Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/zvPbRmTApx0252LneGeCAL6JYRg.roa
File: zvPbRmTApx0252LneGeCAL6JYRg.roa (raw, json)
Hash identifier: PxkXv0/c+g/bg3XPVUc4JC8SfVCtehswc1F61JIX4PE=
Subject key identifier: CE:F3:DB:46:64:C0:A7:1D:36:E7:62:E7:78:67:82:00:BE:89:61:18
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01821574277F5294BF836E079B1528FF4A79
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/zvPbRmTApx0252LneGeCAL6JYRg.roa
Signing time: Tue 19 Jul 2022 07:55:09 +0000
ROA not before: Tue 19 Jul 2022 07:55:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 109.122.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:74:27:7f:52:94:bf:83:6e:07:9b:15:28:ff:4a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jul 19 07:55:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cef3db4664c0a71d36e762e778678200be896118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:e2:f4:71:86:80:6f:af:3f:b7:07:62:19:
df:3f:6f:bd:13:b5:22:8c:e8:96:8a:cb:9e:db:f1:
d8:e1:e1:6f:ae:bf:7e:ae:b0:77:9f:54:50:84:de:
d1:85:86:d6:a2:3f:5d:6c:9b:5a:bb:c0:cd:06:72:
00:cf:04:45:c1:c3:9a:25:e8:35:85:f8:df:c3:f0:
61:ea:bc:8a:c5:ed:ff:cb:75:a5:7b:51:b1:2d:c7:
66:af:9b:44:26:43:f2:e9:02:dc:54:da:72:8f:90:
bb:b6:80:2f:ab:30:d4:5e:dd:4f:42:d6:76:09:c8:
d6:60:31:79:26:a6:7e:c0:d7:02:bd:14:e1:1c:ac:
39:4d:04:83:96:8d:b8:6c:08:e2:26:8e:3b:86:a5:
bf:96:1e:fd:ee:73:6a:dd:40:28:3e:ee:79:22:ad:
38:7d:92:71:e1:e2:57:81:9d:14:aa:26:a7:ce:3d:
6e:c8:82:22:43:20:c2:db:61:3b:2f:f9:ec:cf:2f:
b0:7a:af:4d:65:dd:dd:0d:7f:8e:c3:22:a4:2c:ab:
77:18:e2:68:db:7c:54:90:58:b0:bf:38:69:4a:1f:
85:19:99:6b:67:f0:cb:55:e5:a3:6e:9f:78:85:de:
d1:f1:45:61:49:f9:12:d3:39:26:9e:fe:e7:6f:8d:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:DB:46:64:C0:A7:1D:36:E7:62:E7:78:67:82:00:BE:89:61:18
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/zvPbRmTApx0252LneGeCAL6JYRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.218.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:84:c6:f3:59:61:46:06:1a:71:4f:3e:f4:d2:1a:18:02:f6:
9c:78:45:b1:15:e1:16:5a:a0:02:88:9d:3e:9e:7b:06:2a:7d:
36:52:4b:cc:52:ff:c4:6f:a3:c5:5b:c5:cf:03:79:56:68:76:
c5:00:5f:69:ef:33:c4:df:a1:1c:2a:e4:f5:fe:b0:13:8a:c4:
36:16:11:f3:99:4c:70:0f:8b:92:98:73:3d:b9:ba:d7:18:05:
6c:42:b1:ea:3c:99:d7:9d:99:a5:75:22:31:30:e4:1a:eb:74:
34:16:ba:6a:42:8d:b6:f8:47:21:96:83:03:d6:db:20:b9:66:
09:ee:c4:04:e3:17:b9:66:fb:52:0e:1f:42:eb:ee:7d:cd:4b:
08:f6:4c:70:32:3a:fc:9c:9c:8d:9a:7e:96:ee:5d:6b:83:27:
d4:70:28:93:8a:2f:13:8f:0c:39:78:8f:46:36:01:ee:6b:21:
27:29:9b:a7:e3:22:3e:1a:77:e2:92:74:0f:f3:bb:d2:59:9e:
a7:cd:73:09:b0:fd:44:ee:d6:31:d5:98:0a:ae:56:85:de:48:
3e:4b:c8:41:31:dc:84:27:c2:09:45:fc:e2:d0:a5:c3:9d:e0:
b0:41:60:23:3d:d9:42:d8:d8:9f:4f:b1:87:c9:04:5c:f4:89:
0a:0e:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:23:07 2025 by rpki-client