Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/au78n9kHw8i_Um9LEqF05SlBW1w.roa
File: au78n9kHw8i_Um9LEqF05SlBW1w.roa (raw, json)
Hash identifier: 7QLCY7NQj+yNIectw9xZ7fH/1Sukp2bZkn1K6vufdYo=
Subject key identifier: 6A:EE:FC:9F:D9:07:C3:C8:BF:52:6F:4B:12:A1:74:E5:29:41:5B:5C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 069BEA2B
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/au78n9kHw8i_Um9LEqF05SlBW1w.roa
Signing time: Fri 08 Apr 2022 07:47:02 +0000
ROA not before: Fri 08 Apr 2022 07:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 109.122.196.0/22 maxlen: 22
109.122.204.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110881323 (0x69bea2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 8 07:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6aeefc9fd907c3c8bf526f4b12a174e529415b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:33:0c:fe:bf:21:56:61:2c:6f:40:6e:e3:
70:af:28:eb:5a:cf:f9:80:df:f7:bb:75:d7:de:e4:
21:ac:d1:c1:bc:a6:58:bf:61:eb:e3:54:51:13:aa:
27:eb:f9:97:12:4f:0c:d3:8e:1b:c1:f1:1f:a2:d5:
20:09:7d:ec:18:b5:e5:8c:b8:0c:12:d2:26:94:aa:
65:ce:87:6a:67:dd:31:c6:f4:f8:44:cd:5b:0b:23:
90:9c:d5:f7:40:48:5f:f6:f1:2a:ad:8d:41:73:54:
ec:39:3c:f5:ed:7e:e4:3f:f2:c5:83:53:d3:97:b2:
fe:ac:e1:07:3e:42:ed:ef:f7:00:70:e1:aa:b8:d6:
d3:25:f5:2a:56:b6:ba:4e:d5:4d:60:1b:63:7f:48:
5c:6d:d0:16:da:30:7d:eb:54:ea:8a:c5:5a:2d:df:
0f:8c:dd:94:6f:a7:52:d8:59:e3:42:2a:2a:7e:c4:
e4:7d:3b:5e:3f:a6:4a:93:7b:c3:87:d1:30:8e:d1:
8c:8b:4f:97:a5:0b:16:11:29:c9:ad:f1:4b:08:80:
80:03:71:1a:fe:a8:07:ff:86:7b:df:63:c1:8d:cd:
4d:6c:a6:05:39:81:de:60:22:84:35:18:f3:3a:b9:
da:63:cf:d3:c5:fd:39:e8:6b:cd:60:6f:d7:55:40:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:FC:9F:D9:07:C3:C8:BF:52:6F:4B:12:A1:74:E5:29:41:5B:5C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/au78n9kHw8i_Um9LEqF05SlBW1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/22
109.122.204.0/24
109.122.208.0/24
109.122.210.0/24
109.122.214.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:6f:54:0b:42:17:14:47:33:b2:31:d8:b0:4d:ca:88:f8:ae:
32:44:93:47:c8:45:74:d8:0b:36:f6:a9:89:6b:c7:71:2a:2d:
8d:de:74:23:ad:bf:0b:03:ff:7d:ad:00:41:4f:82:03:df:ba:
9e:0e:59:c1:5b:73:e7:cc:2d:c7:01:74:3b:78:f3:af:42:fd:
7f:7b:4c:7b:8d:34:9e:0e:52:cd:16:e0:bd:4a:5a:35:74:20:
5c:0f:ae:28:c3:2d:89:da:46:e0:a4:e6:a9:8c:c3:ed:65:7a:
bc:d7:a8:1a:4d:2c:14:0a:ac:b0:4f:2d:5c:57:ad:ed:74:19:
87:6c:02:b5:aa:24:68:08:b9:a7:a6:7e:9c:6d:69:df:27:77:
53:2c:e7:1d:a7:62:fd:f9:a0:84:10:85:ad:51:99:a3:d3:9b:
a7:33:be:c9:1a:93:bc:1c:31:f7:4d:6d:73:aa:22:c6:74:23:
15:c7:4d:6d:d3:a8:df:a7:1f:f1:f1:64:b1:13:59:c0:7b:39:
27:84:4a:97:a9:f0:a2:5f:b9:2f:d0:46:d3:6d:df:81:ed:c0:
2e:40:8c:03:df:84:57:d6:cc:f7:c2:26:63:8f:83:a1:47:e1:
87:05:d0:a2:40:b5:63:a5:09:8a:f8:e0:8d:e6:de:52:4f:87:
68:87:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:09:10 2025 by rpki-client