Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/4ifvOXlGTcvZkDl3bBHXClzFH5s.roa
File: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (raw, json)
Hash identifier: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=
Subject key identifier: E2:27:EF:39:79:46:4D:CB:D9:90:39:77:6C:11:D7:0A:5C:C5:1F:9B
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019420D59C03670F95167D3D553E581CC864
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/4ifvOXlGTcvZkDl3bBHXClzFH5s.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 212.19.235.0/24 maxlen: 24
212.19.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9c:03:67:0f:95:16:7d:3d:55:3e:58:1c:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e227ef3979464dcbd99039776c11d70a5cc51f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:43:bf:aa:b7:43:34:ab:16:a4:27:6b:dd:
d3:71:b8:f6:5b:87:c0:f1:0e:96:72:36:71:ef:76:
26:d3:e2:77:10:33:ea:3b:ce:75:35:ba:bc:1d:48:
99:df:5f:14:10:8d:a1:42:f9:c1:ae:53:7b:28:f9:
f5:13:6f:06:11:d7:c2:ad:cf:f0:db:e9:98:03:ad:
d0:4b:fd:96:a9:eb:b3:b4:44:17:6b:ce:5a:40:49:
1e:9a:5f:90:06:ff:2e:6f:f7:db:75:20:af:c4:fa:
ee:bc:b6:c2:f2:b1:c4:6c:3d:09:50:42:a5:6d:c1:
68:e1:e8:08:d9:40:df:a6:86:4a:48:f7:ed:bc:21:
9e:d4:a3:0d:87:d3:c4:fe:1d:dd:5d:9e:7a:d7:4b:
22:e9:dc:bd:7b:87:79:83:36:cd:6b:65:fc:bf:ea:
b0:bb:04:4d:9c:20:da:51:32:41:aa:c5:92:a1:70:
85:b6:3b:a5:ba:b2:40:98:ae:d1:98:b9:00:46:fe:
5b:52:a6:62:69:19:09:1a:7a:57:48:6b:d9:aa:f3:
79:8c:20:63:15:03:7d:eb:14:33:fc:4d:d6:3f:8c:
50:c7:20:85:10:b0:31:2b:e6:0c:d0:f9:19:95:a9:
96:48:65:c1:7e:df:00:ef:4b:53:ba:70:d9:cc:25:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:EF:39:79:46:4D:CB:D9:90:39:77:6C:11:D7:0A:5C:C5:1F:9B
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/4ifvOXlGTcvZkDl3bBHXClzFH5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.19.235.0-212.19.236.255
Signature Algorithm: sha256WithRSAEncryption
44:46:ea:b3:27:9d:f5:50:21:31:e6:a2:13:5a:d0:bb:16:6b:
9d:77:1b:c1:59:ec:4e:fc:ee:43:5e:a5:5f:e3:d4:57:47:f7:
79:49:28:49:ea:e1:32:81:eb:7d:98:8c:5e:bf:df:4c:34:8c:
b1:7d:05:4b:c1:17:44:cf:d9:cf:71:aa:80:88:f8:f5:f2:4c:
bd:ad:d5:32:e1:0b:19:83:45:bf:fa:39:6c:26:25:62:ce:83:
d4:9b:19:e2:bc:5d:69:e1:22:2a:d7:40:f1:87:3b:0c:1e:aa:
2e:7a:a9:78:3e:d9:85:d1:87:fe:27:6d:8e:fe:39:08:2a:d3:
d1:0f:44:50:92:da:d6:cd:d5:a3:3e:9c:12:a0:9d:98:bb:41:
4b:c0:c1:36:05:5d:de:fe:25:f6:31:3a:ce:38:a5:4d:d8:fd:
02:9f:89:b4:c8:45:5e:d0:e1:23:a1:fa:96:2b:24:66:04:98:
e3:68:bf:81:17:67:44:30:35:28:c4:3e:0e:30:32:cc:6c:df:
f4:03:3f:0f:6b:1e:8a:fd:45:11:bd:89:2e:2e:33:b6:04:34:
cf:df:85:c1:f1:dd:98:56:ad:48:db:99:58:fb:c2:65:12:94:
3d:64:bc:d9:f4:94:7c:60:92:da:99:f9:7a:95:43:d6:76:9a:
4f:1d:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:36:04 2025 by rpki-client