Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/H7sV8IIFd8MBfK-RfkBKbKCwGwY.roa
File: H7sV8IIFd8MBfK-RfkBKbKCwGwY.roa (raw, json)
Hash identifier: maGCBjRKIxnwKzZu7Z+tdFWI7HFcVcWqJRN3dCMJ1cg=
Subject key identifier: 1F:BB:15:F0:82:05:77:C3:01:7C:AF:91:7E:40:4A:6C:A0:B0:1B:06
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185E7AA49BEE644E1CA14FD039CABC9AB61
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/H7sV8IIFd8MBfK-RfkBKbKCwGwY.roa
Signing time: Wed 25 Jan 2023 06:42:55 +0000
ROA not before: Wed 25 Jan 2023 06:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 109.122.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:aa:49:be:e6:44:e1:ca:14:fd:03:9c:ab:c9:ab:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 25 06:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fbb15f0820577c3017caf917e404a6ca0b01b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2b:96:4e:87:12:9f:98:ad:ed:fc:90:7c:c7:
4c:08:fe:06:bd:d2:a9:27:80:ed:51:72:22:7c:c1:
d7:e0:e7:9c:51:eb:0b:86:dc:4a:98:6b:ef:52:a7:
8c:80:ef:63:30:95:19:9e:4f:a0:56:0b:76:9d:80:
db:56:ff:39:af:8f:b7:e5:69:38:87:19:e7:ef:7c:
ec:f6:7e:ae:20:72:5e:7d:cd:56:94:a2:19:a2:09:
a7:b9:9e:e4:51:17:6a:fc:e8:72:6b:66:11:94:7b:
5e:5a:08:ba:3e:c6:3d:b5:c5:5c:9e:64:75:32:71:
b4:c7:91:c0:bc:20:c8:10:74:e3:af:97:79:77:7b:
e6:22:a0:be:d3:ae:4f:c7:ce:7c:4b:67:19:ce:94:
49:cd:b7:4b:9d:4e:e6:97:e1:32:3f:4c:ce:1c:4e:
82:d3:af:65:2a:fb:3e:2d:e5:35:ff:50:22:89:b0:
88:ed:b3:fc:15:0c:58:56:e6:04:40:32:ea:52:06:
8e:93:a6:02:33:6b:1d:be:5b:7f:db:bb:40:f1:2f:
fd:c1:e0:72:48:5a:62:e8:60:70:af:86:a9:9d:73:
22:ea:97:9b:c3:0e:22:a9:d7:03:57:3e:82:f6:cc:
4e:63:d3:8e:b3:aa:35:90:cf:42:75:82:42:15:52:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BB:15:F0:82:05:77:C3:01:7C:AF:91:7E:40:4A:6C:A0:B0:1B:06
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/H7sV8IIFd8MBfK-RfkBKbKCwGwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:eb:f7:32:78:e6:1d:77:f4:bb:a9:44:24:fd:4a:4c:a2:2a:
b0:ee:27:ce:71:0d:ce:e5:ec:72:87:2b:7b:c8:34:f0:7f:a0:
07:b5:5e:3e:b2:b7:45:94:bd:61:1d:8e:7b:c4:ba:0e:69:4f:
ad:59:62:51:5d:05:a7:8d:f1:7d:a5:a2:a8:8a:ba:dc:fa:5d:
29:bb:d9:65:16:eb:fd:b9:ad:0b:cf:63:1d:1e:19:75:4a:c3:
8a:40:97:82:ca:36:ef:e4:b3:08:0e:91:38:a7:8f:bb:65:37:
c5:cc:95:93:b5:fc:ef:11:74:c5:e4:22:ef:29:a5:bb:ca:dd:
54:f7:32:00:20:69:90:01:de:78:77:ff:93:db:47:d9:ca:10:
e8:7e:e7:4e:32:e0:0c:82:b8:0e:4b:f8:5f:36:07:64:35:29:
3a:2b:b9:77:64:62:f6:8c:ad:cd:11:d8:fd:f8:fe:26:26:24:
ff:33:37:6c:3c:14:46:94:26:89:f1:d9:80:5c:c4:39:0f:6f:
eb:b8:a0:9b:1c:bc:28:08:ef:e9:2f:53:50:dc:28:5d:0e:6f:
5a:1e:d2:66:2b:e6:93:e7:2c:36:16:ad:fd:53:25:3b:ea:97:
0d:a9:49:70:51:fe:2d:ea:5b:d4:71:ea:bb:be:0f:c4:ae:4f:
53:55:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:11:39 2025 by rpki-client