Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_kuswm5e16xRUOo632ua9SSOpxQ.roa
File: _kuswm5e16xRUOo632ua9SSOpxQ.roa (raw, json)
Hash identifier: gFEC4AtfZkgRwtRitlUMOsUhWZlfhytSY6H8ItUIohQ=
Subject key identifier: FE:4B:AC:C2:6E:5E:D7:AC:51:50:EA:3A:DF:6B:9A:F5:24:8E:A7:14
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06EAB042
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_kuswm5e16xRUOo632ua9SSOpxQ.roa
Signing time: Tue 10 May 2022 10:23:02 +0000
ROA not before: Tue 10 May 2022 10:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
185.207.4.0/22 maxlen: 24
109.122.206.0/23 maxlen: 23
109.122.200.0/22 maxlen: 24
109.122.212.0/23 maxlen: 23
109.122.209.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.218.0/23 maxlen: 23
109.122.216.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116043842 (0x6eab042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: May 10 10:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe4bacc26e5ed7ac5150ea3adf6b9af5248ea714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:03:1d:86:60:fc:63:c3:8a:4c:d9:d5:26:
6e:3c:69:28:16:6f:0f:90:8a:33:87:ac:73:51:4b:
04:cf:6d:7f:e7:2d:73:16:f9:4f:b5:a5:6d:03:a7:
29:34:51:04:d2:b4:4c:8a:b0:3e:e4:8e:f3:7b:b3:
e3:b7:f1:3e:8d:a6:b6:5e:ac:06:5c:02:a0:15:c9:
97:9d:a1:32:ed:fc:2c:27:b1:07:67:63:c1:bb:97:
2d:95:73:a8:3e:72:61:4f:ce:32:65:59:4b:1d:36:
6f:8b:0d:d8:0c:f7:0f:4a:72:71:19:74:11:d0:dd:
b0:20:ad:35:e0:d7:35:50:ae:e7:45:37:6c:f0:5c:
59:cc:db:1b:28:18:fc:2b:16:d6:07:a3:b9:8e:b6:
19:58:a5:fb:d5:9d:06:9b:7e:17:53:88:42:ef:61:
4c:04:51:9b:44:98:95:53:4f:55:c8:9f:7b:29:4b:
d9:f7:d8:66:6f:c4:47:68:d5:82:67:03:0f:70:81:
5c:ca:e8:e1:f1:aa:e2:d7:79:06:6e:02:b7:f8:ca:
43:32:73:34:22:b5:e4:ac:94:e9:ec:d3:c4:36:ac:
ef:5f:07:0f:46:07:14:48:56:41:ec:49:17:86:86:
14:12:38:34:bc:f9:4b:8c:6a:3d:b0:19:00:96:e7:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4B:AC:C2:6E:5E:D7:AC:51:50:EA:3A:DF:6B:9A:F5:24:8E:A7:14
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_kuswm5e16xRUOo632ua9SSOpxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.205.0-109.122.207.255
109.122.209.0/24
109.122.211.0-109.122.213.255
109.122.216.0/24
109.122.218.0/23
109.122.223.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ce:28:b8:25:83:34:4b:86:55:1c:84:3d:7d:b0:e4:ff:b7:
a7:20:0c:63:36:cc:04:90:ce:9b:ed:b1:9e:67:3d:27:3c:11:
2a:57:4c:c6:6a:56:f2:c8:b4:cb:43:43:c7:14:53:e0:3a:06:
fe:ad:22:2a:24:8f:4d:c8:6e:3c:33:50:be:c4:0b:fa:85:3a:
ed:4c:1e:86:df:40:f8:14:0b:f1:9b:06:67:7f:9e:69:a8:8e:
c0:e4:63:c6:06:a5:ef:98:96:7c:d9:ac:f7:d8:13:28:d0:5c:
52:eb:ad:03:0c:e6:c3:81:22:c0:d8:31:bd:c9:04:72:35:75:
5e:47:8c:f2:0f:a0:f9:18:80:eb:2e:fa:f4:f0:66:4c:26:0f:
c6:b9:4c:09:82:a6:63:56:d7:c1:b9:82:b5:5c:77:8e:b8:ef:
e5:03:b7:34:c5:82:32:3a:70:52:9c:c9:df:68:9c:1a:07:2c:
bc:d4:2a:47:27:a5:f0:61:bf:a7:2f:f0:34:2d:9e:1b:77:17:
8b:d9:5a:bc:5b:0a:17:10:88:d8:2e:94:ae:fd:0a:fb:2e:f1:
8f:1f:54:9b:b7:7c:77:19:97:b7:96:32:2a:f6:86:4f:67:62:
63:70:8b:46:96:df:be:d7:15:3a:f1:85:28:07:b4:8f:37:73:
12:d0:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:56 2025 by rpki-client