Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bTxpSubn6TvN1SaKOOx1UfniJtY.roa
File: bTxpSubn6TvN1SaKOOx1UfniJtY.roa (raw, json)
Hash identifier: 2INSk5Uz5Pa+1EmN0gGsQs9eppYT0MXKZ4gNR7nvA0E=
Subject key identifier: 6D:3C:69:4A:E6:E7:E9:3B:CD:D5:26:8A:38:EC:75:51:F9:E2:26:D6
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5CD12ED106497E33DA7EE117382F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bTxpSubn6TvN1SaKOOx1UfniJtY.roa
Signing time: Sun 01 Jan 2023 21:44:47 +0000
ROA not before: Sun 01 Jan 2023 21:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 109.122.206.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5c:d1:2e:d1:06:49:7e:33:da:7e:e1:17:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d3c694ae6e7e93bcdd5268a38ec7551f9e226d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:10:27:3b:92:34:85:42:c5:c2:46:77:44:
f9:6a:a6:f8:02:48:01:2f:e5:79:cd:ec:36:ff:3c:
11:bb:e8:26:af:e8:1a:cc:87:6b:c3:15:2d:ae:01:
84:4c:df:f9:57:d3:93:0c:25:6f:58:65:06:d5:34:
29:bd:37:5e:3a:be:b3:0e:9d:5e:68:01:10:9d:67:
e4:4e:97:95:dd:a4:d8:d4:5c:70:27:0d:be:d2:25:
c0:a5:67:24:49:f7:55:dc:aa:41:54:a2:ff:0a:75:
bc:e7:06:08:50:0a:87:bc:57:82:4d:cd:14:79:64:
ef:ee:51:9b:d9:05:af:94:00:fb:d5:40:2f:54:01:
57:6a:cf:2b:09:55:27:fd:7b:43:86:be:03:ae:64:
38:d7:25:da:35:30:c2:c2:cd:19:ab:ac:6f:59:9c:
f4:05:98:9f:97:c2:d7:85:2c:f2:63:5e:63:b3:89:
d4:0b:18:6e:e0:43:08:42:b3:b1:d7:06:ca:44:84:
16:d4:0e:18:e5:fd:cb:0f:ee:c2:8c:79:a3:b8:e6:
7c:dc:cc:ef:d5:38:2f:0a:f6:20:fd:56:ed:bc:4a:
80:6e:8b:10:99:d1:f3:42:06:7a:3d:a2:8c:0a:60:
97:93:5b:a8:07:35:13:e1:e3:00:ed:a3:51:32:3d:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:69:4A:E6:E7:E9:3B:CD:D5:26:8A:38:EC:75:51:F9:E2:26:D6
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/bTxpSubn6TvN1SaKOOx1UfniJtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.202.0/24
109.122.206.0/24
109.122.212.0/24
Signature Algorithm: sha256WithRSAEncryption
83:44:c9:52:aa:7f:bc:ea:e8:71:38:d2:62:96:80:35:2e:19:
d1:9a:a1:87:ad:f6:33:6d:66:ad:f9:02:44:8f:b2:ec:55:0d:
27:6e:b9:6d:21:2a:d0:7a:fa:5a:62:99:00:b4:11:6f:30:2d:
f8:be:5d:71:d4:a1:9f:57:fe:b4:fa:d3:01:40:5e:e6:ef:1b:
a5:d9:54:e9:61:9f:23:cb:07:a6:da:59:44:24:8e:63:93:1e:
d0:5e:ce:c5:98:1d:a0:95:2a:25:35:b8:3c:05:3b:c5:e0:b9:
52:14:6c:a2:2b:dc:a6:20:5d:0d:83:32:4e:f9:39:4e:0d:48:
13:da:a7:30:49:3d:a5:e4:11:e7:21:bb:28:01:25:c9:43:fb:
3a:7c:15:d8:26:b3:d6:f0:f2:33:51:30:01:ab:01:ae:69:fc:
ac:e0:00:84:2c:6c:73:58:99:79:1f:1e:1b:f8:4f:60:6e:ba:
18:a7:5b:95:59:f0:a5:e9:fd:ba:c5:4b:86:dc:95:fc:f5:8f:
c2:92:63:75:40:bb:5b:88:23:ab:3c:6f:72:bb:5c:43:5a:85:
54:1a:d2:86:a9:e3:fa:a2:5f:3d:e0:b9:3b:13:44:4f:d3:9f:
42:f8:20:1a:43:d6:8d:25:80:70:6f:d9:26:cb:66:e1:df:13:
0e:ff:fa:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvS1zRLtEGSX4z2n7hFzgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTAxMjE0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDNjNjk0YWU2ZTdlOTNiY2RkNTI2OGEzOGVjNzU1MWY5ZTIyNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljQQJzuSNIVCxcJGd0T5aqb4AkgB
L+V5zew2/zwRu+gmr+gazIdrwxUtrgGETN/5V9OTDCVvWGUG1TQpvTdeOr6zDp1e
aAEQnWfkTpeV3aTY1FxwJw2+0iXApWckSfdV3KpBVKL/CnW85wYIUAqHvFeCTc0U
eWTv7lGb2QWvlAD71UAvVAFXas8rCVUn/XtDhr4DrmQ41yXaNTDCws0Zq6xvWZz0
BZifl8LXhSzyY15js4nUCxhu4EMIQrOx1wbKRIQW1A4Y5f3LD+7CjHmjuOZ83Mzv
1TgvCvYg/VbtvEqAbosQmdHzQgZ6PaKMCmCXk1uoBzUT4eMA7aNRMj0+fQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG08aUrm5+k7zdUmijjsdVH54ibWMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvYlR4cFN1Ym42VHZOMVNhS09PeDFVZm5pSnRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXrKAwQA
bXrOAwQAbXrUMA0GCSqGSIb3DQEBCwUAA4IBAQCDRMlSqn+86uhxONJiloA1LhnR
mqGHrfYzbWat+QJEj7LsVQ0nbrltISrQevpaYpkAtBFvMC34vl1x1KGfV/60+tMB
QF7m7xul2VTpYZ8jywem2llEJI5jkx7QXs7FmB2glSolNbg8BTvF4LlSFGyiK9ym
IF0NgzJO+TlODUgT2qcwST2l5BHnIbsoASXJQ/s6fBXYJrPW8PIzUTABqwGuafys
4ACELGxzWJl5Hx4b+E9gbroYp1uVWfCl6f26xUuG3JX89Y/CkmN1QLtbiCOrPG9y
u1xDWoVUGtKGqeP6ol894Lk7E0RP059C+CAaQ9aNJYBwb9kmy2bh3xMO//ot
-----END CERTIFICATE-----
Generated at Tue May 13 21:12:46 2025 by rpki-client