Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/RlaLxAYMp9Lgbncvz6LqMNUL8BE.roa
File: RlaLxAYMp9Lgbncvz6LqMNUL8BE.roa (raw, json)
Hash identifier: CLXbyYTFkNyxRpoVmt1nD0SxfsJjzDpvaeI/a7ysyEY=
Subject key identifier: 46:56:8B:C4:06:0C:A7:D2:E0:6E:77:2F:CF:A2:EA:30:D5:0B:F0:11
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01846A759F063630F129C7FB527A1E90A37B
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/RlaLxAYMp9Lgbncvz6LqMNUL8BE.roa
Signing time: Sat 12 Nov 2022 06:10:04 +0000
ROA not before: Sat 12 Nov 2022 06:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 109.122.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6a:75:9f:06:36:30:f1:29:c7:fb:52:7a:1e:90:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 12 06:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46568bc4060ca7d2e06e772fcfa2ea30d50bf011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:86:c6:92:fe:71:da:b5:4c:6f:c1:5f:b2:
1d:53:bd:0f:ff:a8:55:c6:3f:e6:36:b9:ba:42:9c:
a3:a2:fb:06:67:fe:7e:ed:57:35:58:e4:70:c3:8b:
64:ff:a1:1e:50:69:3b:34:d6:b7:87:13:cd:46:fe:
fb:01:6b:6c:0a:36:65:64:a3:7d:26:16:46:5d:0d:
7b:45:d0:b9:ca:1a:23:a2:aa:4b:06:1a:fc:5e:9e:
c9:2a:73:d4:da:22:fa:ce:a0:ac:ef:36:be:8a:cf:
be:97:63:f9:20:0a:ea:69:ee:3d:0f:43:cb:af:6f:
0f:81:03:9b:e6:9c:18:77:e8:e8:06:e8:e8:e8:4b:
d0:47:00:39:7d:4a:c8:ed:82:99:db:04:12:1e:59:
d0:21:0f:5a:f6:a3:97:19:36:25:f3:2c:f0:64:9e:
c0:9d:62:d8:26:67:bf:47:d7:7c:a0:43:2e:e2:ad:
b7:03:61:46:b2:5c:62:13:cb:0a:8e:8d:b4:3d:70:
79:76:d2:7a:ad:42:d2:a1:6a:d3:5a:c1:7e:1d:7b:
b5:8b:26:7e:3c:71:4f:d4:47:63:e6:f4:ea:32:c3:
62:fc:d4:99:a7:ad:39:66:8d:f0:98:dc:4b:7e:5a:
c0:75:ec:60:2a:d2:4c:30:5c:45:cb:6a:aa:8a:1e:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:8B:C4:06:0C:A7:D2:E0:6E:77:2F:CF:A2:EA:30:D5:0B:F0:11
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/RlaLxAYMp9Lgbncvz6LqMNUL8BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f9:91:4b:e4:72:86:6f:36:d8:c4:3a:b8:51:59:9c:b5:3c:
9c:1a:d7:40:d5:e8:fb:00:87:60:11:b9:26:96:07:85:d8:10:
25:54:2d:bf:33:6f:5c:55:6b:69:bf:e7:32:46:ec:b6:98:d5:
4f:39:c4:19:16:f1:2a:a5:94:f7:2c:90:6a:df:d7:f7:b2:2a:
21:71:1b:43:1f:f1:4a:8b:06:b6:d6:ce:aa:07:e5:c3:91:87:
99:29:70:f1:fa:23:cb:6d:71:61:0b:70:e1:4c:4c:62:65:e5:
6e:fb:67:a9:76:43:9a:f0:f0:3d:af:bc:05:d0:30:1f:53:34:
68:14:22:ae:ac:e9:db:8c:61:d6:47:9d:30:bd:6f:09:32:5a:
ed:01:29:78:7a:5b:01:70:99:55:a1:95:95:52:39:6b:3b:fa:
76:86:5d:71:4c:a3:0e:61:c6:20:11:1b:c9:33:3e:67:3b:a4:
5e:d0:2f:1a:5d:9f:b7:6e:7e:48:4e:49:80:93:88:bf:59:d3:
25:99:29:9e:7e:7d:0f:ac:f7:3d:10:54:46:74:8f:4c:13:be:
3f:00:56:f5:17:12:3f:cb:90:39:8a:e1:89:50:bf:28:63:a1:
de:cc:01:24:f6:73:18:ca:67:cb:8b:e8:1f:12:4c:5c:a4:7f:
2b:51:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:05:16 2025 by rpki-client