Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/b4dbEFnvwsDXONPsBR9x8c8KEiA.roa
File: b4dbEFnvwsDXONPsBR9x8c8KEiA.roa (raw, json)
Hash identifier: ijCSSs+c/ltP6myZZiJ1XMN2VbPMHkoNx55cd4kUrmY=
Subject key identifier: 6F:87:5B:10:59:EF:C2:C0:D7:38:D3:EC:05:1F:71:F1:CF:0A:12:20
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183FFC2ACD338303B7AC816E41EA56F17BE
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/b4dbEFnvwsDXONPsBR9x8c8KEiA.roa
Signing time: Sat 22 Oct 2022 12:54:51 +0000
ROA not before: Sat 22 Oct 2022 12:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 109.122.200.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:c2:ac:d3:38:30:3b:7a:c8:16:e4:1e:a5:6f:17:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 22 12:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f875b1059efc2c0d738d3ec051f71f1cf0a1220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:6d:bb:9e:ea:5c:9f:dc:a2:35:39:29:09:
85:41:db:ed:4a:16:81:73:31:f7:6d:4d:b3:11:af:
54:5a:2b:8c:96:06:1e:60:d6:5f:dd:6f:e9:20:9a:
8f:97:b7:d4:9e:af:e2:18:0f:a5:9f:72:08:3b:8b:
30:20:25:76:a7:d5:a8:25:20:38:3e:21:bb:8e:5d:
ec:8f:d4:34:e1:b3:2a:32:d2:84:d3:c1:ae:f0:cb:
28:58:e5:3c:c1:fb:5a:7a:88:37:93:3d:1c:45:77:
7e:5d:bd:05:48:fb:a4:f9:2d:e7:76:16:ec:84:dc:
dc:a6:d8:f5:78:17:74:d3:88:17:a2:cd:35:82:7d:
8b:04:91:0f:19:1f:de:69:b0:40:96:9b:60:84:f6:
a1:3e:21:11:e9:d0:d0:bf:c0:a6:15:11:44:b2:1e:
95:e3:a3:14:5f:1a:85:be:4c:76:0c:80:20:77:e0:
98:81:3f:df:88:4b:ef:d2:4e:81:8a:0d:79:8a:77:
bf:b8:d9:93:1a:2d:b5:a8:57:95:7c:95:a4:61:f0:
ed:6f:13:4b:69:8c:12:17:b0:be:8f:ad:e0:79:1c:
3b:3f:ea:3a:22:16:6c:2c:0a:a7:c7:c3:5a:04:55:
5d:ac:73:2c:a9:01:4a:58:1a:fb:3b:92:c4:c3:f8:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:5B:10:59:EF:C2:C0:D7:38:D3:EC:05:1F:71:F1:CF:0A:12:20
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/b4dbEFnvwsDXONPsBR9x8c8KEiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
109.122.212.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cb:57:c6:0c:81:f9:85:e5:6e:fa:52:17:5a:81:37:a5:db:
a8:e6:d3:2f:07:35:d0:d3:9a:f6:f1:08:cf:de:bd:63:9d:14:
4d:44:4c:8a:8f:41:af:ea:ba:39:c1:01:dc:c4:c8:97:be:d5:
10:d9:f3:b6:ee:18:09:40:47:ef:18:c5:b7:91:c3:f5:5c:97:
f6:58:20:f0:8e:87:31:ae:2a:cd:12:9c:10:7e:9a:9d:eb:94:
7b:d0:63:7b:61:38:2e:c2:45:69:de:54:b6:dc:07:93:24:dd:
a9:1e:e4:4e:46:6e:c4:f7:47:ee:83:02:f2:53:ff:f7:42:80:
39:4d:0c:40:59:6e:9c:35:dd:67:cd:d8:93:af:05:45:a7:29:
30:b4:b3:01:15:90:d9:92:0b:0f:24:83:f3:58:04:ef:18:b9:
de:5d:cd:d1:b8:8e:71:66:88:a9:83:16:ce:1f:3a:bd:6e:29:
cf:46:79:2a:ec:b9:0a:4b:c3:42:51:91:79:72:c7:5d:a8:bf:
5e:2b:e6:36:0f:0c:3d:26:e8:ea:0f:40:1e:5a:d4:ad:98:b1:
dd:3e:68:5f:1f:c1:3d:4d:ba:16:ea:4e:d0:ba:fc:71:de:1d:
1b:eb:41:59:54:e8:fc:67:9f:67:ea:62:ad:4a:89:46:9c:cf:
75:04:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:13:58 2025 by rpki-client