Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/U9QZJKM8vMT1ywQy4mps_er8l6s.roa
File: U9QZJKM8vMT1ywQy4mps_er8l6s.roa (raw, json)
Hash identifier: B5HrfD+N68/s4eDY8RTDjTEtxDEGoFqMl/UIlmthqXw=
Subject key identifier: 53:D4:19:24:A3:3C:BC:C4:F5:CB:04:32:E2:6A:6C:FD:EA:FC:97:AB
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 075B76B8
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/U9QZJKM8vMT1ywQy4mps_er8l6s.roa
Signing time: Tue 28 Jun 2022 13:57:04 +0000
ROA not before: Tue 28 Jun 2022 13:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.206.0/23 maxlen: 24
109.122.200.0/22 maxlen: 24
109.122.212.0/23 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123434680 (0x75b76b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jun 28 13:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53d41924a33cbcc4f5cb0432e26a6cfdeafc97ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:b1:c9:e4:2a:fd:ae:d9:24:10:2c:47:e1:
0e:ff:fc:5b:41:31:c8:ed:0f:1a:ff:47:7b:80:fa:
c9:06:56:36:f6:fe:61:46:f4:d1:c1:b2:b1:50:0c:
54:22:e5:37:7a:7f:37:4e:17:83:95:03:93:ba:22:
7e:80:d1:2c:fc:e7:16:22:8d:15:f8:d3:fc:8e:2d:
69:ba:b5:fd:95:a5:07:b1:dd:99:51:ed:56:31:91:
aa:48:7c:77:37:fa:40:11:1b:f2:e0:38:71:dc:84:
19:78:72:60:a8:02:d7:2b:bd:4d:ad:45:0f:87:0e:
63:0e:ca:22:78:7f:79:5d:f7:0f:35:9c:78:0a:56:
b5:63:3a:34:bc:93:57:64:6f:be:0f:40:6c:05:65:
39:7f:0f:52:a7:60:5e:3f:4e:43:5f:b4:7e:12:01:
c6:78:50:a9:0b:a7:6e:c3:f2:10:ba:d4:d8:82:2d:
04:7c:8c:a9:6a:16:e3:f4:fc:dc:d7:5d:df:df:b6:
9e:dc:d9:ec:54:7c:e0:be:79:a5:1d:c9:15:82:2b:
39:c4:36:1b:72:d0:54:7c:80:6a:61:3d:ea:0b:b7:
af:5f:df:dc:e0:19:78:da:0e:cd:12:b4:9b:ea:0d:
07:1f:64:02:9e:8d:e8:7c:4c:4f:4b:1a:26:3f:f5:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D4:19:24:A3:3C:BC:C4:F5:CB:04:32:E2:6A:6C:FD:EA:FC:97:AB
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/U9QZJKM8vMT1ywQy4mps_er8l6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.206.0/23
109.122.211.0-109.122.213.255
109.122.216.0/24
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
37:41:37:4a:56:e9:a4:7d:29:02:96:c8:b4:2b:77:80:3c:6a:
10:bd:71:1d:69:cf:52:e2:0a:02:32:04:bf:85:c7:c9:da:38:
78:90:3f:c3:31:b8:b5:3a:15:34:72:34:24:bd:5c:8e:90:5a:
ef:97:58:7c:18:1c:f9:59:7f:7a:7c:a7:83:de:db:ca:67:5b:
85:c4:12:84:23:0d:fd:c8:2f:64:6d:5b:e2:a7:80:54:b0:f6:
ae:0a:6f:4d:1f:09:25:44:3c:1f:60:b5:d4:c7:30:80:87:aa:
4b:35:03:ab:82:df:bb:7a:9f:80:ea:d6:9b:c8:ec:ec:5a:f9:
3b:ef:81:c6:04:7e:fa:e3:0f:a0:28:95:8e:dc:ec:d4:60:18:
70:45:83:75:8a:99:e1:19:07:fb:8e:84:5c:0f:ad:74:41:1a:
c9:47:78:66:09:d2:cc:80:bb:85:5f:78:8c:35:bf:dc:61:5d:
37:1c:b1:e6:70:75:d1:18:07:c4:ed:9f:4a:33:91:82:48:fa:
d8:86:cd:d2:26:65:ca:a8:eb:28:ae:1c:1c:1f:e3:05:ff:dd:
24:08:a8:98:51:19:02:0b:a7:de:65:26:6a:1b:53:b8:89:a3:
89:fc:7e:17:9a:3f:42:ec:d5:7e:f7:aa:a2:29:c4:1f:0c:d6:
50:91:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:17:02 2025 by rpki-client