Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/S6MQ3KYqE0kUhcXdhs1IJQOmGeU.roa
File: S6MQ3KYqE0kUhcXdhs1IJQOmGeU.roa (raw, json)
Hash identifier: z5nQGLjTPT9zcr/X8FGai9L+cUiFVfPI+J25tGb8lYo=
Subject key identifier: 4B:A3:10:DC:A6:2A:13:49:14:85:C5:DD:86:CD:48:25:03:A6:19:E5
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185D32C19D6563F21AF0788554B9381D91E
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/S6MQ3KYqE0kUhcXdhs1IJQOmGeU.roa
Signing time: Sat 21 Jan 2023 07:12:40 +0000
ROA not before: Sat 21 Jan 2023 07:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:2c:19:d6:56:3f:21:af:07:88:55:4b:93:81:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 21 07:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ba310dca62a13491485c5dd86cd482503a619e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:b3:f1:d7:91:7b:e7:10:5f:8e:e9:f8:be:
4c:b5:03:dc:a2:70:41:8b:8b:c1:30:f1:e5:d1:a9:
08:82:8a:bb:d1:e8:e2:12:5c:97:1e:93:51:9e:71:
c3:72:72:88:51:b7:0f:f7:91:01:3e:1e:64:ec:88:
ed:5f:3f:91:f7:c8:64:6c:09:7a:57:78:aa:4a:4a:
14:3c:da:a8:53:90:4b:80:96:54:61:aa:a0:5a:2c:
1c:14:bd:11:d2:37:ae:21:75:b4:3b:e4:46:ba:0f:
97:01:8a:1c:94:2f:c8:ca:ce:31:f0:15:96:a8:43:
07:91:91:8e:06:7d:7e:d0:57:c9:5f:34:6f:a4:53:
ca:ba:81:cf:f4:a1:88:c2:86:9b:43:29:fd:95:68:
4e:fa:30:2e:2a:80:e0:55:76:26:ae:34:4e:ce:03:
1a:91:ad:e0:4b:c2:df:9c:75:ed:73:58:c1:dd:ac:
bf:2a:12:58:be:73:7c:31:18:fb:81:0f:b3:88:b6:
d7:dd:4d:3e:fa:42:07:1f:59:d9:5c:62:9c:33:88:
87:8b:59:ee:87:f4:fe:69:10:49:5f:e3:ed:09:d6:
2d:a6:77:0e:ec:07:cb:0a:33:09:5d:c6:31:70:55:
59:f8:63:f1:bc:27:49:5d:2f:fd:d6:5e:cb:06:58:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:10:DC:A6:2A:13:49:14:85:C5:DD:86:CD:48:25:03:A6:19:E5
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/S6MQ3KYqE0kUhcXdhs1IJQOmGeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.214.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d6:52:a7:e3:3e:e6:75:40:10:91:e7:ed:fe:72:77:8f:79:
42:4b:51:52:de:c7:4b:e5:af:9a:04:02:05:bb:c6:54:34:b9:
6a:9b:4e:d2:31:5b:ec:ad:60:1b:0f:18:00:87:49:aa:65:3d:
bf:4e:0f:93:5c:07:ab:0f:fc:5e:10:a8:1a:b3:a8:59:5e:ac:
9d:4e:9f:b7:1b:65:14:fc:c5:0c:5e:85:39:3e:34:f8:f8:65:
79:e6:73:00:53:8f:52:e9:47:62:12:57:e1:1e:27:38:bd:13:
06:61:a8:f8:ed:d6:ba:e6:77:3b:27:02:f9:41:f2:d2:8d:0d:
ec:08:00:e6:30:67:3f:01:e9:12:36:a1:74:a5:bd:cd:1e:9a:
2b:5e:c3:5a:24:50:9d:27:ae:9d:7e:86:7b:ac:02:e3:05:cd:
89:04:21:25:e7:96:b4:02:db:10:36:f2:1f:08:ec:ca:ef:e4:
75:66:97:60:62:c9:a4:e9:81:1e:b5:69:b5:ef:b5:55:8a:5b:
fe:94:10:e6:f5:fb:45:73:ed:2d:7a:15:83:66:69:d8:89:46:
1b:3b:da:36:62:ba:94:99:f1:da:7d:ab:cc:74:48:b7:98:67:
09:1e:fe:03:52:e1:2b:5d:e8:c2:22:06:16:75:5c:db:fc:0a:
d5:75:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:23:07 2025 by rpki-client