Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Sp9a5Z-ne0La9IMhd409vM7vXUM.roa
File: Sp9a5Z-ne0La9IMhd409vM7vXUM.roa (raw, json)
Hash identifier: fV5PqUnUUvtGUXiRG6ohOcv6RZIA6wjx5kg908I+iek=
Subject key identifier: 4A:9F:5A:E5:9F:A7:7B:42:DA:F4:83:21:77:8D:3D:BC:CE:EF:5D:43
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183B652E234C1FBF433A76E957640D49CB0
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Sp9a5Z-ne0La9IMhd409vM7vXUM.roa
Signing time: Sat 08 Oct 2022 06:40:28 +0000
ROA not before: Sat 08 Oct 2022 06:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:52:e2:34:c1:fb:f4:33:a7:6e:95:76:40:d4:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 8 06:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a9f5ae59fa77b42daf48321778d3dbcceef5d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:ab:82:07:41:02:f1:7d:ca:30:c4:eb:66:
81:8f:47:4e:f8:5a:0c:0d:32:0c:1a:50:93:d2:cf:
f2:e7:6f:42:26:e6:7f:2d:b7:d2:33:44:3b:10:f6:
e1:53:20:1c:97:78:6c:9a:1a:f8:f4:d7:fa:9a:f9:
b6:15:18:da:62:c1:dd:8c:c1:fa:98:f1:2e:81:97:
2f:2f:24:fe:8f:99:05:40:b8:79:84:e2:ba:a0:a8:
28:46:33:bc:19:f7:18:5c:7c:b7:a3:cc:7a:ea:70:
5e:ec:06:da:b8:3c:98:a5:ea:5d:11:b8:33:8c:36:
cb:81:0b:be:73:5b:3a:de:bd:13:ad:a3:a2:4c:65:
56:37:e4:34:68:68:c7:ec:36:2f:2e:4f:b9:e4:b9:
83:ab:3b:5e:12:f8:83:2e:3f:00:ad:16:0a:ba:d8:
69:cd:c6:3c:44:e3:e8:89:c7:f1:35:63:6c:a3:85:
12:f6:89:99:c0:cb:04:ad:5e:ce:ee:f7:5b:b5:43:
1e:c3:e0:d3:74:b0:3b:ac:ed:d9:6d:69:22:cb:5f:
e6:62:8f:08:f2:07:66:19:a9:01:d4:81:4f:f2:3e:
f4:85:be:e6:c8:18:b0:76:e3:de:7e:48:f6:73:7d:
0c:3f:e7:f2:81:4c:4b:09:9d:23:ae:bb:c8:78:e1:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:5A:E5:9F:A7:7B:42:DA:F4:83:21:77:8D:3D:BC:CE:EF:5D:43
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Sp9a5Z-ne0La9IMhd409vM7vXUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
109.122.202.0/24
109.122.214.0/24
109.122.218.0/24
109.122.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5c:f6:c6:1d:34:41:39:d0:dc:2e:88:1b:7c:f9:b9:d5:0c:
49:13:b5:cf:f2:9f:03:fb:8d:3d:50:fb:89:7d:f7:fe:3b:d4:
4e:3f:c4:fd:10:c7:13:64:f5:02:d8:34:35:0a:1d:39:ae:64:
fb:42:d4:1e:26:ea:64:3e:18:65:6e:99:5a:61:f7:5e:2e:28:
b4:54:d4:c0:4a:e7:90:84:b8:16:10:79:da:24:9b:0e:2d:69:
99:29:95:46:fe:9c:fe:d1:5b:15:b5:20:2a:99:16:83:ac:73:
36:a9:2d:ff:f8:73:97:af:b3:86:07:aa:d5:74:c6:25:ca:53:
88:a1:26:ac:46:8c:16:22:76:da:6f:93:2a:28:cb:45:c3:6b:
b1:03:6f:08:18:fb:a0:9f:1a:43:b7:2d:13:ef:92:0f:c6:ab:
42:a9:b2:6c:37:71:08:ab:3f:0b:f8:23:f3:77:1c:2a:ad:12:
7f:52:b0:5e:83:3a:cf:a9:a9:24:34:21:77:a0:c7:59:7e:d1:
d7:98:ce:e6:40:dc:06:de:62:82:ed:62:8e:c7:a0:93:75:88:
e8:57:d4:aa:55:e2:e0:1a:d8:9c:0c:cc:83:3f:7a:a7:e0:7a:
cd:c4:e0:60:b9:39:b0:ad:b9:4d:04:aa:5a:87:b9:81:1b:8c:
eb:75:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:18:08 2025 by rpki-client