Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/X91iz_jkqY4ZZGluKmSONKW-wTQ.roa
File: X91iz_jkqY4ZZGluKmSONKW-wTQ.roa (raw, json)
Hash identifier: bvyDQY5Q3NcmRIPnmaHSY0qjDiixOQOR/0ezDEppCPU=
Subject key identifier: 5F:DD:62:CF:F8:E4:A9:8E:19:64:69:6E:2A:64:8E:34:A5:BE:C1:34
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018476993F680B40A6D004DC8ED6DD1F3416
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/X91iz_jkqY4ZZGluKmSONKW-wTQ.roa
Signing time: Mon 14 Nov 2022 14:44:25 +0000
ROA not before: Mon 14 Nov 2022 14:44:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 109.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:99:3f:68:0b:40:a6:d0:04:dc:8e:d6:dd:1f:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 14 14:44:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fdd62cff8e4a98e1964696e2a648e34a5bec134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:3c:10:73:eb:5c:7f:55:e7:7f:2f:ae:74:
3c:5e:e6:35:59:53:04:63:db:bf:6a:64:af:03:28:
11:ee:29:41:b2:6b:8e:73:4e:a9:92:37:58:85:3d:
4c:cb:0d:f3:92:c4:53:95:37:4a:e2:ed:4a:50:1e:
ed:9d:14:56:2a:fe:5b:2e:68:4e:23:0b:ff:01:e8:
7b:09:95:0b:7f:ab:c8:a3:9a:82:8d:cf:bd:b4:46:
18:e1:b7:7c:32:5c:7b:bf:d2:6f:62:5c:7a:2e:a8:
5a:b0:07:4b:41:26:53:c1:f6:53:5d:46:a1:8f:b3:
80:37:e6:98:64:fa:ab:74:51:65:48:f3:c7:04:43:
af:af:c1:07:93:e1:a9:49:cc:41:ea:c5:c1:68:c0:
8a:0b:8c:d2:f0:aa:fd:4c:cf:c1:54:6a:de:9f:7c:
bd:97:28:fa:25:47:b4:42:bc:8e:e6:b8:17:aa:1b:
bd:4b:34:0b:7f:aa:8e:43:80:8b:cd:29:2c:44:e4:
92:64:c8:c8:8c:65:12:b0:2d:a4:04:79:51:3f:9d:
33:e4:27:ae:ac:27:cc:f5:4e:91:e2:bd:a3:c8:1b:
23:b3:29:a4:67:f8:6f:bf:5a:95:c2:13:72:a2:31:
9c:a3:5f:57:9e:48:89:37:6a:04:f6:ba:80:d7:0a:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:62:CF:F8:E4:A9:8E:19:64:69:6E:2A:64:8E:34:A5:BE:C1:34
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/X91iz_jkqY4ZZGluKmSONKW-wTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c4:17:2e:f7:45:db:22:81:f8:d5:2c:c9:ab:1b:2f:23:3a:
13:5a:9f:29:d3:fd:58:9e:5b:82:ee:8a:1a:4f:2e:40:91:f1:
fd:78:45:32:7d:97:52:28:26:a4:7b:28:3c:fe:6c:80:8d:e5:
55:0f:00:40:5d:eb:1e:18:40:54:53:c1:64:1e:61:11:21:a2:
8c:3d:7b:42:d8:5e:f0:d7:38:cc:a3:a7:79:46:8d:e1:7e:c4:
4a:87:dd:c8:89:aa:66:20:c3:e6:cc:bc:31:7d:dd:1d:46:72:
77:dc:93:47:1b:ba:1c:72:08:ed:ef:fa:d7:fa:75:7a:58:bd:
f3:8c:2e:cc:90:f6:9a:a2:ad:9e:92:ce:9e:3f:38:2c:b8:0d:
fe:41:32:ac:fe:82:56:34:48:3a:e8:5b:bb:3d:0f:1e:c2:5d:
aa:ac:59:8f:75:19:b2:bb:cc:d5:85:e0:53:d0:ed:16:6a:f3:
d5:6f:e9:3a:0b:a1:9c:54:11:63:82:8d:a4:0b:bf:6a:65:e7:
88:1b:28:5c:9d:59:51:4d:03:c9:4d:f4:bd:1d:f4:00:ba:c0:
41:c7:cb:9e:61:6b:fe:c3:ae:79:a7:22:41:73:2b:9a:79:33:
74:e9:64:08:c6:df:81:00:ac:c8:c0:f9:f7:bc:15:2f:60:78:
91:a7:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:50:48 2025 by rpki-client