Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3xeZimmU94rOE01RaUDnhTh9Y8M.roa
File: 3xeZimmU94rOE01RaUDnhTh9Y8M.roa (raw, json)
Hash identifier: yd3SwCwYRWE6aWcBoc4vffj41a15mnpdyEzsEv4Zhyg=
Subject key identifier: DF:17:99:8A:69:94:F7:8A:CE:13:4D:51:69:40:E7:85:38:7D:63:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BE43569D58087EB7B75D42B6D9A1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3xeZimmU94rOE01RaUDnhTh9Y8M.roa
Signing time: Thu 02 Jan 2025 17:51:24 +0000
ROA not before: Thu 02 Jan 2025 17:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 212.87.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:be:43:56:9d:58:08:7e:b7:b7:5d:42:b6:d9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df17998a6994f78ace134d516940e785387d63c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:10:25:ff:0c:e2:43:db:3b:c1:a2:72:60:
48:d8:f0:79:8d:49:42:45:f8:1a:3a:2c:44:e2:46:
0d:e3:7c:4e:02:8e:d7:a3:41:65:f0:d9:27:d0:80:
e4:73:16:0f:31:52:05:2b:15:4f:11:73:85:29:18:
9f:01:71:a1:ab:05:80:5c:75:b1:c5:e8:6f:27:06:
86:2c:bf:1d:bc:1d:21:26:65:37:68:f9:94:ac:8a:
f3:62:c5:99:33:f8:7d:b4:5a:23:8f:52:d8:e5:2a:
b4:a4:6b:4f:49:15:2d:b4:8c:71:c4:d2:4f:48:20:
24:84:da:79:49:17:7e:d1:14:ef:56:91:59:70:d8:
25:5f:85:98:72:f0:b6:44:7f:32:38:95:7d:92:08:
15:01:1c:a6:47:a5:1b:35:53:b6:17:76:12:e3:70:
c8:0a:18:e2:de:f5:25:9d:b6:79:d1:65:04:c7:bd:
fd:0b:24:64:7f:68:57:01:95:a7:c5:b6:26:86:be:
41:96:aa:04:b0:2d:bf:88:80:61:ac:4e:70:b9:b1:
a5:bd:bd:32:68:c0:72:82:83:4d:5f:cc:13:91:05:
f2:73:ee:e9:86:3e:5f:92:b9:c0:24:79:53:01:1b:
93:89:0d:40:37:5c:4d:c9:f1:25:6e:24:26:50:81:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:99:8A:69:94:F7:8A:CE:13:4D:51:69:40:E7:85:38:7D:63:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3xeZimmU94rOE01RaUDnhTh9Y8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b5:b5:77:29:de:4d:0d:fd:11:89:15:f2:69:e2:34:d3:a5:
d4:9a:e9:b1:40:47:be:9e:86:81:3b:70:32:16:76:ef:77:cb:
bd:c5:31:98:e3:9b:33:5e:39:da:08:a2:9e:a6:b2:8a:a1:f6:
1d:28:fb:c6:92:8c:2a:7e:2d:cc:90:7e:b9:f4:e4:cb:56:58:
91:ca:4c:ca:d6:ba:13:7e:73:b1:25:83:44:f3:f7:cd:96:05:
7e:57:2e:bb:72:d6:82:9e:76:b2:20:eb:ee:ca:21:2d:56:36:
66:06:bc:07:48:d8:72:9e:ef:c6:6b:2a:3d:0f:f9:1f:af:53:
a6:36:49:90:b5:d9:67:96:b4:ce:c9:31:3e:7c:24:70:75:25:
a5:d7:ca:a8:9b:b0:7c:81:e5:64:4d:34:91:a7:76:26:b8:57:
cd:ff:eb:2c:2f:7b:52:a1:6e:26:e5:0f:15:e9:7e:44:5a:d9:
3c:aa:1b:75:85:81:d8:ec:a9:f3:ab:cf:62:ed:93:46:67:70:
36:18:41:0d:e5:92:a8:4a:ff:a4:21:82:28:bd:53:fb:52:ca:
42:3b:04:da:2a:a3:91:6e:15:45:4f:6f:d8:8a:6e:be:5b:4a:
a5:ae:9f:ce:42:c3:d1:3f:c7:e1:98:c2:85:1b:c1:22:f5:bb:
b8:dc:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:41 2025 by rpki-client