Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/d8cKMFK1XTWo6_pPYhxUSYv09fU.roa
File: d8cKMFK1XTWo6_pPYhxUSYv09fU.roa (raw, json)
Hash identifier: TZAshEOAXFh41b0O5epi/qRPXOVsEr62KM1d8rpP5SA=
Subject key identifier: 77:C7:0A:30:52:B5:5D:35:A8:EB:FA:4F:62:1C:54:49:8B:F4:F5:F5
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 070025A9
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/d8cKMFK1XTWo6_pPYhxUSYv09fU.roa
Signing time: Fri 20 May 2022 14:29:29 +0000
ROA not before: Fri 20 May 2022 14:29:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
185.207.4.0/22 maxlen: 24
109.122.206.0/23 maxlen: 24
109.122.200.0/22 maxlen: 24
109.122.212.0/23 maxlen: 24
109.122.209.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.218.0/23 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117450153 (0x70025a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: May 20 14:29:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77c70a3052b55d35a8ebfa4f621c54498bf4f5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:1a:7d:ae:30:54:6a:f5:5a:b9:21:02:d5:
0a:57:82:21:86:fe:06:33:08:bf:39:9a:ab:f4:db:
e5:ae:e8:92:1d:df:f8:3d:d1:c1:08:24:b3:7c:2c:
e7:c2:3a:c8:d7:4d:80:1d:ba:4a:1d:f0:9c:26:a9:
97:c4:44:80:03:79:c2:12:c6:d9:a3:31:2f:e5:e5:
e4:e9:b5:5e:c4:8d:19:f4:f2:59:f4:aa:10:f3:c8:
0b:b2:07:b7:aa:89:45:ea:26:27:e4:8c:2b:25:a7:
91:4f:17:bc:ed:8e:e8:9e:4b:fe:2c:fe:ca:c0:47:
c7:ef:80:9c:26:0d:8b:1b:79:a3:e1:1c:bb:88:cd:
3f:70:a7:1b:ad:71:8a:c8:98:b1:a0:73:2b:24:26:
37:4d:dc:c4:b9:25:e4:15:6e:03:9c:4d:a6:77:f9:
24:6b:1c:05:a1:35:fe:3e:eb:d2:f3:f4:6d:83:b8:
bb:a6:d8:fb:06:ac:d5:c5:e1:10:a4:e3:05:23:e5:
8d:4b:04:8b:89:25:84:0f:56:f8:8b:19:9f:b7:70:
c8:68:f5:2a:0e:77:47:24:85:07:c4:34:fe:ef:0f:
8b:1e:38:e6:63:a7:ce:56:fd:2a:6d:18:3c:b8:7b:
c0:72:97:03:12:5f:dc:6c:b0:33:4b:c5:ba:d5:48:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:0A:30:52:B5:5D:35:A8:EB:FA:4F:62:1C:54:49:8B:F4:F5:F5
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/d8cKMFK1XTWo6_pPYhxUSYv09fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.205.0-109.122.207.255
109.122.209.0/24
109.122.211.0-109.122.213.255
109.122.216.0/24
109.122.218.0/23
109.122.223.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3d:e8:05:ff:5a:1a:6e:3f:85:9f:1c:bb:82:e7:7e:43:0a:
b8:79:a0:7b:0a:36:eb:4b:82:fb:21:34:92:98:10:46:1e:5c:
8f:15:30:88:49:57:17:1c:23:7d:89:65:04:ea:e4:6e:86:52:
