Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uYx93h3VK_2qcTGJgg62i5yMhFU.roa
File: uYx93h3VK_2qcTGJgg62i5yMhFU.roa (raw, json)
Hash identifier: vcgq0qwa0GpVfrNtwewKDr9rwR1Xssn0EG9n0Gfxl8Q=
Subject key identifier: B9:8C:7D:DE:1D:D5:2B:FD:AA:71:31:89:82:0E:B6:8B:9C:8C:84:55
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 03082093
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uYx93h3VK_2qcTGJgg62i5yMhFU.roa
Signing time: Sat 01 Jan 2022 01:50:26 +0000
ROA not before: Sat 01 Jan 2022 01:50:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57238
IP address blocks: 212.2.236.0/22 maxlen: 24
82.118.24.0/22 maxlen: 24
82.118.24.0/21 maxlen: 21
2a03:2780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50864275 (0x3082093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b98c7dde1dd52bfdaa713189820eb68b9c8c8455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:29:f6:cc:f5:e6:e6:7e:d6:db:00:2f:b4:
74:05:2e:a2:f5:f1:71:f5:f4:00:7e:2a:06:02:d9:
15:12:8c:40:f0:9c:14:7c:8b:27:b3:07:c6:06:27:
28:68:57:7c:f4:22:19:6d:16:89:6f:8a:37:db:8c:
14:bc:99:a5:b9:57:ff:b9:26:b3:5e:d8:9a:5e:15:
9c:97:03:7b:17:2c:b3:ea:27:06:32:7c:f5:99:a5:
8a:02:57:68:fb:11:cf:1a:d7:ae:b7:6b:52:b9:f4:
f9:78:c9:a6:32:15:69:f2:fd:cc:06:06:d0:ca:1e:
35:dd:1d:29:c9:d0:cf:0a:94:dc:10:d6:fd:2f:31:
63:80:64:05:72:6b:a1:dc:89:62:a2:05:a0:94:e9:
b8:83:7c:88:3c:6d:d7:3e:53:d7:77:c2:ab:1e:b9:
2a:1e:8d:6a:84:ed:e6:01:1a:1a:8a:c5:f3:68:47:
4b:ad:16:2a:25:ea:11:85:26:57:af:c3:16:d9:5c:
ae:10:b5:29:99:4f:73:f0:60:cc:16:55:42:ab:11:
91:76:bf:e0:e2:64:92:2d:1c:26:7e:48:08:58:98:
83:0a:fc:a5:e6:08:ae:d0:0e:8d:25:8d:f0:ec:97:
06:32:05:b3:3e:85:15:4b:fa:e7:53:58:4f:4e:cb:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8C:7D:DE:1D:D5:2B:FD:AA:71:31:89:82:0E:B6:8B:9C:8C:84:55
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uYx93h3VK_2qcTGJgg62i5yMhFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.24.0/21
212.2.236.0/22
IPv6:
2a03:2780::/32
Signature Algorithm: sha256WithRSAEncryption
1c:ce:30:e9:8c:d0:eb:f6:b3:dd:19:b3:89:21:a8:d8:27:71:
ec:69:45:c4:91:12:6e:9b:05:f4:72:4e:11:dd:d3:6f:9e:f3:
a4:7f:19:c5:a0:3d:a5:02:f0:40:76:15:f2:a2:c7:b5:fe:97:
f4:59:76:ed:d8:fb:28:dd:80:ab:da:eb:f2:7c:26:cf:3d:72:
e7:40:2b:ad:76:48:a5:09:f5:56:d7:28:29:8f:38:8f:47:ef:
e2:c2:ab:45:60:f9:32:3b:04:d8:5c:29:db:d8:35:85:83:59:
cf:df:df:60:11:09:1e:f5:53:94:e6:ec:22:db:b5:c4:07:b9:
af:b7:dc:2b:c9:22:28:22:ef:67:5b:c2:39:90:e4:aa:15:41:
86:d6:a2:bd:b9:1b:4d:8a:68:68:96:de:9e:e1:27:18:c1:be:
7e:29:21:ba:40:d4:de:4c:5a:0c:05:6e:00:db:06:5c:c1:a9:
83:e1:33:1d:65:cb:49:da:2f:52:44:d3:fc:f8:49:fb:2b:53:
ca:a0:82:87:bf:ee:b2:eb:45:5e:37:4b:64:c8:d3:a1:44:6e:
fc:bf:bb:56:af:f1:19:c6:61:0d:76:83:31:7d:0a:c9:ca:83:
fc:7e:b5:70:e9:63:4f:8b:37:32:12:ef:75:25:50:13:5d:e5:
45:c7:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:46 2025 by rpki-client