Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/lGyGCD0NT2v5WbCCKA1qPwumIRw.roa
File: lGyGCD0NT2v5WbCCKA1qPwumIRw.roa (raw, json)
Hash identifier: g71acrtpf7B/svzz5lD+ABIxyqmsBf1ZG6Js6+rBJZM=
Subject key identifier: 94:6C:86:08:3D:0D:4F:6B:F9:59:B0:82:28:0D:6A:3F:0B:A6:21:1C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184C8BB87CA03D735E835969E6254E418C4
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/lGyGCD0NT2v5WbCCKA1qPwumIRw.roa
Signing time: Wed 30 Nov 2022 13:30:43 +0000
ROA not before: Wed 30 Nov 2022 13:30:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:bb:87:ca:03:d7:35:e8:35:96:9e:62:54:e4:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 30 13:30:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=946c86083d0d4f6bf959b082280d6a3f0ba6211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:14:38:3f:c5:bc:2e:d9:ac:ca:4d:0d:a1:
29:69:11:1f:3e:bf:60:bc:86:fe:8e:71:4a:93:18:
22:b7:5d:08:a0:6b:60:d1:77:90:39:f9:eb:7c:c1:
63:94:50:27:cd:39:19:10:f1:6c:b3:22:4d:4f:0f:
fb:b2:8b:82:a0:65:9f:62:e1:2c:35:26:c0:bb:d9:
07:b2:97:fa:5c:4d:e8:03:34:38:b2:39:07:86:91:
25:6a:2d:14:90:75:32:bd:08:4f:dc:43:50:d9:3a:
34:0e:3a:50:6b:b5:5c:0f:cd:41:81:a6:cd:d5:bc:
35:a8:63:57:81:49:c6:6c:59:e9:f9:15:ea:53:d7:
ab:6d:d7:ec:f5:f6:04:9f:44:b0:ab:64:ab:c7:67:
7b:ba:ae:7f:bb:3e:8b:dd:d7:15:eb:5b:ea:b1:68:
df:da:47:67:b4:bf:0f:98:a2:71:3d:39:87:a4:50:
df:da:85:a1:d9:f1:94:3a:5f:b5:73:69:d5:01:17:
94:d5:4b:14:8d:5b:d8:d7:4b:d5:8f:1a:96:ad:cb:
59:70:fe:c3:e3:e2:ce:fc:59:cd:ce:f9:37:fc:2e:
f7:1b:4f:18:c0:e8:26:a1:0b:c9:05:38:1b:b0:ae:
f8:90:84:ba:ea:d1:58:5b:a7:57:7c:3f:3f:20:36:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:86:08:3D:0D:4F:6B:F9:59:B0:82:28:0D:6A:3F:0B:A6:21:1C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/lGyGCD0NT2v5WbCCKA1qPwumIRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
109.122.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:20:24:fa:14:b0:c6:d1:ce:af:2a:90:a0:f6:44:36:c9:df:
73:0f:fb:ae:ee:35:3e:0c:2a:7d:ce:2b:e4:62:5f:af:65:df:
5a:99:f0:d2:72:ff:ec:ab:db:a5:b3:3b:4e:a6:a7:4c:be:86:
21:1d:8a:27:3e:e7:2e:93:ad:c9:aa:22:2c:42:f7:6f:6a:c2:
b6:b5:20:0c:5d:20:b1:16:64:54:2b:d7:b1:f2:d8:31:26:4a:
07:c7:15:48:87:4f:2c:7d:1d:2c:d9:ab:a0:7c:7e:5e:c7:b3:
29:b2:ee:ca:3e:85:23:8a:82:ef:5e:de:f1:ee:9c:96:88:6f:
a5:a8:89:97:2d:2e:9b:c2:3e:9d:3e:52:af:35:a0:cf:a1:ea:
2a:08:16:78:db:fa:85:55:83:9e:80:c5:65:84:73:bc:73:ca:
b3:c1:6d:dc:29:7f:1f:4c:86:cd:4b:da:fb:7c:3d:57:ff:82:
3e:fa:b0:99:41:dc:7c:0d:53:b2:1a:30:cd:f8:45:09:32:a3:
e1:d1:54:27:37:94:ea:f4:a1:40:e3:5e:75:f1:1a:d7:2b:15:
d9:19:a2:c1:fb:37:d0:ed:1a:48:9e:6f:87:dd:39:94:2c:d5:
a3:33:0e:03:63:88:99:4a:90:2e:01:7f:a4:cf:e4:dd:ea:54:
41:39:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:09:30 2025 by rpki-client