Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/pxHROhjYPI56yjs1uZ9NF24BHx0.roa
File: pxHROhjYPI56yjs1uZ9NF24BHx0.roa (raw, json)
Hash identifier: kJ3/s7DTnqy7mS4gwaf4rzSpIZzEINrH2esk7jkh5FE=
Subject key identifier: A7:11:D1:3A:18:D8:3C:8E:7A:CA:3B:35:B9:9F:4D:17:6E:01:1F:1D
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 018365402E082E40867390FEFC18C9EA67FC
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/pxHROhjYPI56yjs1uZ9NF24BHx0.roa
Signing time: Thu 22 Sep 2022 12:50:48 +0000
ROA not before: Thu 22 Sep 2022 12:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 109.122.206.0/23 maxlen: 24
109.122.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:40:2e:08:2e:40:86:73:90:fe:fc:18:c9:ea:67:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Sep 22 12:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a711d13a18d83c8e7aca3b35b99f4d176e011f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:f2:e8:8b:e3:d3:41:97:ea:d2:9f:0b:88:
24:8c:dd:02:48:ae:4c:6b:03:59:3b:d7:d9:5b:7d:
c1:49:2b:42:4b:4a:3c:e8:a3:8e:2b:dd:9d:69:f0:
7c:78:54:75:ec:33:b9:00:3a:fc:b6:c4:ef:e2:13:
03:d4:58:47:ac:9c:1b:10:50:87:43:97:1f:3d:5e:
f1:40:68:93:48:80:49:5c:17:be:58:77:e6:93:6b:
46:95:39:50:80:4c:43:1d:53:58:91:86:91:87:b3:
43:17:79:83:c8:11:77:dc:b8:ee:e4:3b:f9:54:7b:
5e:2c:24:31:60:75:44:c5:60:be:50:b4:0a:98:88:
f7:df:c6:6f:de:88:42:17:3b:81:73:56:e4:3a:26:
43:1c:17:38:8c:90:4e:57:c6:ad:0f:20:0c:7b:dd:
d0:0b:ff:8e:e4:7b:86:16:f3:0f:5a:0c:4d:2b:30:
25:49:31:66:0f:67:16:3b:06:09:d3:07:5c:f0:7a:
40:3b:6c:3d:73:62:71:04:97:08:d7:54:dd:f1:2a:
0a:5e:ce:4f:4c:0a:f4:34:95:21:5b:cd:f4:ef:d8:
49:49:5d:a2:52:73:c8:25:c8:4e:1c:1f:fe:9e:e5:
63:b6:0b:eb:4b:5f:dc:9a:9e:0d:93:c1:d6:b7:2e:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:D1:3A:18:D8:3C:8E:7A:CA:3B:35:B9:9F:4D:17:6E:01:1F:1D
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/pxHROhjYPI56yjs1uZ9NF24BHx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.206.0/23
109.122.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0f:8b:33:15:48:5e:34:9b:cf:c4:c4:83:7b:57:b3:2b:e2:
5f:1c:fa:c5:c5:ed:22:53:77:58:d8:98:4f:65:7c:96:80:2c:
42:4e:14:da:0a:0b:05:0e:72:23:40:1a:4a:12:e6:50:ac:e3:
cc:04:69:07:21:d4:33:55:06:f0:28:11:92:5e:38:71:39:3b:
64:9e:26:76:77:59:2f:92:cb:76:72:f4:b5:09:ec:fe:87:b2:
f7:b0:d5:a0:31:14:bc:c4:74:30:62:36:b8:ba:de:af:00:38:
7b:0c:d0:f3:41:69:d2:48:06:09:ee:59:72:41:02:b2:e9:6a:
7b:fc:d4:2e:ae:bc:e2:a0:4d:75:f3:b9:08:ab:c2:08:74:34:
98:6e:39:7b:02:b9:d4:ab:fa:56:9d:2e:b4:4d:5f:31:eb:c2:
68:97:82:89:51:6c:ae:cb:90:66:05:e3:88:71:4c:87:1b:75:
08:49:c8:39:a5:f0:75:e2:b9:bf:af:18:d8:69:2d:34:be:10:
22:65:7c:81:64:3f:88:c8:d2:02:a3:d1:bf:51:3d:56:e4:20:
e7:80:45:00:bf:b0:3f:72:de:85:3b:0f:77:a4:35:e9:f6:08:
41:b1:92:e5:d7:26:2f:84:a4:06:8a:4d:e3:21:b7:a6:52:1a:
a2:57:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:11:39 2025 by rpki-client