Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/qASMa73DSeaxBYROZ6zE9WwqYoE.roa
File: qASMa73DSeaxBYROZ6zE9WwqYoE.roa (raw, json)
Hash identifier: lA0igxv3rulU1S0h523KlGCL2yoANjRM0rVpwvy0/Jk=
Subject key identifier: A8:04:8C:6B:BD:C3:49:E6:B1:05:84:4E:67:AC:C4:F5:6C:2A:62:81
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B56317C01A4BEAFE9F12F62DCB0C0
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/qASMa73DSeaxBYROZ6zE9WwqYoE.roa
Signing time: Sun 01 Jan 2023 21:44:46 +0000
ROA not before: Sun 01 Jan 2023 21:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 109.122.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:56:31:7c:01:a4:be:af:e9:f1:2f:62:dc:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8048c6bbdc349e6b105844e67acc4f56c2a6281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:bd:12:1b:99:66:11:1c:6c:96:74:ce:e3:
b0:03:0e:c9:f2:14:cd:cf:b6:54:c5:b3:96:62:04:
48:1f:88:1c:b2:78:ff:dc:38:c8:92:b5:03:85:bc:
d6:d8:1c:27:96:fb:04:3b:cf:a1:f6:a3:1e:2b:28:
3a:44:84:8e:27:d3:ba:7e:56:20:ae:b4:23:c8:e9:
f5:b4:d2:99:e8:08:9e:66:71:53:cc:bd:01:1b:45:
73:39:a9:f9:ba:a5:bd:26:0a:2a:62:32:72:62:8b:
94:65:2d:a9:f0:09:14:a6:6a:ca:ec:8e:f5:55:9e:
e4:db:c3:d1:74:db:b7:1b:c0:d1:61:56:db:94:dc:
a0:05:7d:c4:d7:ca:3f:f3:b5:af:85:88:f3:79:92:
51:96:a5:cd:d4:34:74:3e:9b:a2:69:7d:d5:3c:48:
c1:1c:ff:18:c3:2a:1b:fb:d6:71:61:f0:dd:3c:8c:
56:88:82:49:3f:95:45:4d:81:93:9d:dc:9e:cf:a0:
e8:3a:4a:3e:a2:5a:bb:5c:8e:fd:b3:42:d5:a3:12:
2a:28:84:1b:8a:fb:a8:c2:b7:06:a3:58:35:f6:9c:
77:95:18:a5:c6:53:29:cf:ca:a0:50:44:20:de:ce:
47:80:50:f4:16:1e:ee:a1:6b:1a:73:c5:82:d1:c1:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:8C:6B:BD:C3:49:E6:B1:05:84:4E:67:AC:C4:F5:6C:2A:62:81
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/qASMa73DSeaxBYROZ6zE9WwqYoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.201.0/24
Signature Algorithm: sha256WithRSAEncryption
92:27:8b:0f:84:3a:19:76:aa:87:48:40:77:52:e7:48:c8:02:
30:39:d4:cd:d3:d2:cf:68:3a:de:17:88:4b:f5:c5:32:a0:8a:
3f:32:75:c8:21:18:5b:a9:b9:07:92:59:e9:d0:f5:54:7a:79:
e1:c0:af:03:2a:55:d2:a6:51:3a:bb:97:ab:c0:f8:db:e4:43:
e3:53:f3:5d:d4:04:6d:6d:c9:59:d8:a9:23:14:04:3b:94:06:
b4:e1:75:f2:ea:2f:98:6d:ae:8b:8f:98:3d:ea:22:d3:e5:c2:
88:25:0f:32:a0:93:db:c9:f8:a1:2b:a0:92:44:b6:89:2d:02:
65:94:b7:ab:2c:1a:56:11:bc:97:ec:82:e8:a4:56:17:af:5d:
8d:c7:8d:ae:62:8d:7e:d5:72:56:7e:f7:38:c4:a5:d6:72:1f:
b9:e2:3e:df:13:de:29:81:d1:71:d0:d3:af:cb:87:96:24:07:
fc:c2:52:c4:10:58:a7:44:d2:34:1b:50:31:5e:34:c7:66:d4:
ae:8e:2f:f6:af:98:e2:5e:cd:39:2f:e1:0e:51:8b:cc:9f:43:
10:02:94:a0:88:0a:24:80:34:88:c9:69:78:25:99:20:eb:e8:
9d:90:4a:10:f4:e7:94:1b:1d:f2:d6:13:8b:0e:fe:a6:88:00:
95:fa:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:06:33 2025 by rpki-client