Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HIS4IoxiybAOAAqMtiXGqTgVFu8.roa
File: HIS4IoxiybAOAAqMtiXGqTgVFu8.roa (raw, json)
Hash identifier: QQdAyFFctVn/zKFQ+vfV5TNl63jR3hFch5I6zgBudig=
Subject key identifier: 1C:84:B8:22:8C:62:C9:B0:0E:00:0A:8C:B6:25:C6:A9:38:15:16:EF
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018215733FD9B2E4FAB49A114787B0F1689D
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HIS4IoxiybAOAAqMtiXGqTgVFu8.roa
Signing time: Tue 19 Jul 2022 07:54:10 +0000
ROA not before: Tue 19 Jul 2022 07:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 109.122.196.0/22 maxlen: 24
109.122.204.0/23 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:73:3f:d9:b2:e4:fa:b4:9a:11:47:87:b0:f1:68:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jul 19 07:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c84b8228c62c9b00e000a8cb625c6a9381516ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:c2:25:35:56:af:1b:84:59:6e:bd:97:0d:
5a:02:6f:32:0e:c8:59:7c:12:4a:17:17:3c:b6:36:
1c:79:cf:e1:63:be:a7:83:8d:b9:93:73:19:0e:2a:
cf:d8:03:b5:07:7e:7f:f5:40:61:43:9e:12:90:ec:
01:c7:c8:28:a8:34:80:55:9d:af:e7:3a:ff:f8:9a:
43:4f:c8:bd:05:56:4a:b5:c4:e6:b0:70:04:50:01:
d9:20:51:1a:2e:aa:6a:de:f9:57:86:c3:6f:69:d3:
25:49:59:4f:48:f5:53:38:13:d6:be:2f:3e:5f:b4:
55:3b:69:91:3b:0d:28:5a:6f:92:3f:6e:dc:6f:16:
5d:64:8d:61:73:22:ba:ad:7f:b2:1c:8d:35:bf:71:
9c:34:8e:42:5a:71:82:75:e1:f6:33:21:71:e7:07:
49:58:d7:86:1f:4a:5d:02:34:c2:80:14:16:09:62:
3a:9c:95:41:15:6e:cd:70:88:f4:a3:27:6f:8f:9a:
c0:ee:6e:73:4c:0a:af:f8:92:a5:0c:ee:7d:21:66:
48:91:4d:7f:57:a8:b6:66:e7:89:9b:ae:3d:8f:cd:
0b:e0:b8:f2:80:e1:0a:a3:ba:12:f1:29:40:4d:ac:
de:5c:e4:61:a3:a5:ee:3a:fa:55:17:f4:7c:c7:15:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:84:B8:22:8C:62:C9:B0:0E:00:0A:8C:B6:25:C6:A9:38:15:16:EF
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HIS4IoxiybAOAAqMtiXGqTgVFu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/22
109.122.204.0/23
109.122.210.0/24
109.122.214.0/23
Signature Algorithm: sha256WithRSAEncryption
11:9d:cf:59:55:6e:6a:9c:99:fb:b8:1e:04:39:48:e1:6b:17:
42:7f:eb:e2:3c:05:f9:e1:5e:f1:14:20:3b:7d:6b:73:d9:c4:
64:0a:81:c4:f8:5b:e7:4e:5e:cd:1d:b5:8a:66:6b:23:e9:0e:
d7:6f:1c:31:92:ed:c5:bf:9e:b2:3b:06:6a:c9:07:06:73:39:
58:74:a4:37:ba:3a:78:6e:57:49:11:dd:4c:7e:66:dc:1a:15:
ed:f8:95:69:8b:61:9a:78:71:db:c9:74:7c:67:f3:99:64:35:
0c:0a:4a:fd:53:d4:6f:39:e4:02:97:73:91:02:f4:82:06:76:
a3:74:67:16:84:67:00:f1:ac:47:49:6b:16:df:9f:3e:eb:ee:
39:f5:4e:b5:9e:92:ae:b0:b6:7b:a9:9a:c5:16:87:a6:fe:13:
25:c3:68:b9:54:65:6b:10:d3:8c:e0:d5:ad:e8:ed:84:16:91:
63:d0:77:44:eb:0c:16:b8:33:74:ee:86:84:21:9a:72:ef:b3:
33:83:85:68:09:e5:f9:2d:ac:7c:0d:83:d6:71:e2:f9:86:5a:
44:6c:54:80:2f:14:ad:d1:b9:ee:11:2f:bf:d5:3e:44:61:99:
ca:af:7b:31:31:5d:4c:80:e3:b6:be:a3:5c:9b:00:29:27:6e:
69:04:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:31:10 2025 by rpki-client