Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jcfksFUGyNQ3hsyRp9T9312QxGs.roa
File: jcfksFUGyNQ3hsyRp9T9312QxGs.roa (raw, json)
Hash identifier: l0+S6Py5EKfakDaGMr9b8G7gb8JSCPgCZSkn6/+QDFI=
Subject key identifier: 8D:C7:E4:B0:55:06:C8:D4:37:86:CC:91:A7:D4:FD:DF:5D:90:C4:6B
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185E912073C83D02905279D6431E69F2265
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jcfksFUGyNQ3hsyRp9T9312QxGs.roa
Signing time: Wed 25 Jan 2023 13:15:50 +0000
ROA not before: Wed 25 Jan 2023 13:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 109.122.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:12:07:3c:83:d0:29:05:27:9d:64:31:e6:9f:22:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 25 13:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc7e4b05506c8d43786cc91a7d4fddf5d90c46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:ed:8a:08:7e:13:9d:5c:43:3a:d2:62:8d:
13:d6:7d:84:c4:de:14:ae:1f:a7:fd:2c:67:62:18:
27:5e:fa:3f:37:65:46:d4:4a:c1:77:aa:56:ec:ee:
01:1b:ba:2c:9d:3b:85:1f:25:bc:2e:b0:6e:2c:d7:
90:90:e0:be:a6:fa:71:de:db:98:63:84:5a:ea:5f:
38:fe:43:6c:87:06:8f:34:c6:d2:0f:6a:ef:5e:08:
6a:54:60:c2:3d:14:e6:13:f3:64:13:35:fb:d1:b4:
09:e6:9c:06:8e:e6:a4:b2:10:3c:06:e4:8a:9a:c4:
76:ab:f0:9b:6f:88:6b:c5:c1:29:51:3b:1c:4a:a7:
29:11:23:af:f6:3b:c8:44:07:c6:a4:32:19:71:e8:
b3:00:d9:0f:a3:cc:16:0b:43:28:9b:87:54:0b:03:
a2:48:50:ef:64:56:ef:ed:6e:0f:db:d3:03:dc:af:
e4:81:cf:26:df:9f:5d:5b:a1:1d:23:81:a6:48:a3:
69:53:59:62:dc:b7:11:71:d2:fa:2d:7f:a2:6a:1d:
54:d6:e3:c4:f6:01:01:a2:f7:4f:a0:9a:6d:7c:48:
7b:64:45:a5:4c:7e:8e:ef:b5:ca:14:31:d6:98:75:
63:17:3e:8e:bb:7c:4d:2c:5b:03:65:d5:2c:21:99:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:E4:B0:55:06:C8:D4:37:86:CC:91:A7:D4:FD:DF:5D:90:C4:6B
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jcfksFUGyNQ3hsyRp9T9312QxGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:12:40:a9:57:22:5a:db:4a:ba:53:0c:d7:48:79:7e:e0:62:
6e:60:e9:bc:40:2c:72:0c:06:bc:e4:5c:87:0e:02:ff:1b:24:
71:62:e7:9a:99:58:78:f8:1f:dd:f0:44:59:ef:d4:42:df:ae:
b0:4b:5d:9f:4b:15:5d:12:a3:ed:89:dc:6f:df:f5:33:d7:62:
ea:32:9b:2e:68:f3:62:9e:d9:75:7c:fd:e7:1c:f8:d4:00:fc:
19:86:02:13:b8:0b:1a:3a:8e:43:21:fd:67:22:62:32:9e:64:
73:b1:3b:d0:8a:8f:a6:f0:a8:c6:04:da:4d:bc:72:24:83:bd:
36:02:3c:60:69:e5:04:24:e6:9a:6f:73:a7:c2:9f:a1:26:c1:
2c:e9:8b:31:8f:53:29:0f:a9:4a:a3:6d:e1:92:77:e0:4b:6e:
49:de:3c:1f:ab:57:3e:26:24:d3:bf:55:e7:4d:2c:08:2d:cb:
8b:93:49:86:f9:cf:d2:25:88:52:88:87:4a:31:c5:90:eb:d3:
cd:cc:0c:63:44:f4:36:ff:88:d1:bf:6b:de:a8:eb:a0:52:01:
dd:fb:a1:fe:45:47:04:fa:56:f5:ab:d6:60:92:e7:a6:48:0d:
c1:0d:c7:d4:25:34:aa:cf:c6:8f:05:2f:7e:31:3b:88:37:c6:
ed:65:48:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXpEgc8g9ApBSedZDHmnyJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjMwMTI1MTMxNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGM3ZTRiMDU1MDZjOGQ0Mzc4NmNjOTFhN2Q0ZmRkZjVkOTBjNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiHtigh+E51cQzrSYo0T1n2ExN4U
rh+n/SxnYhgnXvo/N2VG1ErBd6pW7O4BG7osnTuFHyW8LrBuLNeQkOC+pvpx3tuY
Y4Ra6l84/kNshwaPNMbSD2rvXghqVGDCPRTmE/NkEzX70bQJ5pwGjuakshA8BuSK
msR2q/Cbb4hrxcEpUTscSqcpESOv9jvIRAfGpDIZceizANkPo8wWC0Mom4dUCwOi
SFDvZFbv7W4P29MD3K/kgc8m359dW6EdI4GmSKNpU1li3LcRcdL6LX+iah1U1uPE
9gEBovdPoJptfEh7ZEWlTH6O77XKFDHWmHVjFz6Ou3xNLFsDZdUsIZmthQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI3H5LBVBsjUN4bMkafU/d9dkMRrMB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvamNma3NGVUd5TlEzaHN5UnA5VDkzMTJReEdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrVMA0G
CSqGSIb3DQEBCwUAA4IBAQAfEkCpVyJa20q6UwzXSHl+4GJuYOm8QCxyDAa85FyH
DgL/GyRxYueamVh4+B/d8ERZ79RC366wS12fSxVdEqPtidxv3/Uz12LqMpsuaPNi
ntl1fP3nHPjUAPwZhgITuAsaOo5DIf1nImIynmRzsTvQio+m8KjGBNpNvHIkg702
AjxgaeUEJOaab3Onwp+hJsEs6Ysxj1MpD6lKo23hknfgS25J3jwfq1c+JiTTv1Xn
TSwILcuLk0mG+c/SJYhSiIdKMcWQ69PNzAxjRPQ2/4jRv2veqOugUgHd+6H+RUcE
+lb1q9ZgkuemSA3BDcfUJTSqz8aPBS9+MTuIN8btZUhz
-----END CERTIFICATE-----
Generated at Tue May 13 21:07:49 2025 by rpki-client