Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BZ79QsYgj0vU-XwGAN8Emd-Z7Kk.roa
File: BZ79QsYgj0vU-XwGAN8Emd-Z7Kk.roa (raw, json)
Hash identifier: ICALjw1xwCngbAAukeogoez4AiLtL7ZMPT6CJHLgf6o=
Subject key identifier: 05:9E:FD:42:C6:20:8F:4B:D4:F9:7C:06:00:DF:04:99:DF:99:EC:A9
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018229A396FE5BE9DAD6A531A7771B282D3C
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BZ79QsYgj0vU-XwGAN8Emd-Z7Kk.roa
Signing time: Sat 23 Jul 2022 05:59:23 +0000
ROA not before: Sat 23 Jul 2022 05:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
109.122.206.0/23 maxlen: 24
109.122.200.0/22 maxlen: 24
109.122.212.0/23 maxlen: 24
109.122.209.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.219.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:29:a3:96:fe:5b:e9:da:d6:a5:31:a7:77:1b:28:2d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jul 23 05:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=059efd42c6208f4bd4f97c0600df0499df99eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:b4:2e:26:ba:c3:de:a9:a5:f0:2a:24:de:
37:f3:26:10:ac:6d:92:41:a8:fe:4a:47:0e:35:c8:
4f:e7:c9:89:3e:9e:77:10:76:3f:eb:5f:92:7d:2a:
81:72:af:8e:95:8d:fc:57:8e:1d:af:1d:41:72:54:
4f:46:f8:07:7e:61:93:82:dc:cf:45:eb:3b:17:ff:
bf:bb:1f:5d:86:3d:fd:90:d6:19:03:15:34:cf:31:
ff:08:4f:86:62:e0:3e:b0:0e:57:81:7f:27:bd:e4:
22:77:cd:3b:e7:1c:de:5b:ff:dd:e3:b5:bf:aa:6e:
7b:94:47:93:d2:54:17:4b:f1:57:a0:f1:12:59:fe:
a2:99:4a:70:64:b9:6d:5f:60:7c:1e:af:81:13:39:
4b:9a:ab:d3:96:e9:a9:0c:24:48:9f:be:0a:67:58:
23:46:1e:b6:35:78:78:bf:89:1c:47:3a:cd:d7:2d:
2e:52:10:87:5d:c6:a2:b0:b1:46:23:27:62:70:e0:
a6:21:08:0d:c0:c5:37:1c:8a:d8:00:f2:e6:9b:96:
a1:1f:f8:2f:f0:f9:99:b8:a5:bb:85:b5:2c:3d:5a:
bc:f8:ac:07:bb:68:92:38:46:c5:9a:29:ad:1d:a3:
52:ee:2a:19:da:7f:4b:ba:09:4f:2c:68:cb:92:05:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9E:FD:42:C6:20:8F:4B:D4:F9:7C:06:00:DF:04:99:DF:99:EC:A9
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/BZ79QsYgj0vU-XwGAN8Emd-Z7Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.205.0-109.122.207.255
109.122.209.0/24
109.122.211.0-109.122.213.255
109.122.216.0/24
109.122.218.0/23
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:92:31:22:3d:41:5f:9f:1b:da:40:f8:1c:de:7a:1d:0c:f8:
ae:96:76:6a:be:2d:35:77:fa:8b:c2:3c:6c:ef:33:e9:e3:7c:
1b:59:30:d8:e8:70:0e:95:c4:d3:62:9f:01:60:e6:0e:26:ca:
14:a9:6b:bb:52:68:38:12:bd:2d:ab:c3:95:ce:a0:d2:ea:84:
85:66:dc:d2:c8:0a:93:a2:34:11:48:22:32:6d:2d:64:db:c9:
c1:eb:83:f5:80:37:f1:bf:19:64:43:bb:5d:d4:ac:08:91:69:
4b:06:d1:55:16:2a:10:17:86:6d:90:4d:5f:46:60:27:7a:24:
70:45:43:4a:41:ab:49:4c:dc:f0:f6:a2:b8:4d:e3:ea:32:de:
e2:2f:8a:61:17:37:7f:cf:9e:85:9f:e7:84:f9:c2:7f:d4:4c:
48:21:ec:9d:b2:bf:5e:ba:60:69:f2:90:db:c8:6e:f6:0c:10:
a1:c9:a8:2c:f7:10:f5:fa:71:3f:10:39:2c:62:b7:99:a6:b8:
9c:27:ec:a1:d3:f6:bc:0b:26:71:16:9e:56:b5:46:84:82:58:
c0:ea:c1:1c:17:70:39:17:45:ba:64:67:fb:84:7d:70:01:11:
9d:83:b2:16:4a:fb:36:bd:18:74:7a:6c:e4:90:12:22:46:d2:
66:49:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:34:03 2025 by rpki-client