Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa
File: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (raw, json)
Hash identifier: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=
Subject key identifier: 7F:02:3C:59:0C:32:E5:F6:D7:32:52:0A:CC:87:5C:5D:A6:04:31:4D
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019421B1EAAA5A150B6493F1A1069B87FCAA
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214405
IP address blocks: 212.32.45.0/24 maxlen: 24
2a01:fe00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ea:aa:5a:15:0b:64:93:f1:a1:06:9b:87:fc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f023c590c32e5f6d732520acc875c5da604314d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:6d:6d:8d:14:26:df:2a:ef:2f:75:56:7f:
c3:6c:43:5d:7b:d6:b3:3b:d1:03:22:8d:8a:03:fc:
3b:f2:fc:a2:6e:42:aa:2b:ba:55:99:05:dd:81:0f:
53:15:a7:72:80:0d:15:13:13:2a:29:40:49:76:92:
8e:c4:c7:84:0f:b5:ea:f9:1a:2e:c1:8f:1c:00:54:
c7:8f:47:2d:07:84:48:4b:39:ce:c0:e9:92:21:c0:
09:6d:7c:5c:13:40:1d:51:31:e6:14:01:18:3d:54:
a3:20:b6:df:43:c2:7a:7e:bf:7c:aa:ad:c9:dc:14:
29:a4:b0:68:04:3b:43:2e:fc:5e:ea:50:9f:d5:d6:
e0:f3:e4:12:fa:bd:58:aa:d5:a6:8c:4b:a0:04:e7:
99:bc:b6:c1:fb:c0:05:86:f2:51:7e:03:23:75:3e:
9f:1b:c3:43:80:67:a0:65:18:f3:9b:d9:52:7e:89:
59:06:16:e0:e1:02:a5:62:92:de:e1:c6:f2:6b:75:
6c:e0:f6:c1:e6:5c:27:28:b7:82:c5:5a:d5:92:80:
65:7c:c5:40:a0:96:af:eb:c2:d1:e5:e6:41:b1:60:
39:b3:f2:44:74:30:50:d5:cf:b0:06:a9:f7:55:70:
cf:47:f0:6e:a2:39:75:d7:8f:73:a2:23:0d:96:a7:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:3C:59:0C:32:E5:F6:D7:32:52:0A:CC:87:5C:5D:A6:04:31:4D
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.45.0/24
IPv6:
2a01:fe00::/48
Signature Algorithm: sha256WithRSAEncryption
15:5a:cf:74:74:df:52:69:fb:55:79:4d:63:a2:ff:fd:d8:b4:
13:0f:f5:47:ec:a9:6b:15:a7:ab:56:d2:0a:d6:77:e6:a4:5c:
8c:df:53:a2:10:58:4a:ba:20:c5:8f:37:44:ac:e4:e1:54:2e:
07:6a:bc:35:3f:4a:47:5f:54:f1:2a:8f:f3:67:89:da:1f:a3:
e9:1a:b0:c9:c8:40:f0:d0:5d:cb:7a:12:b1:1d:60:33:5d:21:
72:c1:b0:76:2a:50:7b:7f:d8:5a:87:50:41:80:46:63:aa:96:
72:72:ca:5e:86:9b:2b:15:22:dd:7c:37:a3:8a:98:08:d1:ec:
02:5f:c2:03:f7:04:34:63:cd:50:e3:c5:10:df:b8:d2:d2:e5:
87:57:8c:eb:25:9c:62:94:85:97:bd:3e:96:5b:05:5f:a1:a9:
f1:51:8c:bf:d2:e5:bf:d7:3e:ce:de:48:b2:e6:c2:bd:e5:9d:
7e:58:26:7d:ac:e7:12:08:0e:a2:0d:52:f8:72:ea:c5:e2:e7:
f3:5e:d7:1f:d7:fd:d6:25:02:46:9a:da:be:4d:26:30:16:f3:
cf:41:24:b4:4f:8a:91:e6:3b:41:9b:bf:c6:09:dc:b4:02:8f:
ac:c1:40:91:aa:81:0e:4f:48:fb:67:21:85:01:2b:24:69:84:
f6:7c:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:22 2025 by rpki-client