Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jI3ij8uXRFWhk5kYeRqrTIZ11rQ.roa
File: jI3ij8uXRFWhk5kYeRqrTIZ11rQ.roa (raw, json)
Hash identifier: 0D9bIVnEJywux2bj/OXuJ3C2+bC1UXxED72euKolGrE=
Subject key identifier: 8C:8D:E2:8F:CB:97:44:55:A1:93:99:18:79:1A:AB:4C:86:75:D6:B4
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183920B296AEC7C558D99BEC1DB3B97D816
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jI3ij8uXRFWhk5kYeRqrTIZ11rQ.roa
Signing time: Sat 01 Oct 2022 05:35:48 +0000
ROA not before: Sat 01 Oct 2022 05:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:92:0b:29:6a:ec:7c:55:8d:99:be:c1:db:3b:97:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 1 05:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c8de28fcb974455a1939918791aab4c8675d6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:27:fc:9a:e2:85:ca:ea:77:52:fe:d2:28:7e:
19:dc:2f:e9:9e:09:b1:d9:41:04:65:53:43:eb:d8:
ea:67:fe:ed:6f:9d:be:ad:0f:cb:07:81:9f:b2:e9:
2a:c2:c0:46:6b:a1:ce:6c:a5:79:c3:88:11:e5:58:
48:a8:c0:ef:35:f7:b9:35:68:3d:b4:6d:02:41:1d:
57:c1:f2:8b:0e:d8:5d:a6:97:77:b7:1d:2f:0f:49:
0b:1c:75:0c:84:a4:9f:ce:db:bf:72:bd:d7:79:c3:
94:24:d7:ea:43:c0:e1:7c:53:6f:3d:f4:12:85:bc:
1a:f3:cc:21:70:81:fc:62:32:99:07:c5:12:db:5e:
2d:f7:06:96:3f:92:3a:09:77:9b:ca:a7:44:32:71:
cc:94:6a:3a:d8:8d:b6:bd:2e:ee:fb:12:f8:58:52:
70:f5:a9:7b:ed:86:54:c1:42:81:46:90:c4:04:27:
28:22:ed:f3:dc:8c:b9:da:39:0d:16:ef:eb:f6:1e:
f5:a7:4d:be:bc:0b:df:a9:54:21:ce:ae:39:ac:f4:
07:83:75:7f:df:01:05:1d:b7:83:79:15:b1:db:4f:
fd:23:c2:39:04:28:f7:3d:91:24:c5:b9:8e:d4:5e:
34:d2:20:65:fe:fd:1c:f3:7f:d5:43:09:90:e9:b4:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8D:E2:8F:CB:97:44:55:A1:93:99:18:79:1A:AB:4C:86:75:D6:B4
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jI3ij8uXRFWhk5kYeRqrTIZ11rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7b:5e:75:7e:d5:97:41:6d:6e:a1:ac:a4:24:e4:e3:78:18:
f2:5c:f6:e4:bb:6d:77:fc:e3:7f:cd:e7:51:d1:db:40:69:03:
42:2e:8a:f9:52:65:34:71:79:24:0a:b2:7f:6e:41:16:64:ee:
95:3a:38:2a:b2:81:0e:ea:e9:87:28:c3:40:10:58:a2:0d:d6:
60:9f:c9:a5:35:50:ae:1e:37:43:51:b6:37:55:f5:d0:c5:93:
31:01:54:97:01:4b:4e:79:de:6e:a0:3e:56:28:6c:33:9f:1f:
e2:5a:fa:2f:6d:59:73:b1:87:92:f9:6b:b1:02:51:68:b3:3d:
79:7c:b5:d8:94:2a:d5:f5:7a:90:9e:31:11:cb:c7:2c:03:28:
cf:f1:a8:e8:c2:31:16:72:14:3a:b1:e4:36:fc:08:b9:e1:58:
fe:f5:d9:fb:ed:bb:b6:29:22:aa:c4:d4:e8:90:96:95:0b:67:
09:4a:5e:4c:0c:30:f6:58:57:ba:95:32:40:cd:59:f8:97:5d:
57:77:5b:74:84:f2:9c:1e:40:ac:07:9b:f8:a1:d7:61:a3:be:
33:fd:e1:59:87:63:af:2e:8a:1a:71:3f:b8:0c:b0:9d:ac:28:
5e:19:09:6f:68:6f:7e:d4:3d:05:ef:24:ef:48:a5:82:8b:64:
87:a1:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:05:06 2025 by rpki-client