Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/hm_rKTgkRjQNzJrYzyNqbzY3hS0.roa
File: hm_rKTgkRjQNzJrYzyNqbzY3hS0.roa (raw, json)
Hash identifier: GpJbfIG3pvjRxrTyc45IqkQHGJZ0QKqsQESo44jZ/KY=
Subject key identifier: 86:6F:EB:29:38:24:46:34:0D:CC:9A:D8:CF:23:6A:6F:36:37:85:2D
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018229A574177F7192D9BD695C00D836986C
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/hm_rKTgkRjQNzJrYzyNqbzY3hS0.roa
Signing time: Sat 23 Jul 2022 06:01:25 +0000
ROA not before: Sat 23 Jul 2022 06:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 109.122.196.0/22 maxlen: 24
109.122.204.0/24 maxlen: 24
109.122.208.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:29:a5:74:17:7f:71:92:d9:bd:69:5c:00:d8:36:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jul 23 06:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=866feb29382446340dcc9ad8cf236a6f3637852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:72:41:f7:48:fb:12:23:95:ea:0d:30:75:
f5:1d:a6:71:41:b0:df:d8:46:74:ce:c2:a1:ec:7b:
45:24:ea:a2:6c:8d:7e:de:bd:de:89:73:bf:d4:5c:
1f:46:0a:4f:c3:22:fa:f2:b3:cb:7d:54:ab:00:10:
fb:77:d2:e3:29:76:4c:43:e4:73:7a:21:b6:30:42:
b4:b4:e9:e6:75:f3:92:e8:21:9a:ce:c4:bd:4e:0e:
4a:85:c1:38:d6:e0:c2:6c:55:b9:1a:26:fc:08:ba:
0f:34:3f:36:9e:8b:4d:77:dd:8d:c7:99:77:ff:42:
dd:0e:75:4e:da:96:c8:70:b1:db:c3:76:3f:fe:6d:
a0:b3:16:df:fc:11:e7:fa:a8:a9:8c:2b:17:2a:90:
5a:e2:08:86:8d:be:de:53:44:38:f4:58:c7:47:14:
43:bd:97:7b:5b:03:98:f0:da:8f:85:87:35:50:36:
57:e7:98:fc:b1:7b:8e:6c:a3:5e:2b:94:d2:37:1c:
be:15:4c:5d:13:19:c9:30:07:0b:e8:62:28:f6:3c:
a6:c5:44:93:a1:f0:98:d4:f3:13:58:e8:b3:05:02:
02:2a:27:6d:93:f8:d1:04:eb:e8:e5:b1:70:cd:d1:
dc:e3:bd:94:04:9b:22:ac:a9:27:ec:b3:0b:37:21:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:EB:29:38:24:46:34:0D:CC:9A:D8:CF:23:6A:6F:36:37:85:2D
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/hm_rKTgkRjQNzJrYzyNqbzY3hS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/22
109.122.204.0/24
109.122.208.0/24
109.122.210.0/24
109.122.214.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ea:4b:be:d6:b2:3e:dd:a1:30:34:19:d6:92:9e:2c:81:14:
3c:0f:54:f1:d7:48:46:50:a7:e2:51:d2:df:af:1c:19:78:1c:
99:c0:88:16:cd:74:c4:fb:ae:bd:af:06:7c:db:64:2a:2d:04:
3f:56:fd:e7:14:30:6d:e4:d8:58:ca:f9:dd:0c:88:c1:d7:c4:
0c:a7:4e:ab:74:16:5d:00:b2:24:41:e3:af:29:4a:65:47:d9:
0e:4f:95:70:60:cb:67:7c:42:3d:c1:85:3b:03:f9:47:4d:e9:
d9:97:12:6a:7e:64:9d:18:81:45:d4:14:47:39:89:2e:c4:c4:
43:28:38:61:e5:6f:66:e3:34:e2:ef:1c:11:99:79:1d:36:73:
7f:37:21:13:94:14:ba:0c:2a:e2:64:ba:cf:7c:23:47:16:56:
e0:55:77:18:1b:08:40:fe:0f:28:c1:3d:7f:9b:64:14:41:45:
88:71:fe:a9:df:de:ae:f0:14:6e:e8:81:9f:03:6e:45:bb:ea:
c0:53:7d:76:96:26:6d:af:5c:7b:a1:ea:44:92:eb:64:50:f0:
2a:82:d7:3a:50:2d:2d:26:84:2b:92:50:f3:fd:3b:9e:76:90:
81:3e:fa:a7:44:95:2a:c5:8a:7a:6d:0b:6c:7d:96:d9:3b:ab:
4c:24:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:02:32 2025 by rpki-client