Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2JOp1xc62hnGy4EV2WeIK8tGYmw.roa
File: 2JOp1xc62hnGy4EV2WeIK8tGYmw.roa (raw, json)
Hash identifier: 9aSQaDEW9iCQP0X7Y0TD5M/gEunF8VA0CeQDoJWMGx0=
Subject key identifier: D8:93:A9:D7:17:3A:DA:19:C6:CB:81:15:D9:67:88:2B:CB:46:62:6C
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D0E2D7DDA48E8B0C26C2B60EC5E26
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2JOp1xc62hnGy4EV2WeIK8tGYmw.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 212.2.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0e:2d:7d:da:48:e8:b0:c2:6c:2b:60:ec:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d893a9d7173ada19c6cb8115d967882bcb46626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:de:4e:ec:11:c7:68:49:8e:66:50:b1:c1:9c:
46:59:31:b8:92:c3:ef:b5:f7:fc:09:96:32:dc:11:
08:ec:d6:2c:fc:da:49:4d:23:af:84:73:62:73:9c:
ca:7a:25:4d:1e:dd:4d:47:09:97:cd:c5:5e:1f:5b:
e7:68:5b:ed:a4:6d:50:ad:32:08:1a:07:62:dd:4c:
2d:a2:c4:f0:29:c0:10:58:de:78:b9:ca:f3:1d:05:
c9:4a:27:53:b7:ee:bd:48:46:70:f9:0d:53:d2:c1:
7d:a5:e9:33:db:3f:b1:d0:86:a5:25:80:ea:7a:d9:
a7:2d:fb:46:19:d6:aa:25:bc:1d:c1:df:7e:5c:52:
4b:a9:1e:ae:0c:77:54:58:0f:67:ad:b4:8d:ff:4a:
b5:e9:2e:f0:2a:2f:56:69:ea:b2:78:70:98:0b:a4:
7c:e9:71:a7:b2:36:58:8e:4e:87:37:4d:94:84:2a:
97:1b:e4:be:da:e1:be:92:99:3e:04:55:2a:b0:4e:
1d:16:52:0b:81:ad:0f:05:81:4e:63:bd:91:44:07:
2e:46:0f:be:bd:28:77:b6:6a:48:47:19:24:fa:9a:
b0:2c:ef:e2:df:a1:84:de:36:95:a5:cd:a9:b3:fc:
14:71:0f:04:22:2e:90:ee:3b:31:a5:a7:3c:95:db:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:A9:D7:17:3A:DA:19:C6:CB:81:15:D9:67:88:2B:CB:46:62:6C
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2JOp1xc62hnGy4EV2WeIK8tGYmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5e:a2:c0:ae:7a:bb:4c:df:ec:43:2c:35:33:93:51:6b:2a:
5e:e4:28:63:c2:76:46:26:c3:77:ba:5a:6f:ca:3d:74:d7:ad:
63:63:4b:8f:39:e3:5e:2f:21:d2:33:d5:df:72:10:ae:7d:32:
ab:8a:14:2c:6e:23:95:46:90:3f:37:d2:9c:81:d0:37:6e:1f:
32:b4:0d:50:13:f0:30:72:f5:0a:d2:bb:78:8a:26:1d:61:84:
e1:23:02:fa:36:78:4d:9b:28:f1:e0:ec:45:8a:3e:ff:ff:58:
86:d4:3e:c5:90:53:fd:27:f9:08:bb:da:4b:10:a6:34:98:c1:
8f:a4:2a:8e:56:4a:0b:42:5f:01:33:59:36:39:80:31:e7:82:
b1:b0:a3:c4:dc:38:f0:93:cf:a9:06:7a:cb:1a:59:93:d3:18:
42:67:18:67:14:5d:7e:da:cd:4e:f9:55:60:41:1e:68:1e:99:
9e:93:d3:35:65:89:c1:16:07:4e:5f:ba:cd:2b:9e:84:96:67:
31:02:19:8c:df:93:f1:34:aa:e8:f7:88:0c:8d:fd:6e:ca:3a:
e5:8c:e6:28:41:23:6d:f2:cb:fa:1f:6f:7f:36:20:89:a9:7b:
16:c9:26:39:f3:db:a5:33:78:6c:9d:c7:7c:cd:a5:ff:af:4a:
07:e2:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:35:18 2025 by rpki-client