Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/9d4vehXr1KQWWuNr4btcQyeNAOw.roa
File: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (raw, json)
Hash identifier: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=
Subject key identifier: F5:DE:2F:7A:15:EB:D4:A4:16:5A:E3:6B:E1:BB:5C:43:27:8D:00:EC
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278F74648F618C2EC9E5A787BB6B66
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/9d4vehXr1KQWWuNr4btcQyeNAOw.roa
Signing time: Thu 02 Jan 2025 17:54:28 +0000
ROA not before: Thu 02 Jan 2025 17:54:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60845
IP address blocks: 62.96.212.0/24 maxlen: 24
212.121.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:8f:74:64:8f:61:8c:2e:c9:e5:a7:87:bb:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5de2f7a15ebd4a4165ae36be1bb5c43278d00ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:42:ec:30:bc:f4:ed:59:41:c5:7a:cb:3d:
40:0d:bb:13:ce:96:f1:79:96:bf:2d:6c:da:da:4e:
ce:a7:6d:59:c0:cd:ee:e4:18:66:dc:82:63:70:f5:
1b:e1:d3:7a:e7:40:31:8c:2a:c5:21:a9:26:0a:75:
7e:4e:5c:75:50:51:0d:bd:e7:0e:7a:20:a5:76:34:
01:08:f1:ff:31:c5:80:0e:8a:e8:31:d1:3c:76:a0:
bd:35:76:22:a8:d2:6b:b5:fc:a0:16:9b:35:6e:4b:
5e:1f:52:85:85:06:37:97:7e:b0:d5:92:a1:3a:ec:
52:44:d4:fa:8a:28:f9:c7:63:45:e4:d6:ee:c7:50:
b7:6e:86:0d:69:dc:ff:21:a6:42:2d:ca:b8:f2:7a:
dc:6b:7b:ac:46:89:07:23:5f:ba:ef:1c:e3:1b:48:
f4:4e:ec:44:de:03:c9:4c:87:6a:e5:f1:36:ea:1f:
c0:e6:47:f3:d8:e5:3f:39:e6:24:2f:41:ef:41:0d:
27:d6:a3:cf:e4:9f:13:9f:e4:9c:f3:d4:e6:0f:49:
f8:b1:a8:6d:61:d1:2e:93:77:d5:ac:8e:7b:3e:d9:
62:31:3d:98:81:2e:9a:67:67:7d:59:3d:c1:20:e7:
15:67:2e:91:b3:9e:f3:d2:12:af:9e:46:ea:93:ce:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DE:2F:7A:15:EB:D4:A4:16:5A:E3:6B:E1:BB:5C:43:27:8D:00:EC
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/9d4vehXr1KQWWuNr4btcQyeNAOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.96.212.0/24
212.121.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c3:82:12:cf:c9:6d:36:5b:d9:ea:70:85:d1:88:da:31:54:
6f:41:e4:6a:63:c5:36:13:f1:e5:04:e4:2c:23:39:8d:96:fc:
37:95:3d:9b:76:53:53:3d:0c:f2:a9:e7:c4:13:7b:44:26:7e:
7c:d4:dd:5a:4e:06:b3:04:dd:0d:7f:f0:52:b2:85:2b:3d:45:
80:38:96:ea:81:3f:cc:c7:7c:42:30:32:78:56:d7:dd:31:e7:
3a:99:b9:e8:73:37:14:5f:20:f9:df:07:a5:c5:9d:0e:8a:e6:
4e:be:90:7d:5e:c5:49:81:94:70:d2:ec:78:19:36:d2:ca:cf:
ab:2b:de:62:44:8c:71:8a:a4:5c:85:98:75:0f:3a:54:74:90:
bf:bb:45:76:a3:90:26:26:a9:01:39:c3:4e:26:fd:1a:ef:32:
cf:49:35:3e:72:e0:6b:bb:6c:04:f6:0c:c1:56:1c:b3:68:24:
f3:aa:4f:48:eb:fb:c1:45:71:e5:b3:69:46:f9:9c:bd:ba:2c:
d8:51:3a:96:53:35:dd:cc:6f:2e:da:73:b3:f3:a1:87:85:1c:
9b:aa:71:2f:e6:61:40:fc:b0:e3:2b:5a:48:50:1e:5a:c4:7d:
0b:48:39:9e:88:c9:91:5a:70:e7:72:f3:08:03:ba:b8:c5:56:
78:b2:8c:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJ490ZI9hjC7J5aeHu2tmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUwMTAyMTc1NDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWRlMmY3YTE1ZWJkNGE0MTY1YWUzNmJlMWJiNWM0MzI3OGQwMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlpC7DC89O1ZQcV6yz1ADbsTzpbx
eZa/LWza2k7Op21ZwM3u5Bhm3IJjcPUb4dN650AxjCrFIakmCnV+Tlx1UFENvecO
eiCldjQBCPH/McWADoroMdE8dqC9NXYiqNJrtfygFps1bkteH1KFhQY3l36w1ZKh
OuxSRNT6iij5x2NF5Nbux1C3boYNadz/IaZCLcq48nrca3usRokHI1+67xzjG0j0
TuxE3gPJTIdq5fE26h/A5kfz2OU/OeYkL0HvQQ0n1qPP5J8Tn+Sc89TmD0n4saht
YdEuk3fVrI57PtliMT2YgS6aZ2d9WT3BIOcVZy6Rs57z0hKvnkbqk84KKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPXeL3oV69SkFlrja+G7XEMnjQDsMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvOWQ0dmVoWHIxS1FXV3VOcjRidGNReWVOQU93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPmDUAwQA
1HmLMA0GCSqGSIb3DQEBCwUAA4IBAQBKw4ISz8ltNlvZ6nCF0YjaMVRvQeRqY8U2
E/HlBOQsIzmNlvw3lT2bdlNTPQzyqefEE3tEJn581N1aTgazBN0Nf/BSsoUrPUWA
OJbqgT/Mx3xCMDJ4VtfdMec6mbnoczcUXyD53welxZ0OiuZOvpB9XsVJgZRw0ux4
GTbSys+rK95iRIxxiqRchZh1DzpUdJC/u0V2o5AmJqkBOcNOJv0a7zLPSTU+cuBr
u2wE9gzBVhyzaCTzqk9I6/vBRXHls2lG+Zy9uizYUTqWUzXdzG8u2nOz86GHhRyb
qnEv5mFA/LDjK1pIUB5axH0LSDmeiMmRWnDncvMIA7q4xVZ4sozU
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:34:07 2025 by rpki-client