Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa
File: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (raw, json)
Hash identifier: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=
Subject key identifier: 2E:1E:32:91:32:50:7F:30:80:41:33:FC:C2:D6:97:75:0A:FF:F4:59
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 0194274665F941438715526BF22A0595DEEE
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa
Signing time: Thu 02 Jan 2025 13:48:32 +0000
ROA not before: Thu 02 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 212.146.128.0/24 maxlen: 24
212.146.129.0/24 maxlen: 24
212.146.130.0/24 maxlen: 24
212.146.131.0/24 maxlen: 24
212.146.132.0/24 maxlen: 24
212.146.133.0/24 maxlen: 24
212.146.134.0/24 maxlen: 24
212.146.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:65:f9:41:43:87:15:52:6b:f2:2a:05:95:de:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 2 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1e329132507f30804133fcc2d697750afff459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:3d:98:39:7c:9a:5f:ac:cd:9d:32:4b:c2:
10:21:d1:7c:46:c4:d4:18:e4:03:86:09:59:e7:e0:
b7:22:6d:6f:bf:a1:2c:98:18:99:c0:fe:85:6d:35:
a7:78:70:23:d9:73:0b:0e:91:85:04:5a:7c:c0:2a:
ea:6e:be:9a:bd:3c:06:6f:a7:4d:49:b8:c6:d8:be:
57:1c:38:9b:e4:6c:fa:a3:7a:9f:3e:c7:b0:a9:8c:
49:47:8b:6a:ec:b1:0c:21:20:e2:25:dd:78:e9:d6:
93:3d:a3:c7:8d:7d:a2:64:9e:9f:0a:e7:aa:23:60:
d9:c1:ca:4b:21:77:2a:db:32:70:9a:c0:03:84:da:
4c:7a:0e:50:67:87:04:7d:dd:2e:6c:41:0c:fc:e0:
3e:2c:09:50:e1:79:da:68:b7:b3:59:7d:59:ae:92:
1b:20:1f:13:95:da:30:a1:2a:b5:18:29:f6:33:88:
6b:52:17:9e:86:d3:ac:07:de:67:d5:46:18:db:46:
cc:0c:4e:a0:af:fd:22:a2:38:ca:f4:3d:86:bc:49:
d9:af:24:f7:ea:b9:e8:a8:4e:47:ce:92:06:96:fe:
68:5e:a6:85:fd:c8:d8:44:77:db:a0:cf:e0:88:82:
c4:49:b4:16:4a:bf:99:d8:45:9a:83:54:11:fa:db:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1E:32:91:32:50:7F:30:80:41:33:FC:C2:D6:97:75:0A:FF:F4:59
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:c0:08:ea:1e:48:83:54:83:9d:38:26:f8:69:66:c3:b2:7e:
09:a3:1e:6c:60:95:78:af:b5:43:51:49:eb:ab:1b:8a:ad:78:
d6:2a:30:e2:b0:15:33:6e:d6:9e:95:4f:57:34:67:7a:08:d6:
3d:66:12:a8:85:93:6f:7a:b4:97:35:a2:92:91:e6:5c:a0:e6:
47:b3:59:58:4d:83:54:7b:45:df:2a:e0:23:4f:00:42:7b:23:
0b:92:9a:ea:1e:b8:1e:5e:2f:fc:7f:21:2c:2c:dd:7b:d2:65:
0a:3e:9c:50:b3:ec:cb:c7:6c:03:78:d4:83:3c:be:f9:b0:7e:
ab:58:08:d7:33:81:bf:b1:29:9e:93:c2:2e:ec:fa:23:9d:62:
85:d0:0a:f1:8e:cd:88:b9:0e:73:38:ec:37:9a:1e:a1:da:ca:
02:6a:0a:76:8f:5d:b6:4f:9b:56:3c:d9:21:11:9d:b8:cb:e4:
8d:3f:e0:0a:75:15:c7:cc:63:d3:a9:25:2b:4a:28:ae:13:dd:
45:c8:69:b5:ea:89:f5:80:f1:f2:9a:ec:51:dc:04:47:03:93:
d2:d8:03:de:d9:47:5b:7e:9e:62:f6:dd:56:2f:a2:08:d1:64:
8e:3e:38:f6:ab:03:02:95:30:e3:3a:e8:33:35:62:bf:6b:1b:
f5:89:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:03 2025 by rpki-client