Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/cHT0qzGhhZWWUdosb7dz_r29LkI.roa
File: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (raw, json)
Hash identifier: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=
Subject key identifier: 70:74:F4:AB:31:A1:85:95:96:51:DA:2C:6F:B7:73:FE:BD:BD:2E:42
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019420680FEE159C8F2D0AFDC0B1A2BC00AF
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/cHT0qzGhhZWWUdosb7dz_r29LkI.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 212.52.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0f:ee:15:9c:8f:2d:0a:fd:c0:b1:a2:bc:00:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7074f4ab31a185959651da2c6fb773febdbd2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:30:d5:87:0a:7f:c0:66:2a:b0:a7:1c:b6:
4f:ca:90:7a:dd:1f:22:07:53:fe:ba:2f:45:9f:c0:
de:d8:4a:2d:1b:6d:c2:25:16:c9:95:66:20:01:a6:
b7:f4:10:49:0a:31:3d:be:ed:89:28:ba:09:3d:14:
b2:7b:e2:7b:19:41:fb:cc:24:34:7f:79:06:a3:2a:
1f:f5:41:e0:c6:8b:cf:2a:06:b6:cf:5e:b3:ca:46:
db:93:6f:3d:26:0f:05:2e:c5:18:8d:8a:95:dc:ba:
cb:03:f6:b0:62:eb:24:43:9c:9a:20:9e:5f:8b:1a:
57:c9:60:64:51:8a:ac:57:47:52:fc:79:c3:04:6d:
39:bd:5e:ff:48:b3:f2:e6:e9:00:df:4c:94:80:d4:
95:fb:13:7d:7b:2f:fd:59:38:f7:aa:a8:64:c5:45:
ee:e2:7a:f5:eb:b4:cd:cc:f9:ac:81:31:91:b5:49:
4d:81:3f:c9:f4:53:b3:d3:a3:67:e4:28:24:00:c0:
a4:ba:41:d9:f4:d0:e6:fd:cf:68:f6:78:77:2f:27:
da:f3:ca:60:5d:60:c7:e1:11:17:7b:42:21:fd:ec:
82:a0:47:01:70:1c:2b:f0:95:43:0f:0b:40:1c:2d:
62:b9:c9:e2:5f:d1:9d:88:a4:03:73:81:93:af:5d:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:F4:AB:31:A1:85:95:96:51:DA:2C:6F:B7:73:FE:BD:BD:2E:42
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/cHT0qzGhhZWWUdosb7dz_r29LkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.6.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ba:54:c3:3a:49:d1:bc:40:d6:86:fe:88:75:66:90:61:cf:
ac:bc:f8:d1:5f:6c:f6:c4:da:1d:67:4b:bb:af:e7:48:ec:d9:
cd:c9:78:2e:50:d6:39:f9:3d:56:67:51:bc:0f:8b:03:07:90:
4c:18:73:e8:32:1d:95:5e:1e:8e:7a:82:69:42:29:ef:53:53:
0f:74:94:a7:f4:40:34:f6:17:2f:e0:a5:0d:ac:c3:cf:7a:ef:
96:5e:b1:23:0f:40:00:77:44:43:18:1e:35:b9:35:c4:e7:2e:
c3:23:bd:d2:07:bc:8d:e0:e3:52:c0:db:f5:d1:a0:fd:68:af:
8c:6d:87:8d:a6:c3:08:01:37:93:ac:70:c7:58:45:31:bd:c6:
6b:ec:a8:49:40:ed:c9:80:41:cc:72:96:1d:3c:91:a0:75:e4:
d5:df:6a:5a:ae:41:f5:df:d6:f8:3e:db:dd:c6:89:6a:00:a7:
fb:15:a3:66:40:ea:88:50:fb:c2:b6:0e:46:c7:07:4b:0d:ce:
b6:70:30:bb:3e:ef:9b:e0:1b:54:dc:b6:10:e2:5c:db:7b:1a:
10:46:1b:b5:7f:b9:75:78:ce:ac:3a:5e:1a:48:c1:48:db:5c:
90:5a:1f:ff:8c:c5:8d:52:a9:ca:2e:61:72:66:f3:32:fa:0e:
ea:90:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:22 2025 by rpki-client