Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/yH5cb0LJ2PD5GDLCYboXIchPpCY.roa
File: yH5cb0LJ2PD5GDLCYboXIchPpCY.roa (raw, json)
Hash identifier: jfIFml0NMjEXtuiga2jq7sYokWvn8KqO+9iC1rw9SIc=
Subject key identifier: C8:7E:5C:6F:42:C9:D8:F0:F9:18:32:C2:61:BA:17:21:C8:4F:A4:26
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183A6694D596A9E94213BF1B880F468E31A
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/yH5cb0LJ2PD5GDLCYboXIchPpCY.roa
Signing time: Wed 05 Oct 2022 04:31:02 +0000
ROA not before: Wed 05 Oct 2022 04:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
109.122.218.0/24 maxlen: 24
109.122.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a6:69:4d:59:6a:9e:94:21:3b:f1:b8:80:f4:68:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 5 04:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c87e5c6f42c9d8f0f91832c261ba1721c84fa426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:04:b3:25:a3:32:83:2b:83:08:0a:47:59:
8e:bd:27:2c:d9:9b:0e:35:40:25:eb:a4:66:bf:f0:
b3:77:5d:b1:b3:2d:5a:9b:28:a3:ce:c6:35:50:74:
f1:da:36:4b:8a:5a:5e:fc:32:ea:be:61:dc:c3:bc:
f4:a4:c7:a5:5d:5f:86:04:ec:95:2e:e3:b9:25:2f:
5c:2f:4f:31:19:8e:80:7e:2f:48:53:5c:aa:de:7b:
8e:e2:89:0d:d5:e4:cb:5d:9f:ea:5f:f7:2e:e1:a1:
82:fd:66:27:3b:84:df:84:c8:d1:35:9f:d4:18:41:
80:c5:7c:e0:22:4e:0b:a3:58:4b:87:93:a9:e3:e0:
1b:40:32:bc:62:e8:c2:88:b8:32:95:6a:db:df:ba:
73:d8:92:d4:dd:0c:ba:ff:95:2a:29:5d:ed:08:b8:
af:8b:a9:cf:14:d9:b8:a2:d7:c8:5e:a1:fa:c4:2a:
a0:31:d6:eb:5b:43:eb:0c:e9:11:13:e8:6d:8e:ed:
72:79:d3:9b:3a:db:5b:82:be:e5:7b:81:5c:88:11:
c3:67:d8:35:64:f3:c9:2a:d2:d6:d9:92:59:06:c4:
ed:de:9e:54:05:8a:51:86:5a:37:44:b6:2a:10:0a:
fe:60:c4:56:9a:d8:cc:25:01:99:b1:6b:70:1e:21:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7E:5C:6F:42:C9:D8:F0:F9:18:32:C2:61:BA:17:21:C8:4F:A4:26
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/yH5cb0LJ2PD5GDLCYboXIchPpCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
109.122.202.0/24
109.122.214.0/24
109.122.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c6:46:b8:7e:4a:97:d3:d5:99:56:f7:64:97:43:f2:37:41:
ca:88:d2:3f:f2:a3:ef:84:86:e6:04:36:ff:87:bb:41:d9:d5:
5e:c3:60:f9:ec:05:4a:d1:58:ae:56:90:5d:de:1c:ce:c1:3d:
a9:74:82:bd:3a:c8:09:57:5d:ee:10:c2:82:59:ca:95:c2:ca:
fe:d1:4d:db:92:1c:48:34:a5:b7:51:d7:8a:3e:2e:48:ed:f1:
95:59:23:0b:3e:b5:d5:f2:a8:a9:51:a3:97:9c:71:20:3f:22:
9e:b8:c5:ce:1a:fb:08:a1:11:02:a3:58:16:33:b0:b3:98:6e:
59:46:8c:73:ce:58:ab:4d:4b:7e:8d:f7:0f:96:1f:e8:83:9b:
4f:9a:f1:ea:af:0c:09:96:72:f1:8f:65:af:6c:a6:52:6a:f1:
e0:d9:98:74:2d:6f:32:21:2c:cc:6e:14:e8:0e:cb:58:27:40:
d1:87:dd:07:03:72:04:0b:d7:48:e4:a7:bb:1a:26:ee:dc:b5:
14:d4:93:ab:c0:2d:7d:cb:54:4a:33:92:3e:08:14:3f:ed:ed:
bb:74:13:48:5a:d1:2f:f1:e6:79:e5:6f:c3:86:27:70:67:20:
73:5c:e0:a8:fa:8a:ea:c5:7c:83:f9:a9:7d:12:9d:bf:8f:46:
cd:88:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:08:21 2025 by rpki-client