Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZlPD3KtEWrfU3gCYTDJcyHxVJF0.roa
File: ZlPD3KtEWrfU3gCYTDJcyHxVJF0.roa (raw, json)
Hash identifier: xel0xhnr4yupgBuepofanPXxHSw3By3lgZUKx+xYlnI=
Subject key identifier: 66:53:C3:DC:AB:44:5A:B7:D4:DE:00:98:4C:32:5C:C8:7C:55:24:5D
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06471199
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZlPD3KtEWrfU3gCYTDJcyHxVJF0.roa
Signing time: Sun 06 Mar 2022 07:27:47 +0000
ROA not before: Sun 06 Mar 2022 07:27:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22333
IP address blocks: 109.122.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105320857 (0x6471199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 6 07:27:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6653c3dcab445ab7d4de00984c325cc87c55245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:e5:80:f5:f1:0f:a0:27:fd:9e:f3:ef:f4:
d5:2c:1d:7f:66:96:21:7d:7f:8c:bd:a6:5a:76:2d:
a3:bc:6f:14:ce:c7:be:6d:41:0b:1a:7a:cc:36:11:
06:b7:47:f0:ba:f7:aa:65:1c:12:2f:e3:86:fb:1f:
fc:4c:23:3b:3b:ee:cb:ec:b1:91:2c:7d:cb:32:8f:
cc:b4:65:7d:40:23:a6:dc:f5:34:18:53:19:f6:77:
c9:c3:84:52:25:15:04:13:7b:d0:76:19:6d:4a:64:
78:18:99:36:07:06:ed:6d:14:30:ae:3a:83:bd:bf:
93:4f:50:10:ae:c3:86:60:e1:0a:52:43:a5:1f:a3:
8d:8f:a5:81:4b:c1:71:02:f7:2f:98:b5:45:69:ed:
7e:34:4d:2a:13:57:c9:c4:20:d9:91:0c:33:1e:c6:
30:09:1a:38:25:83:30:3f:3a:33:a4:35:d7:ca:d9:
8f:b3:5a:8d:ad:51:e9:f9:08:eb:ef:fa:26:ed:0d:
9b:25:2b:4c:10:12:a9:8b:9c:3e:b3:86:24:2a:b0:
03:ad:15:5b:74:94:e2:82:e5:e4:3a:12:fe:14:c8:
e4:58:06:ea:be:ff:95:53:b7:57:83:1e:02:3a:64:
79:6b:7a:1a:b4:8d:7e:86:ed:d0:4f:49:77:07:83:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:53:C3:DC:AB:44:5A:B7:D4:DE:00:98:4C:32:5C:C8:7C:55:24:5D
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ZlPD3KtEWrfU3gCYTDJcyHxVJF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ee:3c:b7:fc:a2:7d:75:16:f0:6f:3e:c6:48:3a:08:5d:da:
21:99:90:da:24:35:8a:41:13:2e:3f:45:44:6a:ea:9a:72:31:
65:7e:49:04:99:47:06:32:8c:0a:b8:a9:90:85:36:cb:e9:9f:
e0:a0:e7:c2:ea:07:68:a3:1f:4c:4d:bc:09:fa:78:dd:d0:a4:
f5:45:b5:d0:14:79:56:de:ac:fe:7b:df:3b:fb:9f:4c:37:45:
df:df:ca:a3:0c:1e:71:69:b8:a0:5c:ad:63:a7:ae:ad:2c:19:
08:f5:14:f6:72:91:99:1a:79:e5:68:38:96:7e:a7:cc:4b:9d:
55:e3:4d:ca:bb:59:0a:0b:e0:68:2f:8e:77:2a:92:eb:12:2c:
18:b1:7f:2e:25:d5:c4:0f:68:46:fc:89:fa:e7:0f:fa:e6:ad:
10:3d:5e:a0:9d:b8:8f:8c:e8:b4:06:fe:da:d2:d2:44:d2:c8:
5c:7e:fd:c8:e6:04:4c:09:68:44:1f:2d:df:47:1d:38:ba:29:
c2:d8:1f:75:65:02:83:6e:33:85:63:f2:f5:cf:54:b2:a4:27:
e9:57:46:1e:e4:b2:d2:34:c3:43:2f:c0:f0:ca:7e:f7:ed:0a:
92:7a:9b:f5:21:29:0a:93:38:5f:35:e7:19:75:91:a8:80:c2:
45:52:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:28:32 2025 by rpki-client