Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/icdX0vlrDnqqMzJLqXlTsanGT3s.roa
File: icdX0vlrDnqqMzJLqXlTsanGT3s.roa (raw, json)
Hash identifier: +NMX7VZn4NsI7uIJibfcQmohF+8Y74dfPDgh949UqtY=
Subject key identifier: 89:C7:57:D2:F9:6B:0E:7A:AA:33:32:4B:A9:79:53:B1:A9:C6:4F:7B
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06744E76
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/icdX0vlrDnqqMzJLqXlTsanGT3s.roa
Signing time: Wed 23 Mar 2022 16:45:03 +0000
ROA not before: Wed 23 Mar 2022 16:45:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 109.122.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108285558 (0x6744e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 23 16:45:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89c757d2f96b0e7aaa33324ba97953b1a9c64f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:ff:94:f7:0d:0d:84:2d:4f:1f:81:16:d2:
a6:5c:d8:65:64:59:d7:0c:ca:56:40:29:e6:54:54:
7c:4c:56:d0:93:50:44:d5:c3:20:f7:ed:2d:b6:f9:
bb:59:46:04:b4:7e:91:e2:d3:a4:16:ac:15:d8:5d:
6a:3d:03:59:6c:b1:9a:c2:d0:76:f4:21:59:53:88:
27:5b:44:40:4f:22:a6:0a:1a:3b:42:8d:dc:cf:34:
da:05:8e:2e:46:42:9e:f5:df:5a:63:c0:e7:12:74:
f2:c1:ce:f7:7b:c6:3e:91:e6:a9:07:f3:3b:2d:87:
8b:41:a0:b8:8d:f7:8a:f7:67:0c:d1:5a:d1:e8:88:
48:55:72:b9:c4:c9:9b:94:ac:65:2f:e6:e4:34:b2:
9c:ab:c1:0e:0d:95:a5:77:09:78:25:bf:a7:16:84:
e5:6a:8f:58:ea:25:f6:4c:25:71:e9:43:aa:fe:d8:
25:38:e2:d4:7c:50:fc:05:a1:56:f5:9c:af:47:12:
aa:59:fd:53:1b:cc:e1:e3:cd:50:28:1d:5a:36:87:
59:21:3d:da:f4:91:c4:b8:25:ed:65:7d:7b:01:8c:
a8:a7:80:7f:5d:bd:76:55:64:69:8c:9f:82:f5:88:
88:fe:99:99:96:e3:60:c8:a3:76:c9:ea:cf:05:a2:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:57:D2:F9:6B:0E:7A:AA:33:32:4B:A9:79:53:B1:A9:C6:4F:7B
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/icdX0vlrDnqqMzJLqXlTsanGT3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3f:95:5d:89:5f:2d:2d:e3:1f:17:ca:50:f1:8d:70:fd:6d:
ee:d4:21:8e:b4:3a:e1:14:51:a6:30:03:c7:9c:62:0d:29:18:
c9:05:65:3b:34:15:11:02:d1:d4:7a:bc:47:7b:25:cb:16:8f:
58:16:ac:f3:71:08:27:19:ee:94:4b:59:9d:46:e7:33:3d:ad:
df:e9:55:0d:93:70:63:ec:80:b5:79:39:6f:86:bc:15:b0:94:
f6:df:67:fa:e8:79:c1:47:a6:a0:55:5f:92:a2:02:37:c2:19:
22:b5:7f:f0:fe:fe:19:33:8e:49:d8:d0:2c:88:3c:e6:cc:eb:
74:76:1e:00:9e:bd:a3:b0:44:45:fb:38:02:e3:b2:be:fc:45:
aa:a7:b7:4a:7c:30:36:ca:83:3f:fd:1d:c9:c8:3a:f7:6b:d5:
6d:79:a8:ad:12:fa:76:a0:87:08:21:be:66:ac:cc:02:72:35:
fc:fc:db:77:3e:06:b8:ab:86:9a:97:fb:0f:7e:1a:26:45:4f:
7a:d3:6b:1d:c6:a0:32:28:b2:c9:c7:d5:1f:b3:7a:27:00:46:
e4:c0:89:a0:c6:25:90:2d:22:55:1e:3f:9c:04:a6:f9:24:75:
01:4c:ca:8f:59:a2:6f:81:45:8f:be:c2:3f:c9:57:fc:98:e1:
fb:ff:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:34:03 2025 by rpki-client