Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/86yMutrW94jAoFqGGLp05wok-EU.roa
File: 86yMutrW94jAoFqGGLp05wok-EU.roa (raw, json)
Hash identifier: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=
Subject key identifier: F3:AC:8C:BA:DA:D6:F7:88:C0:A0:5A:86:18:BA:74:E7:0A:24:F8:45
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 01942827919F8C4F4653E68F20C01AEDA7ED
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/86yMutrW94jAoFqGGLp05wok-EU.roa
Signing time: Thu 02 Jan 2025 17:54:29 +0000
ROA not before: Thu 02 Jan 2025 17:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200682
IP address blocks: 212.161.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:91:9f:8c:4f:46:53:e6:8f:20:c0:1a:ed:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3ac8cbadad6f788c0a05a8618ba74e70a24f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:51:42:50:6e:20:e4:82:e3:fb:74:8a:0c:
5d:91:85:4e:81:8d:24:7c:04:14:7e:9b:06:3d:b4:
d5:84:4b:b9:31:2a:c9:cc:d7:b6:59:97:1e:cf:8f:
55:5c:4f:38:39:d1:b3:38:71:e8:11:3d:e2:79:8e:
0c:1b:15:b9:08:04:ee:89:f0:fa:6a:04:6f:34:ee:
36:bc:36:dc:6d:8d:5b:73:a5:c7:f9:fe:44:72:69:
af:39:a2:34:5e:e5:53:af:ac:72:ce:fb:d5:2c:11:
fb:b3:b5:f4:a4:0b:bb:a2:bf:3a:92:f9:a9:1f:cc:
1b:e9:f5:be:30:91:1f:72:2d:ea:cf:b4:ee:6d:32:
65:9b:96:9b:24:2f:2f:d9:eb:30:ce:f2:08:71:b1:
93:af:a0:f7:d1:26:74:ee:0e:b3:0d:fe:0d:ad:08:
a6:5e:88:ed:e4:85:63:97:39:71:9e:5e:5f:72:f2:
ff:d5:fb:f6:a8:f9:53:81:88:76:ab:38:3c:85:50:
ed:9e:e6:51:35:7b:b2:5b:ec:b0:61:91:a6:ff:94:
60:2e:d3:66:9f:f0:15:ea:bd:45:e9:4e:3a:47:b3:
43:b4:37:af:9b:17:de:e1:c7:3b:78:f5:64:fc:aa:
f9:52:7f:b6:cb:b4:b4:c3:12:14:28:c4:94:ae:8d:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:8C:BA:DA:D6:F7:88:C0:A0:5A:86:18:BA:74:E7:0A:24:F8:45
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/86yMutrW94jAoFqGGLp05wok-EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.161.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ed:6f:78:2a:9a:ab:e0:34:70:f1:f2:fa:e6:18:21:18:66:
1c:67:c4:d3:12:91:de:30:6e:38:4f:29:8d:34:c1:31:bc:3a:
8e:57:22:f2:9d:b8:f8:bc:76:95:89:2b:1b:f3:4b:64:ac:71:
fe:94:bf:32:43:48:dd:62:69:56:e2:3b:99:3a:17:1f:d1:26:
9d:92:4c:99:6d:3c:dc:ea:32:ee:5a:b8:d3:c7:83:09:4b:ad:
62:2c:87:ab:81:50:ec:36:ba:9e:11:3a:0b:e3:30:61:be:c0:
e3:fb:ce:2a:d4:1a:15:64:50:ed:cc:96:8a:73:b4:13:68:56:
6a:3c:ca:93:a9:85:18:f4:a5:5e:95:ea:72:01:e8:50:34:81:
bb:8c:67:42:24:ed:e5:c9:87:de:7f:d6:bf:92:5f:9f:23:db:
45:16:d8:17:48:80:ff:fd:ac:3e:d3:4c:4a:d5:27:5e:c1:55:
67:7d:c6:88:3b:ce:c1:c8:09:b0:c2:81:4d:a8:99:d4:56:4e:
3d:b6:79:6d:81:3e:ac:1d:53:91:ff:2c:b8:9b:21:f4:a1:5a:
fe:24:3a:00:e6:b1:66:e3:b9:ae:2d:eb:1d:18:27:70:d7:3d:
69:66:65:b5:93:c2:ae:ef:79:ed:ab:f8:b1:d3:47:87:b0:43:
dc:87:2a:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ5GfjE9GU+aPIMAa7aftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUwMTAyMTc1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2FjOGNiYWRhZDZmNzg4YzBhMDVhODYxOGJhNzRlNzBhMjRmODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOhRQlBuIOSC4/t0igxdkYVOgY0k
fAQUfpsGPbTVhEu5MSrJzNe2WZcez49VXE84OdGzOHHoET3ieY4MGxW5CATuifD6
agRvNO42vDbcbY1bc6XH+f5EcmmvOaI0XuVTr6xyzvvVLBH7s7X0pAu7or86kvmp
H8wb6fW+MJEfci3qz7TubTJlm5abJC8v2eswzvIIcbGTr6D30SZ07g6zDf4NrQim
Xojt5IVjlzlxnl5fcvL/1fv2qPlTgYh2qzg8hVDtnuZRNXuyW+ywYZGm/5RgLtNm
n/AV6r1F6U46R7NDtDevmxfe4cc7ePVk/Kr5Un+2y7S0wxIUKMSUro20bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOsjLra1veIwKBahhi6dOcKJPhFMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvODZ5TXV0clc5NGpBb0ZxR0dMcDA1d29rLUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1KE7MA0G
CSqGSIb3DQEBCwUAA4IBAQAK7W94Kpqr4DRw8fL65hghGGYcZ8TTEpHeMG44TymN
NMExvDqOVyLynbj4vHaViSsb80tkrHH+lL8yQ0jdYmlW4juZOhcf0SadkkyZbTzc
6jLuWrjTx4MJS61iLIergVDsNrqeEToL4zBhvsDj+84q1BoVZFDtzJaKc7QTaFZq
PMqTqYUY9KVelepyAehQNIG7jGdCJO3lyYfef9a/kl+fI9tFFtgXSID//aw+00xK
1SdewVVnfcaIO87ByAmwwoFNqJnUVk49tnltgT6sHVOR/yy4myH0oVr+JDoA5rFm
47muLesdGCdw1z1pZmW1k8Ku73ntq/ix00eHsEPchyp4
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:47 2025 by rpki-client