82:41:a5:2b:d5:5f:54:8e:09:77:b6:02:6a:a9:34:70:
37:bd:e2:b7:e9:2a:60:98:f9:35:6e:fe:6d:ee:e9:57:e7:63:
3d:6e:4f:8f:95:60:c0:a3:cb:19:a7:11:d1:0a:93:9b:06:e6:
db:74:05:9d:a1:42:e6:d1:e1:20:00:b3:51:ec:d1:a0:08:51:
ee:bb:38:12:cc:50:94:e8:cc:32:c0:8f:4a:aa:ef:ef:f7:d8:
ff:c6:0b:38:19:01:8f:f3:0b:fc:21:bc:c5:c3:a4:77:2f:07:
99:41:c6:dc:b8:97:9e:0c:34:a9:56:78:96:e1:c3:8b:d0:cc:
b8:42:6d:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYR198vZRAdawjwNjH3q6gAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMTE0MTE0ODA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTZjYzM1Mjc1M2FkYjJmMTc2OTNhNjg1NDQ5YTdhOTM0MjA4MmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBELkfHx3ytGsBNuNmLCBXqhqwT4
C3rsgzd5kl2gheNBwW0SWqfi4EjLcQwQCtCKnXdrQbxpWr8Oop/1jWb0+HOfWmh3
5wfWO2aQPburZ1yFbnOJKaqsW/VvAqQm/pXBlPpdd9kqPqVWGF3KqbO5NmkfXhRj
SllOuIRkHV2mKim549Y+K4VHmnCdOZzWQDuNJMutuac+d7kQEmjhUUWjfrD2jSaO
3ebp/tBzWdUik5X9aR0tlOqAseZrxewTddiQv4F0VZ4RGsefpZuWLDU05ReEdX5q
f1DaKYNnrhtx3VLzJ9TYPyIebPVaNb3Hz9sXIp63cP0m71mw4JiegIyTAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPFsw1J1OtsvF2k6aFRJp6k0IILqMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvOFd6RFVuVTYyeThYYVRwb1ZFbW5xVFFnZ3VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXrKAwQA
bXrOMA0GCSqGSIb3DQEBCwUAA4IBAQBoKCn8CbkTtPnOcBVP8h3RYJMCsgKcIDx5
/w3ooHu2dTclBNmsmbPBiaJmM5SCFwAJkjdR1/gm3xNNrpfaDMgv6zw/cY395rc2
jxscyvoHOUKvyUDqxea1wJNR8zg949CA8YNhmGIgs6+vbK6glXvnXT3l5eCvI5UI
mDJWvKbTsYJBpSvVX1SOCXe2AmqpNHA3veK36SpgmPk1bv5t7ulX52M9bk+PlWDA
o8sZpxHRCpObBubbdAWdoULm0eEgALNR7NGgCFHuuzgSzFCU6MwywI9Kqu/v99j/
xgs4GQGP8wv8IbzFw6R3LweZQcbcuJeeDDSpVniW4cOL0My4Qm3+
-----END CERTIFICATE-----
Generated at Tue May 13 21:45:11 2025 by rpki-client