Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jNSpEb3sMWGK0614uDqFPp9ICuc.roa
File: jNSpEb3sMWGK0614uDqFPp9ICuc.roa (raw, json)
Hash identifier: +pOTYTBjD/GYf5DDUa4O16BWS82Vt9pGmDotR5QEPag=
Subject key identifier: 8C:D4:A9:11:BD:EC:31:61:8A:D3:AD:78:B8:3A:85:3E:9F:48:0A:E7
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06BCFC5E
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jNSpEb3sMWGK0614uDqFPp9ICuc.roa
Signing time: Fri 22 Apr 2022 19:58:08 +0000
ROA not before: Fri 22 Apr 2022 19:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59721
IP address blocks: 109.122.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113048670 (0x6bcfc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 22 19:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cd4a911bdec31618ad3ad78b83a853e9f480ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:be:b9:5d:76:ec:de:1b:a4:69:25:1d:d5:
0d:63:92:5d:9a:29:24:7f:52:b1:25:80:9f:e9:f4:
ba:ec:36:70:17:e6:3e:68:fb:05:fe:58:a3:c1:79:
1f:cf:31:5a:75:47:35:bb:e0:52:41:4b:df:ec:01:
5e:60:4e:81:4c:27:6c:bf:e7:58:c6:57:a1:5f:3e:
a6:7c:94:f4:4a:02:13:b5:b5:13:c8:19:35:f9:bd:
26:1c:c3:61:46:dc:d8:95:a3:3a:9c:01:de:8a:d5:
14:4b:c6:10:b6:8c:33:1f:99:47:0f:c0:52:1e:4a:
03:46:37:55:62:33:95:29:e8:86:fd:c0:43:88:13:
10:2d:9b:d4:7d:6d:9e:8e:75:9e:6a:80:84:9f:23:
f9:55:08:25:72:9b:8d:3c:35:39:54:15:27:13:9d:
40:37:c7:2e:68:58:bd:15:f8:44:c6:3b:9a:79:39:
6e:4b:59:ec:89:66:e6:d0:04:ad:66:c8:cc:4e:10:
2d:f6:58:6e:67:2c:b5:d6:a7:23:6b:6a:e2:5c:1b:
b2:b1:20:e3:5b:0f:0f:37:f1:9f:0e:78:bf:73:b7:
df:7f:c2:eb:d1:73:fb:70:3c:9b:6c:c0:f4:19:d8:
4e:ba:8d:45:fb:d0:ad:e7:ab:95:ec:f5:4b:1b:9a:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:A9:11:BD:EC:31:61:8A:D3:AD:78:B8:3A:85:3E:9F:48:0A:E7
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jNSpEb3sMWGK0614uDqFPp9ICuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.220.0/23
Signature Algorithm: sha256WithRSAEncryption
77:e8:60:34:11:e5:f3:c3:1a:99:41:e2:96:18:59:3e:ac:2f:
c6:7a:f0:5c:0f:58:e3:cb:03:10:12:c4:a4:6f:74:db:43:2a:
b4:b9:13:8a:44:8e:4a:21:ea:8d:3f:ab:38:50:aa:e4:98:e7:
24:38:46:84:a5:e0:55:46:52:f5:af:f9:d6:78:7e:c6:31:35:
98:01:a5:22:20:7b:8b:40:48:07:29:d4:f9:e8:7f:eb:64:14:
91:ae:84:c8:68:88:e7:bc:3e:75:0d:ad:27:40:a1:b5:87:8c:
f2:6f:fe:e6:72:15:9d:4e:95:14:d6:c2:cf:18:7d:54:a0:7d:
b2:0d:66:84:91:09:2e:9a:d8:f1:fb:52:f2:f9:40:e4:04:42:
85:81:65:14:ea:d0:8e:db:9a:6f:e0:3d:cd:60:3b:b9:64:72:
6e:c3:28:a6:67:79:97:27:a5:da:98:ff:5a:f2:63:29:5e:fb:
f7:b5:a9:18:10:f4:d8:31:2d:ea:aa:c8:b1:84:7a:69:8f:13:
d7:2e:22:99:19:d6:2f:80:61:a3:1b:36:ec:0e:10:c7:7a:77:
bf:d7:6a:d5:8a:21:85:6b:52:ec:bb:37:61:ca:ec:28:d5:aa:
50:d3:b3:4e:8d:c8:63:c4:c3:5e:f9:11:53:d1:9b:a5:03:ed:
35:73:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:04:21 2025 by rpki-client