Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/cNndmsglVvvUkmzWY_KhWHNNrrU.roa
File: cNndmsglVvvUkmzWY_KhWHNNrrU.roa (raw, json)
Hash identifier: 1OOGNfXSJXmagkFVxvRV5laxCDYBbX7yTDC2HGDa10s=
Subject key identifier: 70:D9:DD:9A:C8:25:56:FB:D4:92:6C:D6:63:F2:A1:58:73:4D:AE:B5
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01846A759FE1501F85130260BBBD14A5FECE
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/cNndmsglVvvUkmzWY_KhWHNNrrU.roa
Signing time: Sat 12 Nov 2022 06:10:04 +0000
ROA not before: Sat 12 Nov 2022 06:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39368
IP address blocks: 109.122.199.0/24 maxlen: 24
109.122.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6a:75:9f:e1:50:1f:85:13:02:60:bb:bd:14:a5:fe:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 12 06:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70d9dd9ac82556fbd4926cd663f2a158734daeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2e:81:1d:63:ad:f4:bb:f2:7a:da:22:cc:a8:
54:eb:86:ed:a3:3e:25:f0:a6:cd:77:c6:80:f9:0d:
26:45:02:ad:1e:c0:83:cd:4d:37:43:b9:f7:eb:e9:
e6:04:34:f8:4a:7e:24:ce:5a:04:3a:02:87:51:c0:
c2:ea:81:fa:20:7f:46:e0:32:e3:15:4e:79:1a:a6:
5d:40:dc:92:8b:62:dd:4a:79:3f:b7:c7:a0:1a:08:
b2:4a:d5:9e:9c:5f:6c:0a:e1:5d:4c:ce:66:ea:dd:
79:bb:07:16:4e:47:b5:97:16:9a:53:bc:75:ce:22:
92:cf:df:4f:f2:04:f1:0a:ca:a5:f5:76:8f:61:33:
9d:20:97:11:77:7e:f9:7b:07:e1:8f:71:89:12:7d:
27:2a:ab:e1:6e:49:49:43:ad:3f:bf:98:e4:0d:65:
3d:10:2a:21:ae:16:3b:64:1b:70:46:bd:23:64:03:
eb:4e:a9:c1:2e:ef:d7:41:7a:15:56:bb:4a:f2:5f:
87:09:2b:f1:9d:55:ac:12:1a:41:12:2e:2d:34:d9:
c5:74:84:13:ca:eb:70:95:81:d4:5a:22:a0:4a:8e:
12:54:d3:73:1e:25:9f:e2:3f:58:f0:52:a7:c4:42:
01:1b:9c:f0:13:23:df:1b:6e:24:4e:52:0e:37:16:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:DD:9A:C8:25:56:FB:D4:92:6C:D6:63:F2:A1:58:73:4D:AE:B5
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/cNndmsglVvvUkmzWY_KhWHNNrrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.199.0/24
109.122.209.0/24
Signature Algorithm: sha256WithRSAEncryption
02:64:ca:12:60:28:8b:d8:5d:b2:57:55:14:6e:1e:34:15:40:
19:a2:98:92:42:ea:a8:af:85:4d:e5:d5:9d:ed:01:2e:08:67:
2e:6c:65:66:99:bf:3d:4d:99:34:f7:90:56:b5:27:f5:74:c0:
8d:21:61:92:f5:6d:be:5e:7b:f7:47:dc:cb:4c:03:ff:c4:1f:
80:0a:31:64:8e:68:b2:a7:62:b0:95:60:64:c2:cc:be:47:ad:
4f:6e:d6:64:09:dd:05:45:7e:c8:24:4c:34:4f:b6:e5:32:1e:
34:50:02:bb:81:76:e3:42:7e:6c:12:25:26:e6:b2:75:c7:9c:
cd:b2:c5:28:5c:d2:0d:ba:8d:fa:75:bf:06:0e:92:c8:bf:2a:
ed:9c:60:58:ce:3a:15:39:98:3d:cb:88:f1:ad:ae:37:6a:df:
94:39:25:7b:3c:59:ca:85:ae:db:a4:1b:8f:61:86:6a:13:6d:
bf:3d:47:16:08:60:bc:65:27:ed:0a:4d:f1:bf:07:b0:e5:9f:
5a:0c:c5:ce:9c:82:65:fc:48:f2:6b:ef:4d:b6:f1:cd:4f:f4:
d9:8b:1f:55:1e:92:45:21:4a:25:eb:bd:17:2f:49:96:68:7f:
91:f6:4c:78:ef:37:15:da:02:9c:bb:60:36:32:0d:8d:f2:de:
10:15:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:50:15 2025 by rpki-client