Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/NJW8SdAKQEjOqQAg5gZa6ZENFFE.roa
File: NJW8SdAKQEjOqQAg5gZa6ZENFFE.roa (raw, json)
Hash identifier: rKPSx+a8izSDPEX7GigcB/BD/Uqw2H/ptVnliO/0Qlg=
Subject key identifier: 34:95:BC:49:D0:0A:40:48:CE:A9:00:20:E6:06:5A:E9:91:0D:14:51
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184714ED86A687BF41D7DC0066C98BA946F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/NJW8SdAKQEjOqQAg5gZa6ZENFFE.roa
Signing time: Sun 13 Nov 2022 14:05:03 +0000
ROA not before: Sun 13 Nov 2022 14:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.194.0/24 maxlen: 24
109.122.206.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:71:4e:d8:6a:68:7b:f4:1d:7d:c0:06:6c:98:ba:94:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 13 14:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3495bc49d00a4048cea90020e6065ae9910d1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:00:91:14:06:30:45:14:c0:4b:1c:04:f2:
f5:bf:3f:cf:15:b5:65:af:df:78:a4:69:7c:49:ab:
c6:94:46:49:10:18:da:9b:7c:c0:65:1e:87:12:ed:
8a:3f:62:dc:e4:13:a5:21:dd:c6:46:ae:7f:c8:a9:
43:0a:04:04:2a:08:88:f2:5e:03:3e:84:95:fd:f2:
c9:2b:88:fa:82:53:1a:ec:ef:ce:73:ac:b8:98:ce:
87:12:d3:c0:93:d4:cf:7d:11:7f:63:7b:6c:c8:50:
e9:4d:44:f9:f4:69:01:31:9d:36:fb:81:77:ac:f0:
66:aa:74:dc:21:7e:e0:7c:7f:87:0d:39:ad:c0:4e:
e1:20:95:30:2f:79:bd:9a:f7:d9:c9:70:68:89:8a:
19:71:38:14:5c:16:80:31:d9:5b:95:95:be:0b:b8:
08:2b:3f:b2:d3:7b:41:db:ac:fb:ce:fe:3f:b1:dd:
d8:4d:77:3a:cf:0d:0c:e6:83:80:ed:46:59:cd:68:
47:e2:2c:92:d5:f4:b5:dd:ac:19:ce:77:a5:5e:9f:
59:62:c8:1f:76:98:f2:cb:b1:88:f2:f0:94:96:8e:
d6:eb:61:ad:54:93:7d:7f:74:db:ce:0f:0e:55:3a:
3f:2f:83:c2:da:ca:33:fc:b5:04:93:9a:94:71:81:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:95:BC:49:D0:0A:40:48:CE:A9:00:20:E6:06:5A:E9:91:0D:14:51
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/NJW8SdAKQEjOqQAg5gZa6ZENFFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
109.122.206.0/24
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:52:66:86:24:d6:8e:e5:85:75:57:19:44:92:0a:f0:52:28:
4e:ea:92:d3:76:4a:f5:b0:0b:70:8d:35:f3:46:af:73:81:b8:
27:06:91:6b:03:cb:0d:dd:02:57:89:b1:42:bb:de:b8:80:7b:
c2:63:13:73:cf:6f:5c:54:33:a3:09:6a:ec:bc:32:64:c4:af:
ce:22:10:b9:dd:5a:17:3f:89:42:24:f5:76:b7:28:9a:64:69:
8d:ce:1c:9d:58:df:cc:f8:d5:bb:1f:7a:dc:16:28:a8:cd:10:
20:bb:b5:7b:43:f6:29:49:61:5b:15:5b:df:e1:0a:1f:b2:cf:
a8:28:0c:6b:a2:06:ed:33:23:c3:66:df:d4:93:18:1b:92:aa:
0a:ce:be:f9:c4:f6:68:37:da:17:16:6e:47:1c:6a:3f:f3:24:
4d:79:ed:9e:db:a5:5f:d8:1e:2f:65:08:76:17:c7:15:e8:76:
ab:01:1c:1f:d7:fa:bd:8a:7e:57:11:e8:ac:ab:b0:5e:2b:0f:
1a:e8:60:a7:0d:f8:b6:5c:a0:4a:58:81:41:fb:39:8f:e7:23:
3d:25:cb:ad:7b:f2:17:a5:f4:a2:cb:eb:d4:c4:32:76:50:19:
9e:23:89:dc:2d:65:6c:b9:70:d4:f9:82:17:b0:56:0d:6c:89:
a2:bd:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:58:17 2025 by rpki-client