Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_oALmi3WhBS8C6z1DYiDnAgPN78.roa
File: _oALmi3WhBS8C6z1DYiDnAgPN78.roa (raw, json)
Hash identifier: 3HKp9w8Pm2ez2XPMOnP3jb/3Y48nHBXZsFZIKmnr4XA=
Subject key identifier: FE:80:0B:9A:2D:D6:84:14:BC:0B:AC:F5:0D:88:83:9C:08:0F:37:BF
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5B58E72333E421BA31A4F5093344
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_oALmi3WhBS8C6z1DYiDnAgPN78.roa
Signing time: Sun 01 Jan 2023 21:44:47 +0000
ROA not before: Sun 01 Jan 2023 21:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5b:58:e7:23:33:e4:21:ba:31:a4:f5:09:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe800b9a2dd68414bc0bacf50d88839c080f37bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:e4:b1:e2:d9:2b:d9:c1:ed:24:43:28:7a:
59:42:5e:9e:aa:4a:19:f8:73:52:16:96:2d:10:ee:
eb:0b:fd:69:84:68:26:e1:2c:36:1f:c1:90:97:c7:
94:98:00:86:57:c5:1d:ea:93:44:a3:fb:58:bb:62:
74:0c:fc:d1:ca:57:2b:ca:78:d5:7b:8d:84:22:88:
7f:6b:8f:6a:4b:31:10:33:95:f1:78:51:75:ba:b5:
f4:fb:cf:db:f9:61:4c:02:db:29:6f:f7:70:2e:39:
ee:13:98:ae:e4:50:33:81:c4:8d:79:5b:fb:ea:37:
23:72:d7:fc:9a:fa:67:48:de:ec:c8:ea:a4:88:f4:
49:81:31:7d:ad:e6:ec:6f:42:7a:73:07:60:90:c0:
03:e0:88:b7:51:80:cc:a8:17:29:15:4f:b7:2c:55:
10:27:3f:0a:dc:05:59:c0:b3:25:09:3e:1a:2c:c9:
bd:80:1f:8a:8e:9c:35:0b:50:79:29:75:f3:42:5b:
a4:ce:95:61:7a:d8:34:0d:62:86:5f:39:c6:73:5f:
5a:3a:da:bc:88:3c:49:db:40:61:09:76:ac:f6:40:
bf:e7:eb:35:20:d6:00:47:0f:d0:f0:ad:cd:5e:14:
5f:7a:6f:72:3d:4b:e7:09:5e:3b:69:3d:38:3c:de:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:0B:9A:2D:D6:84:14:BC:0B:AC:F5:0D:88:83:9C:08:0F:37:BF
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/_oALmi3WhBS8C6z1DYiDnAgPN78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
109.122.220.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9e:51:4d:0c:23:c0:7a:fa:5d:01:71:a0:b2:93:56:72:31:
18:c7:1e:e1:8f:42:30:5f:e7:71:a6:fc:a0:75:52:5e:84:a9:
a3:84:ea:df:9a:6a:3d:94:98:90:c4:29:df:47:e7:ea:7c:22:
89:18:63:32:9f:d9:7c:1d:c9:5c:35:bb:82:78:8e:8f:e0:25:
5e:ec:a5:e6:25:8d:7e:56:28:de:00:5f:ed:ed:92:76:6a:84:
b8:70:f5:f5:1f:76:76:5c:ca:91:e5:32:f4:0d:73:98:82:45:
f0:25:b0:00:7f:94:f8:5a:93:e6:2c:88:0a:63:b2:0b:d9:3c:
4b:69:71:4b:63:fd:94:9b:98:2a:dd:b2:95:31:65:1f:40:a4:
1a:fc:1e:65:e3:a0:7d:9b:70:92:0e:32:ff:a4:c1:39:50:f9:
88:16:d1:3f:76:15:47:16:45:d3:f6:d0:c6:e9:b7:5f:c7:18:
9c:c4:7e:d4:dc:b7:7d:9f:04:0d:b2:10:9e:cd:5a:1a:1c:a4:
ce:e7:e7:10:8e:40:a2:03:1a:40:95:c5:20:20:3d:2b:0d:2a:
d6:5e:9d:7e:3b:ed:d7:da:06:70:fc:86:38:10:5d:c8:b5:c9:
3f:e3:2f:65:95:1d:65:87:f8:f8:ea:08:69:43:89:cb:67:29:
7e:dc:46:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvS1tY5yMz5CG6MaT1CTNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTAxMjE0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTgwMGI5YTJkZDY4NDE0YmMwYmFjZjUwZDg4ODM5YzA4MGYzN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLzkseLZK9nB7SRDKHpZQl6eqkoZ
+HNSFpYtEO7rC/1phGgm4Sw2H8GQl8eUmACGV8Ud6pNEo/tYu2J0DPzRylcrynjV
e42EIoh/a49qSzEQM5XxeFF1urX0+8/b+WFMAtspb/dwLjnuE5iu5FAzgcSNeVv7
6jcjctf8mvpnSN7syOqkiPRJgTF9rebsb0J6cwdgkMAD4Ii3UYDMqBcpFU+3LFUQ
Jz8K3AVZwLMlCT4aLMm9gB+Kjpw1C1B5KXXzQlukzpVhetg0DWKGXznGc19aOtq8
iDxJ20BhCXas9kC/5+s1INYARw/Q8K3NXhRfem9yPUvnCV47aT04PN6DRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP6AC5ot1oQUvAus9Q2Ig5wIDze/MB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvX29BTG1pM1doQlM4QzZ6MURZaURuQWdQTjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXrFAwQA
bXrcMA0GCSqGSIb3DQEBCwUAA4IBAQB3nlFNDCPAevpdAXGgspNWcjEYxx7hj0Iw
X+dxpvygdVJehKmjhOrfmmo9lJiQxCnfR+fqfCKJGGMyn9l8HclcNbuCeI6P4CVe
7KXmJY1+VijeAF/t7ZJ2aoS4cPX1H3Z2XMqR5TL0DXOYgkXwJbAAf5T4WpPmLIgK
Y7IL2TxLaXFLY/2Um5gq3bKVMWUfQKQa/B5l46B9m3CSDjL/pME5UPmIFtE/dhVH
FkXT9tDG6bdfxxicxH7U3Ld9nwQNshCezVoaHKTO5+cQjkCiAxpAlcUgID0rDSrW
Xp1+O+3X2gZw/IY4EF3Itck/4y9llR1lh/j46ghpQ4nLZyl+3EYj
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:22 2025 by rpki-client