Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/m_m1aj_nnru1g4CzpIYPK5CsIfc.roa
File: m_m1aj_nnru1g4CzpIYPK5CsIfc.roa (raw, json)
Hash identifier: e15QsITTkZUbhNNVFRbxEXhk06sWScu7cGJrg7ZUdTc=
Subject key identifier: 9B:F9:B5:6A:3F:E7:9E:BB:B5:83:80:B3:A4:86:0F:2B:90:AC:21:F7
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01844777E2262BD678D442F177A3784D939F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/m_m1aj_nnru1g4CzpIYPK5CsIfc.roa
Signing time: Sat 05 Nov 2022 11:05:49 +0000
ROA not before: Sat 05 Nov 2022 11:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 109.122.205.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:77:e2:26:2b:d6:78:d4:42:f1:77:a3:78:4d:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 5 11:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bf9b56a3fe79ebbb58380b3a4860f2b90ac21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:26:66:ba:9b:ca:22:aa:c8:b2:c4:ba:15:
6d:ac:8d:95:15:89:37:97:dd:81:ff:64:79:ae:23:
86:c1:59:ba:5e:b4:ce:83:f7:c7:8d:a6:a6:86:cf:
9a:c7:30:bc:b1:0c:41:fc:67:58:58:f2:c1:89:16:
9b:62:12:fe:4a:c2:84:b1:10:24:e3:62:b4:3e:39:
c5:55:00:4c:07:9b:f9:1c:db:1e:9d:c8:51:98:7a:
10:70:4f:2a:04:5d:72:22:23:c9:bd:05:33:3c:b3:
60:92:59:56:ba:b4:b4:e8:8d:10:fd:68:b5:07:c8:
f9:f7:19:60:1d:44:f8:f7:56:5f:13:bc:68:89:2d:
38:78:c9:6c:f8:17:43:a6:98:db:09:69:e2:5f:7c:
25:ca:3b:8e:2a:64:6d:20:c8:e7:12:4a:50:2a:55:
ac:dc:60:f6:e8:b6:b4:4c:d5:87:81:e3:ec:f1:47:
5d:91:4d:9a:b1:8f:d3:ca:54:b1:39:9f:c8:5c:7a:
6d:24:bf:e9:fe:ce:8d:65:ef:c9:b3:33:f3:05:09:
3c:e5:15:8b:af:02:da:ba:d1:46:d7:c0:fc:6f:02:
b1:1f:ac:f9:a9:f2:18:03:fd:78:6b:d8:9e:60:d9:
4d:7e:d7:c7:78:37:66:1c:1f:52:78:08:9c:f0:14:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:B5:6A:3F:E7:9E:BB:B5:83:80:B3:A4:86:0F:2B:90:AC:21:F7
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/m_m1aj_nnru1g4CzpIYPK5CsIfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.205.0/24
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e3:11:d4:74:4b:a5:56:80:e1:ba:b5:0f:66:47:29:41:f4:
dc:eb:ca:be:56:23:30:82:d4:10:f6:0c:24:f1:65:82:01:d4:
70:de:d4:68:8c:fd:ca:9a:d7:e7:f0:63:da:62:16:63:ee:80:
c5:2b:c6:35:16:54:1d:c0:f1:3e:01:70:67:88:a6:90:d7:f1:
4a:6f:63:4a:26:1f:db:64:fe:af:50:56:dc:11:0e:d7:77:3c:
9e:e1:f8:c1:69:4f:35:ac:20:ef:e2:ee:10:d7:3a:c5:32:bb:
66:28:5b:31:e4:05:f4:42:13:e8:21:b2:a3:96:91:96:f1:71:
ff:01:84:d2:45:db:8e:6b:b5:99:98:12:e0:6c:74:01:9a:6b:
83:5e:50:ac:3a:38:cb:c3:11:dc:59:22:1e:01:c1:8d:60:c9:
cb:69:ee:f1:02:21:9e:7d:fc:af:23:68:c3:25:00:6a:63:a3:
af:9e:e9:35:b3:64:13:f0:78:5a:a2:ee:ab:0e:4a:64:02:46:
89:94:27:93:de:ca:98:f1:5d:cc:e3:fa:57:c9:9f:67:5c:63:
66:81:bc:a0:c4:6e:d3:80:70:82:78:83:29:d3:d8:b7:dc:da:
2d:f3:17:97:e8:f7:22:36:91:59:73:77:d9:81:68:9d:79:dc:
36:c4:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:02:26 2025 by rpki-client