Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/g_F9asflWBQYoMuHjccnLjgjEkg.roa
File: g_F9asflWBQYoMuHjccnLjgjEkg.roa (raw, json)
Hash identifier: NaH7ZNk8OqaKvjlgE/Hmm0zMfgbsHBT7a+aNfYrdtvA=
Subject key identifier: 83:F1:7D:6A:C7:E5:58:14:18:A0:CB:87:8D:C7:27:2E:38:23:12:48
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 064D7796
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/g_F9asflWBQYoMuHjccnLjgjEkg.roa
Signing time: Mon 07 Mar 2022 11:11:54 +0000
ROA not before: Mon 07 Mar 2022 11:11:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 109.122.195.0/24 maxlen: 24
109.122.200.0/22 maxlen: 24
109.122.206.0/23 maxlen: 24
109.122.205.0/24 maxlen: 24
185.207.4.0/22 maxlen: 22
109.122.211.0/24 maxlen: 24
109.122.212.0/23 maxlen: 24
109.122.209.0/24 maxlen: 24
109.122.216.0/24 maxlen: 24
109.122.218.0/23 maxlen: 23
109.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105740182 (0x64d7796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 7 11:11:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83f17d6ac7e5581418a0cb878dc7272e38231248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:d6:89:e7:21:e4:e6:96:5c:40:fe:12:f9:
73:90:71:33:61:e8:4c:1b:f4:a5:91:33:2f:29:ae:
82:15:9c:b9:7f:57:3f:53:b5:65:21:03:13:ed:2e:
e8:2f:50:2c:d9:b3:a7:30:88:0a:35:33:26:c8:af:
5b:89:58:30:38:b3:7b:0f:7d:0b:d9:92:c5:9b:94:
95:67:c6:56:7f:da:b8:bb:f6:60:36:a2:3e:f3:26:
9e:e5:ea:d2:d3:a6:bb:a9:fd:ab:21:54:9f:c8:8d:
2e:70:27:b0:db:df:69:88:a3:f9:b5:3f:5c:50:a3:
23:12:36:f3:15:00:a9:a5:81:f0:94:88:a2:47:60:
4b:4b:a2:7c:ca:82:9b:30:d6:e2:44:9a:b6:45:1e:
c3:3d:d2:ec:61:a0:50:22:40:54:87:7e:11:2d:23:
76:ad:c5:34:ea:91:75:aa:13:c8:1d:7e:c3:b7:61:
93:1a:19:c7:cc:ea:c5:e9:00:42:c5:2f:3d:a8:f7:
99:df:65:4b:01:a8:46:a1:3c:1b:32:b4:a2:8c:3d:
51:3a:7c:b5:84:4c:c6:53:a8:0d:33:2a:dd:e4:79:
db:65:1b:ac:81:1c:2b:22:34:45:4d:48:3c:ae:51:
94:fd:92:46:b7:b0:7d:b9:3a:10:2c:05:9e:d4:0f:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F1:7D:6A:C7:E5:58:14:18:A0:CB:87:8D:C7:27:2E:38:23:12:48
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/g_F9asflWBQYoMuHjccnLjgjEkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.200.0/22
109.122.205.0-109.122.207.255
109.122.209.0/24
109.122.211.0-109.122.213.255
109.122.216.0/24
109.122.218.0/23
109.122.223.0/24
185.207.4.0/22
Signature Algorithm: sha256WithRSAEncryption
42:d5:83:f3:94:cd:d9:19:83:21:aa:6e:81:cf:b3:ce:ca:1e:
1f:f6:5e:f5:1b:d3:c1:a8:76:db:c3:38:d9:64:97:56:66:0e:
66:9b:34:7e:4d:cd:41:39:92:5b:37:ad:d6:fd:99:7f:27:b2:
dc:b4:41:5e:00:6f:58:88:4e:74:7a:9b:0d:67:aa:a4:57:b2:
d2:8b:14:c0:51:e3:7e:71:d1:07:03:d8:9c:bc:8e:1e:59:9c:
6a:a0:64:a1:c1:08:20:f4:90:82:de:e3:ee:f1:98:e9:95:d3:
3e:6c:25:d4:dc:f1:e3:51:34:12:fe:aa:8b:10:1d:27:18:c5:
63:15:27:17:93:92:f3:72:1e:8d:2f:ba:6c:39:e6:77:db:be:
ea:e3:99:cf:a9:31:28:a0:40:0c:2a:cb:07:cf:7a:0e:7c:e8:
40:c2:ac:af:0e:90:be:a9:c2:f2:12:48:67:67:73:6d:5c:ac:
87:c8:6b:0d:cc:11:2c:a1:21:a6:25:46:5d:6c:8c:13:c0:d3:
8c:45:1b:b8:52:35:2a:17:ca:a6:f1:64:33:ad:07:2f:4a:88:
5b:9f:aa:88:7b:7d:5c:b7:e1:f7:cc:72:04:64:df:c0:af:d8:
f3:63:80:d1:09:b1:83:17:b8:26:b5:2c:48:c7:9e:c7:33:d4:
37:4e:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:07:05 2025 by rpki-client