Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/fhMD3Lfr4sNvztq6DuiuMJY8-IQ.roa
File: fhMD3Lfr4sNvztq6DuiuMJY8-IQ.roa (raw, json)
Hash identifier: C5gMtMlLVblmP6npvNZekJ1/JeJjGjsJUqoi0QG88hY=
Subject key identifier: 7E:13:03:DC:B7:EB:E2:C3:6F:CE:DA:BA:0E:E8:AE:30:96:3C:F8:84
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01846A75A0CCE7571DA69C256C24D3E333FF
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/fhMD3Lfr4sNvztq6DuiuMJY8-IQ.roa
Signing time: Sat 12 Nov 2022 06:10:04 +0000
ROA not before: Sat 12 Nov 2022 06:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 109.122.194.0/24 maxlen: 24
109.122.206.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6a:75:a0:cc:e7:57:1d:a6:9c:25:6c:24:d3:e3:33:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 12 06:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e1303dcb7ebe2c36fcedaba0ee8ae30963cf884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:ed:69:ca:e3:26:aa:db:2e:66:78:e3:92:
55:53:0e:3c:30:cd:59:fa:ae:9f:9f:f4:d1:7f:81:
93:e6:4b:96:c6:71:8d:39:a5:85:29:d9:9b:29:cf:
4c:52:21:ad:11:46:ec:8c:c3:29:f1:65:39:ec:2a:
d8:51:db:4b:eb:b3:b0:be:2a:c4:f9:3c:20:f7:44:
dc:5d:51:43:c7:21:c7:80:9f:f6:f4:a9:7b:1f:69:
6f:4f:7a:52:40:c5:cc:23:52:c8:b3:70:02:e0:b5:
de:9a:97:36:30:2a:ec:1f:79:9c:7c:42:ff:74:91:
40:05:de:21:e3:9b:59:80:93:d3:1f:92:f6:a0:13:
7c:48:fe:0f:3d:ff:aa:ae:2a:3f:55:9b:11:90:a5:
13:5d:ff:b0:5d:f6:b5:f8:a1:5e:4a:54:6d:d0:0b:
d4:be:de:69:c2:cd:d0:ff:90:fc:d6:2f:f3:c2:e2:
07:9f:ed:a9:41:23:c0:df:15:e7:f9:0c:0e:d4:90:
00:ee:50:0c:f9:58:29:37:65:55:c2:2d:67:bd:97:
ca:63:38:2f:2f:86:3f:86:e5:55:7d:d0:cd:7e:65:
1f:a3:23:a9:49:42:4f:d8:85:12:f0:a7:4e:ee:2a:
0d:26:69:b4:68:5a:71:bf:95:96:d8:55:87:1a:7e:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:03:DC:B7:EB:E2:C3:6F:CE:DA:BA:0E:E8:AE:30:96:3C:F8:84
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/fhMD3Lfr4sNvztq6DuiuMJY8-IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
109.122.206.0/24
109.122.208.0/24
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
44:73:a4:31:91:a5:03:c7:0f:79:57:63:b9:ef:b0:65:27:d5:
ec:6f:5a:f5:07:aa:94:a8:42:f1:da:44:13:b0:e5:17:32:c3:
4b:c5:90:6c:82:8b:91:e6:3a:39:89:1c:09:68:d0:28:a3:df:
ac:b5:78:4f:c4:f6:cf:fe:be:ed:e3:bd:da:b7:29:bb:f2:92:
5d:11:31:b4:5d:85:63:81:ff:19:2e:24:1a:01:70:15:52:df:
14:94:57:c9:79:ff:78:e7:14:8e:3f:ac:e0:1e:b1:47:2b:4c:
2d:3c:66:8f:1e:e1:17:a3:d2:cd:e7:c2:a4:3a:bb:38:a2:d6:
2d:c5:bb:e9:e6:f8:51:e2:2a:cb:01:4d:e8:6c:77:d4:11:00:
dc:14:16:e8:42:c4:a1:f8:99:b7:e9:7c:a0:85:2b:3d:47:ae:
cf:fe:7f:cf:56:d8:5a:08:b5:0a:3b:9e:31:16:53:5f:de:09:
c3:ee:fe:cb:74:01:d3:a5:ff:57:bd:30:2f:70:ca:d5:d2:27:
4b:1b:cc:c5:39:42:a9:0b:61:dc:ce:e8:de:32:fa:96:46:08:
0a:6d:1f:72:8d:6f:16:d9:f1:f3:36:15:91:cd:cd:ef:9c:de:
d5:cc:93:ea:ef:8a:17:31:3e:79:b4:75:f0:86:c4:42:89:e5:
a4:0e:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:03:03 2025 by rpki-client