Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/g1MceMAQ-bHi13l-5I5WCcmKkek.roa
File: g1MceMAQ-bHi13l-5I5WCcmKkek.roa (raw, json)
Hash identifier: P4J4LO7/Gxl4CpvT5gqZLjj0gv2eur1bqmKAQn8jGrU=
Subject key identifier: 83:53:1C:78:C0:10:F9:B1:E2:D7:79:7E:E4:8E:56:09:C9:8A:91:E9
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183B1B2A1DF8C1F36D7C58842365E64ECDE
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/g1MceMAQ-bHi13l-5I5WCcmKkek.roa
Signing time: Fri 07 Oct 2022 09:06:57 +0000
ROA not before: Fri 07 Oct 2022 09:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210574
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:b2:a1:df:8c:1f:36:d7:c5:88:42:36:5e:64:ec:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 7 09:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83531c78c010f9b1e2d7797ee48e5609c98a91e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:b7:32:05:2a:de:e4:bf:f4:1f:7c:4d:a8:
c4:5f:97:b1:dc:33:aa:0e:ca:9e:74:00:8a:7c:74:
63:58:36:34:95:d9:c5:42:85:ef:2d:fa:34:bc:b2:
56:9a:1e:4c:e9:4a:bc:3b:9f:68:bc:ae:e1:bb:ca:
ed:bd:9d:e0:8d:7e:f2:f8:01:31:cd:31:88:1d:26:
ff:b1:da:1e:88:01:63:42:35:c0:01:1e:f2:3a:87:
c5:fc:32:21:15:8e:c9:32:52:f6:bd:ba:1d:d2:02:
ca:dd:2f:92:df:43:50:b7:8e:ec:f2:3e:0e:a2:d6:
e9:96:50:7b:3d:9f:9b:c2:76:d0:87:e2:b6:ca:8d:
be:d7:88:a8:45:89:16:12:03:51:f1:67:2c:5f:1f:
d6:96:34:65:39:08:b7:ee:6c:b7:af:6f:ad:89:f4:
1a:da:fe:bf:3f:64:67:fd:02:56:7e:ab:d6:e0:61:
6a:ec:2f:fd:f0:37:bd:da:a1:7c:69:58:0b:8e:4a:
02:00:f4:ec:b9:19:6b:68:7b:27:42:86:81:b6:39:
e9:e4:7e:70:37:ac:02:01:25:67:af:ca:35:c7:47:
87:da:0b:01:db:2a:f3:70:ec:a8:a4:2f:09:e8:88:
da:1d:69:7e:f4:49:3d:f2:b4:ac:5e:3b:2d:e0:33:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:1C:78:C0:10:F9:B1:E2:D7:79:7E:E4:8E:56:09:C9:8A:91:E9
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/g1MceMAQ-bHi13l-5I5WCcmKkek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b5:c0:b2:e1:12:8b:cc:0a:4d:00:3b:3b:55:1d:53:43:1e:
94:1c:f8:89:38:10:57:10:00:7c:a4:75:39:a4:ac:5e:96:27:
9a:06:98:7c:58:52:c9:45:0c:e4:8f:1f:57:ad:2e:06:22:3d:
59:a3:b9:0b:71:01:fe:38:83:da:10:06:2d:00:d4:f3:95:94:
d8:84:06:25:a2:3a:24:dd:87:2a:76:b8:d9:14:a8:20:e7:db:
74:18:4f:1e:57:ad:7a:b1:90:be:4f:c9:3d:c0:28:a4:e2:30:
e9:3f:f0:df:b4:45:cb:04:53:bf:7f:87:98:ca:fe:bb:5f:45:
8d:8e:ab:e2:1b:1b:ac:f6:92:c7:fd:96:db:d5:2b:af:68:99:
33:de:6b:a1:ec:96:c0:61:bb:57:f0:07:c3:12:6e:ee:99:eb:
f7:db:d2:0b:94:37:e8:bd:41:cc:6f:23:1e:ad:8a:1c:c0:98:
cd:99:2b:c6:02:3c:e0:eb:b8:42:ce:e2:85:9f:d8:ef:fd:99:
8e:55:02:78:c9:9f:4c:22:61:bd:ce:13:48:96:49:cb:01:c8:
f5:75:cf:de:fe:37:80:11:80:50:c2:54:78:ff:35:9d:6d:30:
f8:ab:96:14:18:9b:f4:20:06:42:97:dd:55:04:2d:7e:9c:ba:
20:04:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:19:05 2025 by rpki-client