Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/yx2S0W0P6nZwHnVoKa_HbpD6dbY.roa
File: yx2S0W0P6nZwHnVoKa_HbpD6dbY.roa (raw, json)
Hash identifier: 53AcRSzNwl/RNZeOZGzhJ23Fa13/iSQaZv9LAgoYOb0=
Subject key identifier: CB:1D:92:D1:6D:0F:EA:76:70:1E:75:68:29:AF:C7:6E:90:FA:75:B6
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0184A52EC5483A289505F18FF78D6D4D6EA6
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/yx2S0W0P6nZwHnVoKa_HbpD6dbY.roa
Signing time: Wed 23 Nov 2022 15:50:16 +0000
ROA not before: Wed 23 Nov 2022 15:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 109.122.206.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:2e:c5:48:3a:28:95:05:f1:8f:f7:8d:6d:4d:6e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Nov 23 15:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb1d92d16d0fea76701e756829afc76e90fa75b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:43:4e:38:19:da:0e:8f:95:b7:62:6f:3a:
1e:ff:67:40:0a:1c:13:2e:57:3c:2b:62:52:4f:0e:
16:52:7b:d6:62:b2:d5:66:67:81:1a:8b:9d:0a:0a:
93:dd:f3:e4:a1:e9:e9:cc:42:8b:ba:7d:9a:06:01:
2d:67:eb:46:4f:99:53:1d:cf:5d:43:f6:a8:da:4a:
88:f2:d0:ed:0d:ca:f5:02:d0:e9:75:9d:15:8a:12:
54:19:69:32:96:e3:92:84:16:fa:e5:82:09:4d:88:
f8:ce:01:b7:a7:cf:76:69:ab:0f:ca:de:16:1f:c1:
e8:76:81:11:ef:0d:f3:70:e0:c7:0a:2e:72:ad:a5:
c8:fd:8f:e7:85:92:d9:79:36:ce:de:f1:91:1e:66:
03:52:f3:8b:5a:6d:05:6b:20:cd:41:5f:fb:d0:e6:
14:2f:e4:5f:03:49:cf:28:a5:e8:d4:96:89:1e:ec:
db:b0:dd:83:0e:b0:43:74:f3:f7:86:2f:a3:13:27:
f7:f7:3a:89:93:bc:e3:19:7e:c6:4f:95:df:48:5d:
7b:7b:3b:af:54:33:fb:89:54:2b:ca:88:3f:ff:04:
b5:b7:2e:91:96:36:2b:1d:43:29:f4:94:16:15:e4:
8a:cd:af:cf:54:79:89:9c:c3:f1:e5:9f:7f:7a:2f:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:92:D1:6D:0F:EA:76:70:1E:75:68:29:AF:C7:6E:90:FA:75:B6
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/yx2S0W0P6nZwHnVoKa_HbpD6dbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.202.0/24
109.122.206.0/24
109.122.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:30:ce:49:00:dd:13:7b:f0:37:c3:c2:e2:ae:fe:e5:df:b6:
1a:71:f8:a5:40:79:7d:46:90:07:78:80:5f:a1:72:3d:ef:76:
29:66:bc:a0:48:59:f1:c5:c5:69:df:1f:49:e9:fe:3a:9d:54:
e7:eb:73:aa:b6:a8:75:28:96:81:09:c3:c8:3c:f8:62:6a:cc:
68:2d:ec:e1:04:b9:a8:8e:39:85:37:98:f6:9e:69:68:f2:a8:
8c:0a:51:8c:6c:83:60:b8:53:97:47:9e:02:fb:82:5d:80:26:
e4:2e:fb:9a:8f:49:e8:47:0e:28:ba:d5:f5:dd:82:95:30:aa:
bf:67:79:8e:af:50:0f:e6:bf:27:7c:6b:9d:ca:44:d8:69:74:
b7:30:d0:19:db:86:82:87:6a:4a:39:97:1a:bb:4b:d0:a0:a6:
eb:c2:18:f5:50:7b:e4:66:e1:ee:af:58:8c:9d:07:00:a4:4a:
f1:0d:2b:dd:2a:eb:0d:1c:e9:c2:2e:e7:5f:e5:27:4b:a4:e3:
cd:fd:e7:0a:39:a7:64:da:7b:24:44:d7:17:7e:73:28:f4:5e:
05:43:e1:84:e3:29:77:90:ef:3a:f5:29:97:07:ea:64:82:48:
18:06:68:96:a8:0b:eb:57:03:75:ea:69:2b:7f:8e:ed:88:96:
c8:84:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:40:54 2025 by rpki-client