Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/ddnj4lu0sQTNFIbeAWt1xIKZtdE.roa
File: ddnj4lu0sQTNFIbeAWt1xIKZtdE.roa (raw, json)
Hash identifier: DWjFt2gA1aouapBU+5+4CCQ1iZ1B8tieiegVSKlm17k=
Subject key identifier: 75:D9:E3:E2:5B:B4:B1:04:CD:14:86:DE:01:6B:75:C4:82:99:B5:D1
Certificate issuer: /CN=daabfc9017a8b36d691120e373f08ce401f6af40
Certificate serial: 018CC2DAEDB54B38DAE3974A08B976CF4952
Authority key identifier: DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/ddnj4lu0sQTNFIbeAWt1xIKZtdE.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206385
IP address blocks: 212.46.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ed:b5:4b:38:da:e3:97:4a:08:b9:76:cf:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daabfc9017a8b36d691120e373f08ce401f6af40
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75d9e3e25bb4b104cd1486de016b75c48299b5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:93:5e:10:25:02:c7:a4:37:7b:b5:a0:a8:b5:
0d:98:33:89:57:de:4c:a4:b6:df:b0:a0:35:df:e7:
c8:74:9e:4a:e9:d4:03:d6:b3:77:f3:32:7a:f2:05:
89:37:d8:51:b3:0a:3b:36:55:3b:34:a6:f9:3e:55:
21:7a:3b:ce:96:bc:45:26:6c:8e:dd:51:aa:5e:dd:
78:ed:fb:62:84:e7:ee:25:02:82:a4:2b:b0:69:62:
86:81:8b:33:d7:b1:66:94:e1:9f:b4:76:66:d7:4b:
2f:a3:95:00:85:03:12:ae:b3:32:dc:e2:b3:ae:0c:
a2:47:c7:d0:8c:9d:61:a7:5a:f5:17:60:6a:4c:2d:
e5:94:67:c8:b6:10:e9:73:2d:4b:77:a6:8a:c3:b3:
55:35:7a:f1:e4:39:23:17:a5:07:94:f6:0c:64:a7:
c2:f4:ae:59:95:d9:a6:4a:e2:5e:80:04:50:1e:28:
ca:1e:33:0c:44:36:bb:77:4d:c9:db:dc:fb:12:61:
c9:4a:2e:a9:3e:b0:12:f3:bb:90:b4:4c:d5:c6:86:
4a:c7:70:55:fc:1e:a6:2f:47:5e:fb:4f:b6:ef:a6:
23:c2:98:79:b8:05:74:ef:c7:7c:1e:32:9a:99:5a:
52:14:f7:9d:1d:6f:91:d7:89:a6:3e:29:08:ce:7c:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D9:E3:E2:5B:B4:B1:04:CD:14:86:DE:01:6B:75:C4:82:99:B5:D1
X509v3 Authority Key Identifier:
keyid:DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/ddnj4lu0sQTNFIbeAWt1xIKZtdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.34.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b7:42:ed:18:d8:dc:a2:6b:f3:97:f9:62:10:7d:45:6f:ff:
90:74:e4:1c:d5:52:70:7f:18:b9:5d:a6:ce:19:c0:b5:42:81:
28:8f:a1:d3:b1:cd:3a:5b:01:aa:fe:da:57:d8:87:2f:e1:bd:
56:37:b8:a5:85:55:91:64:fa:1a:33:bf:23:0e:cf:93:7f:ee:
e0:8f:16:34:76:f2:da:99:d4:29:71:92:2b:12:f5:e4:7f:ab:
33:9c:8a:9d:2a:19:e2:f9:61:74:37:60:4e:5d:d1:9d:9d:02:
18:fd:d6:1e:6b:09:bb:c8:24:2b:c3:23:22:dc:01:d8:ca:81:
df:32:91:55:a5:72:7d:b2:8e:ac:b2:49:6e:95:48:7b:cf:5b:
46:13:93:70:2c:c1:f5:12:dc:71:32:83:c3:0f:6a:f9:1e:00:
13:c6:ce:62:58:f5:fc:d8:5c:b5:45:ce:12:5a:c3:12:51:e4:
ad:33:b1:8e:5c:37:42:f4:62:f2:b8:8f:7f:95:97:1d:7f:a7:
3f:b3:ef:a2:e6:72:36:51:00:dd:83:8c:3c:74:06:01:d3:a5:
83:5c:49:11:83:d2:cb:c9:9a:d6:50:71:80:b9:8b:f9:57:bc:
bb:42:5c:6c:de:cd:90:39:94:61:ee:90:40:e1:f5:ea:32:aa:
3c:4c:6b:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2u21Szja45dKCLl2z0lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWJmYzkwMTdhOGIzNmQ2OTExMjBlMzczZjA4Y2U0MDFm
NmFmNDAwHhcNMjQwMTAxMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWQ5ZTNlMjViYjRiMTA0Y2QxNDg2ZGUwMTZiNzVjNDgyOTliNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZNeECUCx6Q3e7WgqLUNmDOJV95M
pLbfsKA13+fIdJ5K6dQD1rN38zJ68gWJN9hRswo7NlU7NKb5PlUhejvOlrxFJmyO
3VGqXt147ftihOfuJQKCpCuwaWKGgYsz17FmlOGftHZm10svo5UAhQMSrrMy3OKz
rgyiR8fQjJ1hp1r1F2BqTC3llGfIthDpcy1Ld6aKw7NVNXrx5DkjF6UHlPYMZKfC
9K5ZldmmSuJegARQHijKHjMMRDa7d03J29z7EmHJSi6pPrAS87uQtEzVxoZKx3BV
/B6mL0de+0+276Yjwph5uAV078d8HjKamVpSFPedHW+R14mmPikIznzNGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHXZ4+JbtLEEzRSG3gFrdcSCmbXRMB8GA1UdIwQY
MBaAFNqr/JAXqLNtaREg43PwjOQB9q9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF2OGtCZW9zMjFwRVNEamNfQ001QUgycjBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOTZmNGMtYTBmYy00ZjI1LTk4ZDgt
YjYyMzlkNjU2MWU0LzEvZGRuajRsdTBzUVRORkliZUFXdDF4SUtadGRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kOTZmNGMtYTBmYy00ZjI1LTk4ZDgtYjYyMzlkNjU2MWU0
LzEvMnF2OGtCZW9zMjFwRVNEamNfQ001QUgycjBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4iMA0G
CSqGSIb3DQEBCwUAA4IBAQBTt0LtGNjcomvzl/liEH1Fb/+QdOQc1VJwfxi5XabO
GcC1QoEoj6HTsc06WwGq/tpX2Icv4b1WN7ilhVWRZPoaM78jDs+Tf+7gjxY0dvLa
mdQpcZIrEvXkf6sznIqdKhni+WF0N2BOXdGdnQIY/dYeawm7yCQrwyMi3AHYyoHf
MpFVpXJ9so6ssklulUh7z1tGE5NwLMH1EtxxMoPDD2r5HgATxs5iWPX82Fy1Rc4S
WsMSUeStM7GOXDdC9GLyuI9/lZcdf6c/s++i5nI2UQDdg4w8dAYB06WDXEkRg9LL
yZrWUHGAuYv5V7y7Qlxs3s2QOZRh7pBA4fXqMqo8TGuk
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:52 2025 by rpki-client