Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/R7opGqk2OQKdxtBaE15Hd5E4bMY.roa
File: R7opGqk2OQKdxtBaE15Hd5E4bMY.roa (raw, json)
Hash identifier: gPSbSl0CJm+NhkJsW/fFyv4RM+gmXah61Itd4YJYNvw=
Subject key identifier: 47:BA:29:1A:A9:36:39:02:9D:C6:D0:5A:13:5E:47:77:91:38:6C:C6
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281DF67611E3F54D9D63AF7F2E3003
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/R7opGqk2OQKdxtBaE15Hd5E4bMY.roa
Signing time: Thu 02 Jan 2025 17:55:05 +0000
ROA not before: Thu 02 Jan 2025 17:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51830
IP address blocks: 212.36.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1d:f6:76:11:e3:f5:4d:9d:63:af:7f:2e:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ba291aa93639029dc6d05a135e477791386cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:55:e5:aa:47:3e:26:e0:ad:de:f7:df:a0:
7c:b8:19:c4:96:89:4d:15:b1:99:85:bf:23:4f:f6:
17:16:48:2f:06:69:0a:76:5f:dc:7d:1e:81:7d:58:
8c:44:ad:6c:cb:08:a1:03:89:df:99:e2:db:0e:ac:
21:e9:de:ff:6a:c4:1a:58:68:22:7e:92:11:8f:ee:
cd:85:d3:93:c5:ee:38:c3:f1:0c:66:2f:1e:d2:f7:
3e:36:ae:cb:6a:26:e9:37:da:3d:3c:69:4e:04:cf:
19:e3:45:37:2c:ef:e3:d7:8a:d8:41:b1:4c:c6:00:
1e:b2:38:83:bb:6a:a0:20:1c:d7:d4:0b:19:27:2a:
13:f7:7d:27:d0:35:26:7a:33:1e:4d:99:88:bd:c6:
94:c6:0d:97:de:63:4e:0c:19:15:a0:81:6a:14:0b:
17:19:aa:11:84:7d:80:7c:29:54:97:bb:66:67:0e:
bb:6b:11:65:c4:34:c0:69:f8:27:74:cb:8e:35:b3:
14:b1:1a:92:c4:5e:7d:2a:e1:83:9e:6a:a6:85:c1:
eb:e3:cc:be:b7:59:a1:98:6f:95:64:b5:92:45:1e:
65:cb:59:b4:ed:a4:7a:95:3b:2f:16:4e:09:cd:62:
bd:0d:bd:5a:ef:8d:18:6c:80:a8:b9:38:bb:65:1c:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:29:1A:A9:36:39:02:9D:C6:D0:5A:13:5E:47:77:91:38:6C:C6
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/R7opGqk2OQKdxtBaE15Hd5E4bMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.19.0/24
Signature Algorithm: sha256WithRSAEncryption
17:21:53:aa:60:cc:89:d9:9b:c4:2e:81:94:3e:dc:dd:d6:18:
70:93:60:35:ac:b5:d6:d8:e9:c2:6a:8d:96:c0:23:1b:47:66:
8a:db:e2:bb:bb:5d:f0:39:72:4b:fa:cd:bf:6f:11:25:de:b4:
ef:bc:e5:d9:4b:63:ae:23:f8:c8:4f:e9:35:99:fa:e1:aa:f2:
44:e9:5a:16:ed:ba:98:3b:c4:bc:ad:f1:14:18:f4:f9:80:c4:
b9:01:b2:54:f7:c8:9c:bf:db:73:f6:4c:ca:7e:60:8d:22:4d:
15:cb:fd:ad:ba:5e:13:fb:54:eb:a9:66:bc:ed:07:d8:c0:3e:
a1:6c:ad:cc:d9:de:2e:4f:3c:24:11:dd:e4:3c:99:e7:df:31:
dd:34:63:7a:fd:bf:dd:18:54:0b:07:70:19:9a:08:bd:4f:b8:
fc:a8:ff:8e:4c:3f:1c:fb:f0:60:a1:e8:4f:ff:9f:04:4f:26:
94:59:41:47:9b:9b:0a:b2:7c:89:6d:c1:e9:18:eb:a6:a0:4c:
c5:ec:4a:61:36:ca:49:79:2c:f7:e3:1b:47:c2:7b:5b:03:40:
85:90:cc:09:b9:53:05:a2:55:f2:56:c3:85:ce:02:b2:a0:53:
a5:3e:eb:b0:91:89:d4:23:95:14:69:60:61:75:0d:72:a8:f1:
95:ae:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:44:06 2025 by rpki-client