Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/astDnoUMy7KdbJvyyxpisdgmA6U.roa
File: astDnoUMy7KdbJvyyxpisdgmA6U.roa (raw, json)
Hash identifier: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=
Subject key identifier: 6A:CB:43:9E:85:0C:CB:B2:9D:6C:9B:F2:CB:1A:62:B1:D8:26:03:A5
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 01942521715A335AADF2D68A4A9FEFA7EB99
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/astDnoUMy7KdbJvyyxpisdgmA6U.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59888
IP address blocks: 212.1.200.0/21 maxlen: 21
212.1.200.0/23 maxlen: 23
212.1.202.0/23 maxlen: 23
212.1.204.0/23 maxlen: 23
212.1.206.0/24 maxlen: 24
2a07:7600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:71:5a:33:5a:ad:f2:d6:8a:4a:9f:ef:a7:eb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6acb439e850ccbb29d6c9bf2cb1a62b1d82603a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:84:8e:88:f7:40:37:e6:98:8d:89:bd:6b:
50:76:ec:82:00:8e:ac:bf:19:8d:07:82:d5:89:ca:
75:74:66:ca:c1:a7:d1:4e:38:a2:7e:41:78:ad:fc:
ed:bc:f0:74:72:a2:11:de:91:8a:cb:c4:50:50:2e:
2c:00:77:28:df:8a:45:21:f2:84:a7:12:ec:08:77:
11:49:f4:90:b9:b7:47:e5:26:94:e2:c6:23:21:03:
7b:8f:42:c9:8c:08:22:39:ee:17:4d:28:6d:3e:58:
01:f2:d4:cb:0b:fa:4f:bd:49:e1:52:60:af:16:fc:
76:0a:e0:e3:3e:38:d3:61:a3:41:7d:43:17:86:0f:
78:cc:0b:4c:8d:50:a8:88:6f:73:11:03:9a:0c:6b:
06:0e:bb:06:85:83:d0:2e:ed:82:6a:2a:47:7b:e4:
26:36:be:cb:0a:d2:1c:81:54:20:a3:e3:7c:44:9b:
87:b3:8c:90:a2:ef:72:6c:25:41:a5:bd:0b:57:61:
cb:ad:64:d2:6c:0c:2b:61:ae:f0:b9:26:60:db:bd:
ea:ac:f5:94:9f:55:94:43:e4:2c:58:5e:c4:d2:7f:
7a:d6:df:bb:f2:1d:0f:8c:d2:c2:b0:7d:40:d2:e7:
51:2f:9c:25:72:9c:3f:9c:ed:18:9d:f9:21:2a:fe:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CB:43:9E:85:0C:CB:B2:9D:6C:9B:F2:CB:1A:62:B1:D8:26:03:A5
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/astDnoUMy7KdbJvyyxpisdgmA6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.1.200.0/21
IPv6:
2a07:7600::/29
Signature Algorithm: sha256WithRSAEncryption
8f:38:30:38:e4:52:d6:0b:9d:96:3b:a3:f6:1a:a0:6f:4d:c0:
7d:0d:43:e1:a9:2c:f0:7c:fb:88:f3:94:30:1d:64:21:5b:74:
d9:2b:13:b6:a7:dd:70:62:73:d9:6a:1b:0c:37:ff:7c:b0:43:
4c:d9:8d:26:4e:ac:62:0d:84:6b:4b:26:f0:ce:e3:ad:38:18:
19:f1:09:50:30:c1:e3:2e:0d:b4:e4:b2:36:06:48:dd:ca:10:
21:e4:64:8f:c6:e1:93:0e:cf:15:db:a8:58:c1:68:d0:6e:39:
f4:32:3c:85:2d:6f:e3:fc:72:a8:61:b1:fc:4d:2b:96:81:70:
8a:2e:6f:34:99:b6:b1:ec:af:02:25:4a:0b:3d:5c:37:08:33:
45:78:e2:19:d5:00:f8:3d:29:1c:6e:37:60:e8:f1:ab:6b:9b:
ec:c2:0f:62:c3:c0:e8:48:7d:a5:20:2c:33:84:e5:6c:c1:4e:
73:ec:6c:bb:60:41:7c:83:bd:f9:af:d0:32:87:e5:7b:28:3d:
e0:59:f8:cd:69:df:a9:38:0d:85:e8:59:5b:02:47:01:ed:bc:
7a:48:3b:a5:56:6f:18:3f:07:0b:6f:4a:98:cc:94:4d:10:08:
23:ff:2d:93:2f:31:94:81:9a:09:e3:e8:fb:08:85:2f:46:33:
81:d2:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:12 2025 by rpki-client