Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/mNBiWSQkbNv6uXySkdI31oiSK3Y.roa
File: mNBiWSQkbNv6uXySkdI31oiSK3Y.roa (raw, json)
Hash identifier: BlwEKniHKmyaqmpH7MDFMf1A+vaR+lXnU9dG86nagUs=
Subject key identifier: 98:D0:62:59:24:24:6C:DB:FA:B9:7C:92:91:D2:37:D6:88:92:2B:76
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01850009802CEFBB426656B8EE3F2C0257DB
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/mNBiWSQkbNv6uXySkdI31oiSK3Y.roa
Signing time: Sun 11 Dec 2022 07:15:00 +0000
ROA not before: Sun 11 Dec 2022 07:15:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9050
IP address blocks: 109.122.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:00:09:80:2c:ef:bb:42:66:56:b8:ee:3f:2c:02:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Dec 11 07:15:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98d0625924246cdbfab97c9291d237d688922b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:2b:f9:e2:6c:4e:93:1b:7a:3c:05:87:98:
54:9c:f0:16:38:89:b2:c1:cc:3a:64:a1:d4:af:2e:
98:51:b6:34:85:80:a7:84:9a:a5:73:84:f3:77:78:
fb:f1:5f:d5:ff:72:7b:38:e1:a0:9d:39:ee:05:c6:
1b:83:52:37:5e:2c:e6:5f:0d:be:71:fa:8c:e7:fd:
22:70:8e:7b:73:f8:31:22:7e:50:b4:13:7b:da:ba:
6e:67:3b:06:6f:86:99:90:a7:87:b7:39:59:32:49:
62:ec:35:72:b9:03:7a:66:61:f2:bb:15:a1:1d:1a:
25:e4:24:c8:de:28:4e:e4:df:4f:41:36:05:7f:bc:
ad:22:cc:ea:54:70:17:43:2e:09:83:9c:32:59:05:
19:d0:af:db:67:39:60:55:a1:c9:87:08:de:1e:90:
e9:79:98:bd:d4:2f:81:0b:eb:ca:17:ff:49:c6:2f:
55:e6:33:86:df:e8:df:0c:3f:80:b9:2f:85:ce:ab:
9c:26:32:f5:d7:00:d5:7f:20:97:f3:8e:65:06:27:
92:af:2b:6b:6a:26:12:67:4d:6c:c9:4f:a8:89:26:
8f:18:b8:41:e5:26:97:8b:cd:a1:f9:cb:36:84:02:
62:1d:ed:62:ee:ac:2d:14:bb:f9:38:f8:c9:26:65:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:62:59:24:24:6C:DB:FA:B9:7C:92:91:D2:37:D6:88:92:2B:76
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/mNBiWSQkbNv6uXySkdI31oiSK3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d9:97:a6:f6:a6:0c:0e:b6:4a:9d:2e:ed:1f:08:9a:f3:7e:
b7:5e:82:5f:41:b6:34:2c:cb:86:e9:fa:29:62:04:cf:84:01:
e4:c1:50:24:c1:56:2a:42:54:c1:d3:5b:d1:31:78:20:df:25:
80:95:41:53:36:e1:27:09:62:c9:bd:99:51:87:b7:00:3b:66:
38:f1:ae:0e:db:67:f3:58:c0:9a:a0:54:30:58:52:12:cf:ae:
df:42:45:46:ed:07:a1:4d:95:41:6b:e2:6b:80:9d:b9:a6:38:
91:a0:20:95:1f:3a:fd:b9:05:62:d9:cd:fc:71:cc:0e:46:15:
95:82:52:b3:0c:8d:12:6b:aa:1c:53:71:3d:98:c1:a8:9c:03:
e5:ac:2f:8c:87:52:ee:52:61:b1:dd:3f:b4:a8:35:01:d9:a4:
07:fd:61:9f:a8:01:cf:a9:3e:ef:e9:ec:47:20:30:b6:d9:12:
e3:32:4f:a3:b7:db:e0:7c:5d:5c:59:05:ee:90:70:b7:31:23:
c6:ee:98:55:24:e2:06:db:4a:47:27:9f:3e:3d:b5:e6:03:a3:
be:e2:13:3f:30:20:1d:1b:b8:a6:1d:c4:25:1e:87:ff:3f:e7:
85:3f:e7:3b:03:ba:64:b6:dc:c9:7c:fc:5f:dc:8d:69:ef:29:
78:e4:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:13:58 2025 by rpki-client