Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/sCbFIO5oInHtIkztLpnZJ9kg3Fo.roa
File: sCbFIO5oInHtIkztLpnZJ9kg3Fo.roa (raw, json)
Hash identifier: olyvASMw6qCtvexL9ZVM805EIftUX7VGLw5I1nIdc9I=
Subject key identifier: B0:26:C5:20:EE:68:22:71:ED:22:4C:ED:2E:99:D9:27:D9:20:DC:5A
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0181D4434A1D421EC4D5382A90DDD772958F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/sCbFIO5oInHtIkztLpnZJ9kg3Fo.roa
Signing time: Wed 06 Jul 2022 16:06:28 +0000
ROA not before: Wed 06 Jul 2022 16:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 109.122.218.0/23 maxlen: 24
109.122.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:43:4a:1d:42:1e:c4:d5:38:2a:90:dd:d7:72:95:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jul 6 16:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b026c520ee682271ed224ced2e99d927d920dc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:ef:5c:f1:93:b1:fd:15:99:67:d7:0d:93:
bb:19:42:40:be:f6:d1:4c:da:ed:7b:fa:8b:d7:0b:
15:91:a0:32:71:ed:6e:f1:af:0c:e5:eb:81:2e:df:
7f:cc:a0:62:2f:47:8f:28:fd:95:cf:32:59:9e:35:
5c:70:ae:44:12:11:2c:ee:c5:37:a0:00:f1:50:26:
f8:7f:88:c3:ce:31:90:67:ca:a4:0e:13:45:eb:ef:
ed:78:36:27:03:d9:64:ac:1a:08:94:ed:23:e1:b0:
d3:62:5f:ac:07:a4:7f:f0:0a:ba:44:bf:cc:00:fa:
08:e7:35:0d:3e:b4:2b:51:1d:8b:fb:73:b2:f9:4d:
61:4c:70:33:28:29:24:d6:48:58:d9:04:4d:96:2f:
cd:3d:07:d7:ae:07:b7:2f:f3:bf:5a:71:3e:17:03:
0e:aa:09:dc:ca:f0:46:d3:29:ae:c7:d1:87:89:03:
25:88:d3:9d:e4:d2:66:ad:4e:cb:4b:2f:16:cd:ff:
73:ac:c4:b4:7b:37:fe:a4:bb:8c:bd:7d:d3:cf:60:
ea:fa:f0:64:23:48:75:ea:f8:3c:a5:38:0b:c7:78:
62:41:41:54:1d:c6:c0:d5:bb:36:1c:ae:41:3a:e7:
fe:06:86:c6:28:cb:a2:29:30:8c:62:67:30:a8:20:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:C5:20:EE:68:22:71:ED:22:4C:ED:2E:99:D9:27:D9:20:DC:5A
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/sCbFIO5oInHtIkztLpnZJ9kg3Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.218.0-109.122.221.255
Signature Algorithm: sha256WithRSAEncryption
83:d8:80:e3:15:1b:7e:10:af:b9:92:75:d7:91:05:0b:ec:b0:
f7:19:46:e7:ff:09:b1:b9:6b:b0:eb:ae:4b:60:7d:c3:a4:a5:
13:73:06:f6:81:02:a5:0b:3e:78:04:fc:df:a8:d9:2b:c6:57:
67:cf:c4:d3:6f:1b:63:43:8a:b2:3e:dc:0a:ac:dc:01:9e:40:
a8:45:0d:16:25:c7:e4:00:3a:e3:bf:fb:e2:7c:fa:9b:11:4b:
d3:eb:53:cc:ae:39:ee:18:f0:53:50:7d:a5:71:7d:ae:42:23:
c9:6d:39:92:a2:e1:70:11:38:3f:4d:13:19:72:20:11:59:81:
b1:4d:bc:01:f2:9f:32:66:29:a9:2b:0e:bd:bc:e4:a6:df:32:
ab:72:d6:32:b1:6c:95:37:c6:0f:a2:8b:c0:c1:3d:15:94:d9:
60:73:3a:11:ff:79:4f:67:94:2c:23:3b:b7:81:10:0d:d2:9d:
6e:f5:37:26:83:d5:a8:c8:d3:fb:53:72:59:95:5a:be:e6:4c:
f0:1d:ca:a3:02:97:08:aa:56:e2:aa:c5:5e:88:2c:66:b0:23:
18:83:e3:0f:5c:6c:05:25:f8:cb:24:d4:cd:24:f4:f4:b5:ca:
fd:2c:32:64:d8:1f:d3:ed:94:88:5d:39:ef:01:8f:0f:4c:46:
e0:67:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:11:15 2025 by rpki-client