Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bH6DDwiTbkOz8p4VV_SLdeSIOqg.roa
File: bH6DDwiTbkOz8p4VV_SLdeSIOqg.roa (raw, json)
Hash identifier: coHSdYcvnQZdpZnRTkOLa7RlrmaqHkjVsfDyCPlgK3o=
Subject key identifier: 6C:7E:83:0F:08:93:6E:43:B3:F2:9E:15:57:F4:8B:75:E4:88:3A:A8
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01851FCCD264EB8F1727BEE176422AC1A624
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bH6DDwiTbkOz8p4VV_SLdeSIOqg.roa
Signing time: Sat 17 Dec 2022 11:16:34 +0000
ROA not before: Sat 17 Dec 2022 11:16:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 109.122.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:cc:d2:64:eb:8f:17:27:be:e1:76:42:2a:c1:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 17 11:16:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c7e830f08936e43b3f29e1557f48b75e4883aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:d0:87:23:9d:e7:c8:fc:c5:24:6d:a9:c3:
ab:b4:94:d3:57:b2:19:f7:fd:60:3a:ab:8f:52:72:
e6:41:42:cc:1e:16:09:48:09:99:12:ee:93:a4:ba:
ce:e0:44:ee:0f:0f:88:48:ab:a0:3b:70:6b:d6:0d:
2a:a4:80:45:e9:8f:32:04:e8:c4:c3:c2:a1:f6:32:
ec:d0:f2:99:67:da:b6:77:9c:10:b6:44:57:d8:d5:
d2:4d:57:cd:f7:ea:2f:5c:f8:4c:f1:80:59:d4:6c:
ea:c2:94:87:6c:22:31:86:c4:35:06:4a:6a:b6:83:
79:bd:6d:f6:c7:7a:bf:5f:d8:41:c0:2b:68:07:e3:
6b:39:72:4e:f0:77:36:d1:2d:17:34:53:bb:be:e3:
fb:8a:ac:b6:47:3b:0f:4d:c0:4c:ca:d6:d9:5e:36:
f0:36:1e:b1:e0:61:45:a2:8e:62:e5:e3:82:3d:2d:
b3:31:c2:fa:ad:4e:5a:f2:89:06:22:e5:fd:40:84:
ec:14:a7:f8:a6:04:76:87:d9:05:af:ed:f1:2a:96:
59:8e:85:df:8b:f7:53:ed:27:b5:2d:3c:69:fa:d5:
c8:b0:a8:d1:4b:29:04:2c:e8:e5:c2:bd:03:74:7a:
ce:2b:4d:62:fb:a3:22:75:ba:21:10:9a:63:69:0e:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:83:0F:08:93:6E:43:B3:F2:9E:15:57:F4:8B:75:E4:88:3A:A8
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bH6DDwiTbkOz8p4VV_SLdeSIOqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:09:3f:5a:e3:1c:42:35:0a:b9:f9:e6:72:ce:f2:dd:78:79:
d2:df:1a:00:f8:63:c6:d4:6d:1a:14:bf:19:12:f5:83:9e:8d:
9f:f8:47:63:d2:68:a7:1f:05:69:f8:5f:7b:9c:61:22:9d:c4:
9a:87:3a:7c:51:99:43:a3:69:b0:9a:3a:8e:2a:01:4e:ba:63:
ae:5d:8f:0e:d4:15:03:c2:f0:a9:b5:98:6b:a7:b5:2a:f6:27:
1f:b8:8d:77:bf:97:77:f8:78:49:75:83:e5:2a:7c:35:8b:e1:
82:78:86:5f:4e:ac:6e:f8:85:12:ca:a4:0c:45:5c:9d:55:0d:
3d:88:b9:06:72:cd:68:95:4f:f3:86:00:a2:52:99:b2:db:db:
24:39:41:89:58:72:f5:9c:8b:14:4f:4a:ed:4f:40:c0:f6:47:
d7:64:cd:1e:1f:9b:65:52:db:db:25:e2:4d:af:6c:39:dc:6b:
71:8f:ac:2c:9a:3f:ab:a0:7c:ce:91:85:23:6a:17:b8:5a:d1:
97:f3:19:9d:9e:b2:19:b9:b0:b7:51:93:0d:6a:17:d9:18:b0:
14:ac:2f:41:68:66:83:5b:95:3f:cb:43:53:b3:a6:18:4f:0e:
55:b0:2b:89:f5:55:7b:1f:26:55:f0:77:4d:97:ea:4f:11:23:
57:02:5e:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUfzNJk648XJ77hdkIqwaYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMjE3MTExNjM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzdlODMwZjA4OTM2ZTQzYjNmMjllMTU1N2Y0OGI3NWU0ODgzYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid3QhyOd58j8xSRtqcOrtJTTV7IZ
9/1gOquPUnLmQULMHhYJSAmZEu6TpLrO4ETuDw+ISKugO3Br1g0qpIBF6Y8yBOjE
w8Kh9jLs0PKZZ9q2d5wQtkRX2NXSTVfN9+ovXPhM8YBZ1GzqwpSHbCIxhsQ1Bkpq
toN5vW32x3q/X9hBwCtoB+NrOXJO8Hc20S0XNFO7vuP7iqy2RzsPTcBMytbZXjbw
Nh6x4GFFoo5i5eOCPS2zMcL6rU5a8okGIuX9QITsFKf4pgR2h9kFr+3xKpZZjoXf
i/dT7Se1LTxp+tXIsKjRSykELOjlwr0DdHrOK01i+6MidbohEJpjaQ4Q7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGx+gw8Ik25Ds/KeFVf0i3XkiDqoMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvYkg2RER3aVRia096OHA0VlZfU0xkZVNJT3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrbMA0G
CSqGSIb3DQEBCwUAA4IBAQB8CT9a4xxCNQq5+eZyzvLdeHnS3xoA+GPG1G0aFL8Z
EvWDno2f+Edj0minHwVp+F97nGEincSahzp8UZlDo2mwmjqOKgFOumOuXY8O1BUD
wvCptZhrp7Uq9icfuI13v5d3+HhJdYPlKnw1i+GCeIZfTqxu+IUSyqQMRVydVQ09
iLkGcs1olU/zhgCiUpmy29skOUGJWHL1nIsUT0rtT0DA9kfXZM0eH5tlUtvbJeJN
r2w53Gtxj6wsmj+roHzOkYUjahe4WtGX8xmdnrIZubC3UZMNahfZGLAUrC9BaGaD
W5U/y0NTs6YYTw5VsCuJ9VV7HyZV8HdNl+pPESNXAl7w
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:07:01 2025 by rpki-client