Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/3aq8pLPKNMAghYbwM0D8b8B7oPI.roa
File: 3aq8pLPKNMAghYbwM0D8b8B7oPI.roa (raw, json)
Hash identifier: LR1ssBaKunqJyudKMjJgvAZrSFE5zqQS6RD+lsU4DNQ=
Subject key identifier: DD:AA:BC:A4:B3:CA:34:C0:20:85:86:F0:33:40:FC:6F:C0:7B:A0:F2
Certificate issuer: /CN=89e9bba8d62ff53c30a218c4d7cd1806078ae655
Certificate serial: 0182E5AD328C7FE022CFB54F73C222A9AE8C
Authority key identifier: 89:E9:BB:A8:D6:2F:F5:3C:30:A2:18:C4:D7:CD:18:06:07:8A:E6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iem7qNYv9TwwohjE180YBgeK5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/3aq8pLPKNMAghYbwM0D8b8B7oPI.roa
Signing time: Sun 28 Aug 2022 18:18:29 +0000
ROA not before: Sun 28 Aug 2022 18:18:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63473
IP address blocks: 212.52.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e5:ad:32:8c:7f:e0:22:cf:b5:4f:73:c2:22:a9:ae:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e9bba8d62ff53c30a218c4d7cd1806078ae655
Validity
Not Before: Aug 28 18:18:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddaabca4b3ca34c0208586f03340fc6fc07ba0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:1a:19:c1:8c:cc:76:dd:74:90:36:15:9b:
27:b9:e8:f6:d0:11:c9:4f:11:44:01:36:18:e1:72:
e6:96:3c:08:1d:c3:4b:7c:5b:9a:dd:08:40:f5:77:
6c:57:05:47:b7:56:0e:00:f7:cd:c9:27:b4:bc:49:
d8:d8:68:4b:5e:16:70:3d:2e:75:a7:a2:bb:6e:c0:
33:b4:8b:9d:d5:df:30:b3:8c:e4:d2:57:33:15:09:
1d:3b:4b:bb:c9:8c:bc:2d:d2:b0:b7:57:c2:2c:79:
90:b0:54:4a:2c:20:ea:c8:c5:bb:d2:55:23:b6:81:
2f:71:99:5e:f1:3a:8d:2b:59:24:df:00:81:c7:6b:
93:5e:17:da:c6:2f:c3:b5:c4:59:4e:d5:6b:64:fb:
43:c3:9d:9c:7d:5f:9e:00:21:5e:1d:3f:1a:e4:6f:
b9:0f:40:80:59:e4:85:fa:1e:0e:06:a8:8f:1e:f1:
b0:f0:64:c3:fe:12:dd:39:90:87:a4:52:ed:09:27:
2f:45:2a:30:aa:24:5e:13:3d:b7:39:43:2e:fa:f9:
a0:57:37:53:b0:65:3c:88:52:6f:ad:ae:f1:a6:17:
d9:4d:24:34:5c:ca:9b:71:fe:28:f4:b5:ef:a6:69:
b8:f9:5b:c3:fa:07:bf:7c:5d:0d:0c:5e:7e:e1:ee:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:BC:A4:B3:CA:34:C0:20:85:86:F0:33:40:FC:6F:C0:7B:A0:F2
X509v3 Authority Key Identifier:
keyid:89:E9:BB:A8:D6:2F:F5:3C:30:A2:18:C4:D7:CD:18:06:07:8A:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iem7qNYv9TwwohjE180YBgeK5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/3aq8pLPKNMAghYbwM0D8b8B7oPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/iem7qNYv9TwwohjE180YBgeK5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:78:69:40:20:4b:76:37:15:d9:9f:61:da:b3:97:a1:3b:25:
0b:26:30:1b:10:2f:65:63:d5:84:bc:40:95:7e:38:ca:37:37:
69:f5:c6:a8:ce:84:38:95:6b:ee:78:e8:21:d8:23:e1:69:37:
49:65:5c:20:b9:43:83:47:74:60:51:d1:33:7a:06:90:69:cf:
cb:14:be:3f:70:e1:4c:41:80:0e:d1:8f:89:e0:46:ca:6a:bf:
5b:87:cd:12:8d:1c:f1:a5:fb:c3:b5:d3:46:92:ef:f8:ae:dc:
5c:79:17:75:e0:0d:1b:46:af:0e:e0:99:b2:80:c6:14:fb:f9:
84:50:1d:8b:23:db:28:cf:25:0d:a3:ff:f5:76:e7:50:8c:7b:
9e:1c:d1:32:de:35:26:bd:60:a5:59:36:87:71:5a:03:f2:12:
84:12:fb:ad:ff:81:29:2c:c0:2c:ab:5e:bd:c5:ee:b3:3e:dd:
64:a2:eb:74:68:d8:f5:59:d9:ad:65:36:65:e2:c3:cc:8f:8e:
53:13:12:1c:02:9e:81:16:d2:05:46:55:fc:f7:0e:fc:78:a5:
3a:19:fb:29:ac:57:f8:ef:76:91:a0:03:53:ba:bf:6c:12:ee:
2e:2f:3b:7d:22:fb:2c:44:54:32:5b:ff:cd:9c:2d:f4:f9:e9:
64:be:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:34 2025 by rpki-client