Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HyeozrN9-ehl5bco10-8E3ix_NY.roa
File: HyeozrN9-ehl5bco10-8E3ix_NY.roa (raw, json)
Hash identifier: kwaP8y85e/hnMRtucqHiZ9aruGF7n1tt2NDHySlgsoo=
Subject key identifier: 1F:27:A8:CE:B3:7D:F9:E8:65:E5:B7:28:D7:4F:BC:13:78:B1:FC:D6
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018691D27816E1BCECBB9AFAA60B9BF629AC
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HyeozrN9-ehl5bco10-8E3ix_NY.roa
Signing time: Mon 27 Feb 2023 07:42:15 +0000
ROA not before: Mon 27 Feb 2023 07:42:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 109.122.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:d2:78:16:e1:bc:ec:bb:9a:fa:a6:0b:9b:f6:29:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Feb 27 07:42:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f27a8ceb37df9e865e5b728d74fbc1378b1fcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:ce:f0:1e:3a:99:66:f0:bf:1a:7f:92:62:
76:b6:77:93:d4:2c:b3:ab:1c:03:ad:75:8c:cd:e4:
9c:ac:50:db:26:75:62:55:52:12:3a:62:a7:b5:bd:
70:af:4f:be:9d:2d:6c:f9:e6:b5:65:2e:f2:0a:c5:
1f:d1:e0:ea:32:9a:d7:8f:af:6a:8c:f2:6f:9b:ad:
6d:49:a7:cb:0f:9d:31:bd:cc:e6:f1:0d:4a:60:ca:
44:3f:11:42:a1:9c:1f:07:ee:3b:d9:e6:ac:f6:8b:
e6:a4:eb:9a:96:3f:8f:7c:14:1f:26:2b:7e:89:f5:
fb:5f:37:bb:eb:1e:13:73:48:b2:7f:01:6b:a0:37:
73:cf:8f:6d:a5:67:de:41:b1:1c:dc:2c:d6:11:3b:
b2:dc:99:24:d5:fe:a1:df:dd:30:4a:23:6d:22:61:
7b:e9:4f:d5:a1:b4:e1:36:f0:0c:98:e4:57:55:fc:
4c:52:50:a6:0e:a7:88:74:e9:96:4a:30:fb:1c:56:
bb:6b:41:d3:2f:bd:7a:ad:f6:7f:2d:70:01:5a:b4:
40:a7:12:8d:8a:7d:9f:c2:40:67:f0:de:8e:72:7e:
15:d4:3f:09:ef:5d:55:b3:d5:09:d5:48:66:bc:f9:
17:27:70:d8:9e:91:94:8b:30:28:f4:64:dc:8e:16:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:A8:CE:B3:7D:F9:E8:65:E5:B7:28:D7:4F:BC:13:78:B1:FC:D6
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HyeozrN9-ehl5bco10-8E3ix_NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:57:00:11:6a:fb:38:53:0a:4d:d1:19:25:08:3c:e5:aa:93:
8b:6e:72:60:52:96:e6:a5:0a:aa:79:b4:dd:5c:d1:81:2d:b6:
cf:2b:a0:12:bd:52:b6:9d:bd:25:e8:9c:15:72:4f:e1:c5:29:
42:94:3d:ec:26:02:ae:b7:ad:32:57:9b:18:38:90:ea:f0:e4:
b6:05:59:01:92:ce:24:a4:17:98:62:5c:f3:8e:31:9f:45:6d:
ca:9f:0e:9b:f4:eb:84:36:5a:4d:95:26:bb:b0:64:97:c3:91:
13:aa:15:95:57:cb:0e:a0:74:8d:9d:04:2e:54:87:2c:ab:83:
45:bc:a5:67:15:90:88:63:0b:db:77:49:7e:ce:99:e8:9d:aa:
2a:d7:97:61:34:7c:7e:50:90:55:ec:c0:b0:c6:3f:2b:bc:42:
75:0c:3f:2f:4d:6c:9c:32:ff:3c:f7:fc:ce:b1:ed:ec:1b:45:
b8:4f:0a:12:74:70:15:c3:01:6c:cf:83:8b:13:63:5d:a5:ad:
47:66:09:39:b7:66:44:9a:17:78:b0:91:be:10:da:20:95:ef:
e9:46:d7:34:28:9e:b0:b6:e0:1a:83:a3:7d:0b:71:3b:c9:31:
cf:b1:21:6a:e4:6d:fc:4c:a7:fa:0d:cf:79:8c:15:c9:7a:8c:
16:fb:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:17:03 2025 by rpki-client