Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/aK2xx00JtDGutBS3o5jVluJQ_KQ.roa
File: aK2xx00JtDGutBS3o5jVluJQ_KQ.roa (raw, json)
Hash identifier: 6vkRQa/+kCoGZhtodqQMFD9J0BUyAvzm6dNtmFu/n1o=
Subject key identifier: 68:AD:B1:C7:4D:09:B4:31:AE:B4:14:B7:A3:98:D5:96:E2:50:FC:A4
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5D22375024833E38DF6AC0705DA5
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/aK2xx00JtDGutBS3o5jVluJQ_KQ.roa
Signing time: Sun 01 Jan 2023 21:44:48 +0000
ROA not before: Sun 01 Jan 2023 21:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270014
IP address blocks: 109.122.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5d:22:37:50:24:83:3e:38:df:6a:c0:70:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68adb1c74d09b431aeb414b7a398d596e250fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:73:4f:46:b5:cc:99:c1:a6:b3:91:c4:ee:
eb:e1:6d:43:b5:d1:78:e5:45:67:c5:d1:8c:27:1d:
db:e1:c4:48:9a:3e:95:7d:64:eb:2d:5a:5b:56:c3:
5e:fc:9c:a6:37:16:bc:93:e9:f7:89:eb:b2:57:db:
72:d5:8d:86:20:90:cd:3b:c1:49:b0:69:82:5f:2b:
6e:4a:3e:2d:9d:dd:54:86:9f:78:26:4e:92:d7:9c:
05:3c:10:4f:04:7a:32:34:5e:1b:50:9c:3b:4e:cc:
db:e0:1b:e2:88:f9:c7:86:98:8c:5b:6e:96:3a:bc:
22:8b:5b:1a:b3:50:22:f4:8d:82:ae:16:43:30:4f:
a9:87:c4:90:53:ec:93:88:df:b2:39:e1:df:16:5c:
73:55:75:86:e4:cb:cc:8f:5b:61:31:b0:e6:b2:af:
86:02:75:36:77:89:23:1b:7b:3a:52:67:7e:4c:20:
f0:cd:e3:a3:6d:aa:e7:92:f0:49:a2:bf:78:00:23:
b4:9b:39:82:e0:0a:6d:d9:d9:85:36:86:a5:24:34:
c1:dc:3a:83:7f:c6:46:96:99:96:e5:ef:83:1f:3f:
bc:38:ac:fd:e6:82:19:d6:54:cb:1f:49:51:31:7b:
14:4e:b5:38:56:b7:a2:af:a7:85:30:06:b4:bb:15:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AD:B1:C7:4D:09:B4:31:AE:B4:14:B7:A3:98:D5:96:E2:50:FC:A4
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/aK2xx00JtDGutBS3o5jVluJQ_KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.203.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1d:a7:c0:ba:1d:ee:64:ed:c9:b3:0d:db:73:e0:0e:0d:0a:
22:23:7b:15:95:c7:f2:2a:ba:37:e7:0a:be:49:20:71:f5:1f:
d6:f4:e4:29:87:60:1c:4c:d1:9e:4d:89:91:35:f8:31:59:d5:
0e:3e:76:af:40:0e:51:eb:3f:70:6b:68:c9:ad:39:67:5b:3f:
7b:e7:c1:2f:0c:4a:ac:d1:7e:fd:8b:1b:4b:e8:70:49:03:04:
bf:d2:fe:1c:91:f8:9b:1c:5e:a6:60:3e:66:4f:64:d1:79:11:
66:d3:68:75:a8:11:54:74:83:76:29:b4:6b:12:b6:cf:76:1a:
4e:f0:f7:c0:6f:01:7c:7e:ed:1a:05:65:c6:dc:83:dc:60:4b:
75:7e:28:b0:02:34:f8:3c:e7:6c:1e:93:78:5e:b7:a2:4e:aa:
f8:13:c3:05:5b:a9:de:e4:4d:21:12:dd:ee:cf:51:7a:2a:b7:
f4:2a:97:05:88:cb:72:b8:de:28:ab:f7:c3:53:25:65:0d:6a:
f0:bd:fb:5b:83:7a:19:62:35:f3:64:68:9c:86:4c:7e:c3:40:
91:d8:57:67:2f:57:53:3e:9e:84:0b:c7:58:f8:2f:57:03:5e:
90:5e:c4:60:ae:cd:0c:90:b4:8e:57:e4:2c:06:21:de:b1:0b:
e8:a6:bb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:39:37 2025 by rpki-client