Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HoIQE7n5mPFrBgBUHpIWsg1woGg.roa
File: HoIQE7n5mPFrBgBUHpIWsg1woGg.roa (raw, json)
Hash identifier: NrPh56PzlQAail+0UCfxEPOQ8ddyerds8KUOiYJ1OCo=
Subject key identifier: 1E:82:10:13:B9:F9:98:F1:6B:06:00:54:1E:92:16:B2:0D:70:A0:68
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018707F288A90973554661C2A7532535F60C
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HoIQE7n5mPFrBgBUHpIWsg1woGg.roa
Signing time: Wed 22 Mar 2023 06:12:27 +0000
ROA not before: Wed 22 Mar 2023 06:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 109.122.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:f2:88:a9:09:73:55:46:61:c2:a7:53:25:35:f6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 22 06:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e821013b9f998f16b0600541e9216b20d70a068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:65:42:d5:cf:70:09:ce:31:32:52:51:85:
9e:b8:fb:33:2c:e9:30:6c:05:d0:81:a8:98:dc:85:
d8:ba:9d:cf:e0:13:84:f1:a5:27:e0:09:1c:8f:1c:
2c:4d:c4:29:94:9e:fc:b2:88:df:ea:b4:82:67:83:
dd:e6:99:de:a9:21:8e:2a:2b:51:7f:c3:36:4c:d1:
fe:8f:75:6d:30:34:98:11:3a:1f:5b:49:2a:ef:8b:
cd:0b:d5:e9:48:08:60:86:b4:12:68:df:1a:54:e3:
71:3d:86:17:ba:1f:71:e7:f2:6e:da:56:88:e6:2a:
81:59:43:06:62:3b:04:8b:b1:44:d9:f7:9d:1e:01:
96:d6:2e:7e:86:7f:47:6f:a1:35:e4:83:0c:c8:41:
1c:f1:03:92:d7:f4:31:3e:f8:65:56:e5:cb:ea:fe:
e2:d2:6a:ff:1d:45:91:ac:e6:ec:0a:b8:a2:e9:62:
ea:35:af:66:65:10:d3:09:f0:76:a2:12:ce:28:49:
45:8f:42:80:0a:a9:24:24:7e:61:a7:f7:0c:21:1a:
45:ac:96:1d:c1:8a:aa:ee:f2:19:7d:7e:cc:3b:05:
04:10:40:b5:8a:94:62:21:a5:01:4d:8f:96:9e:47:
bb:1e:dc:3b:4a:26:f6:15:f7:a8:8b:ca:77:25:e9:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:82:10:13:B9:F9:98:F1:6B:06:00:54:1E:92:16:B2:0D:70:A0:68
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HoIQE7n5mPFrBgBUHpIWsg1woGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:79:5e:ff:0b:2d:c3:1b:15:96:fe:cc:fb:0d:d0:e2:9b:b5:
8e:f4:99:5a:89:36:2d:6b:aa:14:51:22:a8:20:08:c7:05:bd:
de:ee:2e:0f:d2:1f:26:55:41:61:ea:50:a7:be:55:a2:08:d7:
08:6d:a7:1f:95:50:6b:93:9c:73:f6:7e:12:b6:62:94:3a:20:
7f:68:88:08:02:56:83:92:69:f1:d0:9e:f0:6b:04:42:16:9a:
b8:91:b4:58:c1:c0:f2:cd:86:34:f2:b4:63:7a:3e:50:ac:b7:
d1:49:33:fe:dd:53:cc:bc:38:50:ab:df:12:8e:57:68:c0:76:
87:c3:d5:e0:e8:04:0e:da:80:a4:41:8f:3d:7f:d0:45:b0:38:
24:35:c0:f2:20:9d:59:48:3a:ef:a8:ac:f6:23:1f:bd:e5:43:
24:a6:78:16:4f:b9:57:1d:d6:53:7c:c2:0a:67:18:7a:83:6e:
5e:1f:b7:a8:25:68:fb:93:07:5c:5f:98:5d:d8:dd:4e:f7:1b:
39:ab:77:33:ac:62:8f:90:14:4f:51:44:a6:98:1e:0e:2a:f5:
0e:b1:9d:1a:72:1a:02:ee:4d:ee:91:a9:48:f3:10:16:86:aa:
dd:a6:7e:ae:39:70:9b:3d:5b:ec:a3:f1:f6:50:e3:e9:5a:3f:
79:4b:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:18 2025 by rpki-client