Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/lmzrN9Skb0h_esnn1lToruIMnZw.roa
File: lmzrN9Skb0h_esnn1lToruIMnZw.roa (raw, json)
Hash identifier: 4Ex1ULPjdQ2f0qiw/CPr1ggsbZFu/0eTRojYf60Vr7M=
Subject key identifier: 96:6C:EB:37:D4:A4:6F:48:7F:7A:C9:E7:D6:54:E8:AE:E2:0C:9D:9C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0185D32C1B4993CD0D014E76FFCB77FA1790
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/lmzrN9Skb0h_esnn1lToruIMnZw.roa
Signing time: Sat 21 Jan 2023 07:12:41 +0000
ROA not before: Sat 21 Jan 2023 07:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:2c:1b:49:93:cd:0d:01:4e:76:ff:cb:77:fa:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 21 07:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=966ceb37d4a46f487f7ac9e7d654e8aee20c9d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:b5:5f:c1:ea:0d:15:86:ef:b6:01:d2:58:
a0:2b:e8:d6:52:0f:d9:20:2e:e5:11:9a:7c:03:eb:
8b:c1:b3:d1:45:77:58:86:46:90:cd:bc:b0:c1:5a:
6b:ba:a0:d4:38:28:f0:d8:a4:e2:4f:19:bd:76:74:
d0:d7:cf:7e:23:b4:50:bd:55:71:b2:79:4d:0d:85:
60:59:c6:46:1d:23:c6:d8:80:24:45:8e:3e:ee:02:
06:d8:88:e1:37:78:46:85:03:b4:33:5a:2e:81:b5:
bc:e9:8a:23:d7:02:f0:62:fa:d5:76:ca:0c:f9:c6:
36:92:0a:88:c0:21:0e:52:ba:5e:c9:c4:37:6b:ac:
1c:e0:6c:82:11:8c:1e:38:d4:37:d6:e6:f6:48:17:
79:46:72:fb:03:ec:1f:02:8d:b8:97:68:60:d3:c5:
77:74:4e:1d:c4:5d:2c:da:54:57:82:e9:f3:f1:b0:
b2:b1:60:3a:1e:ef:a4:da:c1:dd:ef:92:bc:43:be:
04:56:4b:03:ff:ef:be:14:6c:14:ef:ae:9c:34:cb:
76:b7:c4:5e:16:66:79:cb:1f:01:ba:a2:64:53:a1:
84:ee:fe:ef:ea:d0:4e:aa:48:27:7c:e1:3c:cc:4a:
a5:f8:76:23:bb:c6:63:4c:8f:35:0e:5a:d1:8f:2e:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:EB:37:D4:A4:6F:48:7F:7A:C9:E7:D6:54:E8:AE:E2:0C:9D:9C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/lmzrN9Skb0h_esnn1lToruIMnZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2a:0b:75:4c:91:60:67:01:d7:b3:b6:d4:7c:9f:88:e2:1f:
b6:d0:08:a3:87:50:5d:b4:ab:6e:84:8a:ac:8b:3f:37:4b:2a:
21:e2:af:70:c2:b9:d6:59:e3:c1:ad:e9:08:54:08:d9:f0:d0:
d7:7e:d7:4c:c3:a2:2b:30:88:19:4d:a1:2d:92:59:d9:b3:4a:
8c:e9:54:bf:1f:91:fe:7f:4b:8f:31:e9:3e:73:d6:06:f9:97:
32:f5:b8:e9:0a:51:17:a4:2e:ac:50:bb:64:4b:68:73:80:85:
26:8f:47:61:8b:0f:18:f3:e5:04:28:ba:f4:28:35:ee:31:c0:
2b:74:28:33:62:cd:ea:ab:fe:cc:c5:0b:27:ee:1e:09:9b:8e:
12:8c:eb:b1:77:ea:87:94:5f:b2:2a:3c:cd:83:30:7d:a6:95:
d0:b3:d4:d5:c4:6c:15:b9:b8:9a:28:d3:a0:e4:eb:4d:5a:9c:
b3:53:cc:c9:42:f3:d8:e6:33:b5:da:41:37:33:3e:5d:1a:1b:
60:a5:f5:3a:c3:70:2f:b2:09:45:ff:ba:b2:ac:9b:13:fe:01:
e5:07:3d:1f:6c:14:5b:35:ac:cb:a9:d2:04:ad:69:ef:40:22:
1a:58:c5:68:e4:c8:44:2b:ad:60:57:c2:ce:93:6a:7b:b4:3d:
7a:b2:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:15:00 2025 by rpki-client