db:b7:f0:67:0e:36:25:40:1a:53:9d:8d:d6:24:46:cd:f2:a5:
67:0f:52:f9:a5:a7:4a:19:4d:59:fb:56:b2:72:01:63:00:87:
cc:1f:b6:a0:fb:73:82:dc:24:e3:fb:9f:b5:f4:e4:39:64:d5:
2f:a0:93:3f:fb:fd:37:76:09:53:49:91:31:d7:af:85:c4:5e:
54:5c:d1:63:59:13:54:ac:fc:1c:7c:57:04:e9:8c:7b:4f:7d:
2c:a1:62:51:66:8d:3c:61:5e:53:4f:b9:86:6f:40:02:43:e7:
c8:9d:b3:19:a3:c7:79:ef:c2:c7:4f:19:3b:56:2c:f1:b4:dc:
96:1e:4b:c9:ec:82:ae:01:a8:63:fc:c8:d2:f2:45:ad:34:7b:
6d:ae:d5:c4:73:15:22:ae:47:58:18:26:fc:32:8a:a9:5e:a8:
62:dd:4d:2b:3a:de:3e:ef:1c:d5:4b:b2:11:20:e2:b9:fc:47:
57:05:44:90:8e:5f:09:1c:b7:f5:11:fa:38:5b:a7:0c:7b:57:
79:4f:ad:d0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIEBwAlqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGJhNWI3NDRlOGRmNTAzZDk0ZjQxZmIyOTAyNDI4OWM2ZmE1ZTViMB4XDTIyMDUy
MDE0MjkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdjNzBhMzA1MmI1
NWQzNWE4ZWJmYTRmNjIxYzU0NDk4YmY0ZjVmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwuGn2uMFRq9Vq5IQLVCleCIYb+BjMIvzmaq/Tb5a7okh3f
+D3RwQgks3ws58I6yNdNgB26Sh3wnCapl8REgAN5whLG2aMxL+Xl5Om1XsSNGfTy
WfSqEPPIC7IHt6qJReomJ+SMKyWnkU8XvO2O6J5L/iz+ysBHx++AnCYNixt5o+Ec
u4jNP3CnG61xisiYsaBzKyQmN03cxLkl5BVuA5xNpnf5JGscBaE1/j7r0vP0bYO4
u6bY+was1cXhEKTjBSPljUsEi4klhA9W+IsZn7dwyGj1Kg53RySFB8Q0/u8Pix44
5mOnzlb9Km0YPLh7wHKXAxJf3GywM0vFutVIEScCAwEAAaOCAkkwggJFMB0GA1Ud
DgQWBBR3xwowUrVdNajr+k9iHFRJi/T19TAfBgNVHSMEGDAWgBRQult0To31A9lP
QfspAkKJxvpeWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMcGJkRTZOOVFQWlQwSDdLUUpDaWNiNlhscy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvN2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8x
L2Q4Y0tNRksxWFRXbzZfcFBZaHhVU1l2MDlmVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
N2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8xL1VMcGJkRTZOOVFQ
WlQwSDdLUUpDaWNiNlhscy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBf
BggrBgEFBQcBBwEB/wRQME4wTAQCAAEwRgMEAG16wwMEAm16yDAMAwQAbXrNAwQE
bXrAAwQAbXrRMAwDBABtetMDBAFtetQDBABtetgDBAFtetoDBABtet8DBAK5zwQw
DQYJKoZIhvcNAQELBQADggEBAIU96AX/WhpuP4WfHLuC535DCrh5oHsKNutLgvsh
NJKYEEYeXI8VMIhJVxccI32JZQTq5G6GUtu38GcONiVAGlOdjdYkRs3ypWcPUvml
p0oZTVn7VrJyAWMAh8wftqD7c4LcJOP7n7X05Dlk1S+gkz/7/Td2CVNJkTHXr4XE
XlRc0WNZE1Ss/Bx8VwTpjHtPfSyhYlFmjTxhXlNPuYZvQAJD58idsxmjx3nvwsdP
GTtWLPG03JYeS8nsgq4BqGP8yNLyRa00e22u1cRzFSKuR1gYJvwyiqleqGLdTSs6
3j7vHNVLshEg4rn8R1cFRJCOXwkct/UR+jhbpwx7V3lPrdA=
-----END CERTIFICATE-----
Generated at Tue May 13 20:40:34 2025 by rpki-client