Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/sLCVmvj1cv0l6fkLKCbqAz3d_x0.roa
File: sLCVmvj1cv0l6fkLKCbqAz3d_x0.roa (raw, json)
Hash identifier: Bx9bkFRRGlTEZde5qQU0Jk5/MfSNIzMrX7U9YE6jjV0=
Subject key identifier: B0:B0:95:9A:F8:F5:72:FD:25:E9:F9:0B:28:26:EA:03:3D:DD:FF:1D
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B51152A42935573C82D157EF73041
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/sLCVmvj1cv0l6fkLKCbqAz3d_x0.roa
Signing time: Sun 01 Jan 2023 21:44:44 +0000
ROA not before: Sun 01 Jan 2023 21:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 109.122.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:51:15:2a:42:93:55:73:c8:2d:15:7e:f7:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0b0959af8f572fd25e9f90b2826ea033dddff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:de:22:8a:80:65:7e:b3:f7:ff:bf:a0:c1:
ba:c2:e3:a2:42:9e:dd:74:fd:37:f8:1e:6e:bd:73:
0e:e6:9c:f8:71:00:95:45:e3:cb:fa:d2:a3:c9:de:
05:b8:f8:87:06:66:39:66:26:a1:50:9b:59:cd:e3:
f1:9e:ec:fd:be:72:91:ae:2b:49:0f:27:5c:32:c5:
3f:14:7c:d6:69:33:46:36:41:9e:73:b8:38:78:77:
2d:36:19:8a:54:63:ba:ca:24:7a:64:18:d1:bf:ae:
79:ee:21:ff:68:01:88:e5:bd:46:fb:44:8b:5c:3d:
ba:f4:8e:b2:29:3d:f6:b2:9c:89:e2:49:b8:f4:e6:
ed:b1:05:cb:b9:d4:48:2c:91:23:69:94:95:cf:00:
1a:4e:02:09:ee:6b:7a:b5:8e:66:96:03:48:75:87:
ad:95:25:90:17:13:b9:4d:62:28:55:23:6f:87:bd:
a9:68:9c:40:15:b7:46:16:9f:c2:dd:1e:f1:8a:82:
ee:6d:1d:7b:c4:83:94:3f:f8:23:7b:99:df:6f:95:
3e:aa:63:5b:a5:74:87:ca:3c:91:d4:03:44:82:90:
41:5b:7c:87:27:62:a4:1e:c3:d6:ac:d0:39:5a:71:
30:f6:47:6d:98:e3:68:4f:10:e6:ca:48:43:ef:86:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:95:9A:F8:F5:72:FD:25:E9:F9:0B:28:26:EA:03:3D:DD:FF:1D
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/sLCVmvj1cv0l6fkLKCbqAz3d_x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1a:f0:9f:7d:f8:25:89:d3:9f:a5:f2:7b:df:52:f3:53:5e:
c0:79:ce:7e:59:e9:18:58:72:0b:78:89:4a:fd:9b:26:72:6b:
fb:4a:cb:8c:37:ad:f2:c8:f5:12:ed:0e:63:e4:a3:83:9d:bb:
4c:8c:09:8c:f2:57:82:1b:35:57:d5:c3:2a:50:0f:70:f6:a4:
bd:d2:1d:74:b5:b5:fa:5e:88:39:9f:8e:41:43:f4:9f:05:be:
fd:38:da:47:96:91:00:9c:1f:9e:fb:2b:9c:f1:70:ba:9d:64:
69:81:d8:1e:0d:6c:4b:f0:bc:1e:cb:04:6d:fc:55:87:3b:a1:
5f:ca:3f:e7:66:6a:14:2b:3b:e4:35:fa:a8:5e:e4:8a:03:73:
d3:88:1d:40:2c:12:55:cf:3a:3d:39:85:6f:e2:17:24:a9:8c:
d6:52:90:bf:55:06:51:47:2b:30:bf:34:7d:c8:5a:95:5d:89:
a5:f1:27:98:9b:29:84:e6:ce:65:10:b5:a1:14:0c:e3:46:c0:
4b:8d:b0:f0:73:97:15:88:c5:62:88:69:c9:a7:cb:05:83:12:
2a:f1:20:8e:41:4b:c4:67:b2:71:f8:ca:45:fa:bf:10:b0:fd:
65:36:e3:23:67:b1:fc:99:8e:1f:c7:c3:b2:59:f5:99:ac:a4:
47:a9:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:29:40 2025 by rpki-client