Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EPx7qyxV7cbRR_uWCFySOPGW668.roa
File: EPx7qyxV7cbRR_uWCFySOPGW668.roa (raw, json)
Hash identifier: mdMCsp/K6fN6KHgYEzfXaKjSK2dwwJ7vmjtW7lp01gg=
Subject key identifier: 10:FC:7B:AB:2C:55:ED:C6:D1:47:FB:96:08:5C:92:38:F1:96:EB:AF
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B0FD59D66B9337F2F82AFF6144727
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EPx7qyxV7cbRR_uWCFySOPGW668.roa
Signing time: Sun 01 Jan 2023 13:35:08 +0000
ROA not before: Sun 01 Jan 2023 13:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202855
IP address blocks: 212.243.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:0f:d5:9d:66:b9:33:7f:2f:82:af:f6:14:47:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10fc7bab2c55edc6d147fb96085c9238f196ebaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:dc:52:6f:35:5f:4c:7e:62:9f:54:f7:eb:
d5:37:fb:92:b2:79:38:c5:55:6c:ed:2b:a3:32:b6:
ae:56:13:f8:27:af:32:04:d9:a0:a1:08:52:e5:b0:
cb:22:b1:39:98:7e:98:da:94:24:85:d0:b3:37:ac:
a0:df:c3:f3:ba:6a:e0:12:1f:c5:dc:f5:4b:25:a3:
47:17:97:0e:cb:96:b3:75:05:2c:52:34:2e:c2:5a:
3c:99:94:7d:b5:41:60:8c:f2:b2:71:3d:35:e6:e4:
0e:aa:a3:ae:10:68:47:94:16:39:91:ca:1b:cb:76:
31:ab:8c:e0:b1:49:fc:ad:c7:e4:06:38:00:27:6c:
b2:e8:c5:63:2d:ac:64:03:b6:03:20:d2:90:57:99:
6f:4f:a2:28:5b:78:44:57:67:bd:8f:f0:7d:02:70:
cd:52:b6:8e:33:36:74:d9:68:d6:c2:29:01:0d:cd:
fc:19:25:6b:68:19:27:c3:7b:fb:e5:97:74:b1:98:
3a:09:24:e9:47:8e:35:aa:8e:a3:2d:e4:86:d2:d7:
51:07:92:08:3a:74:82:1e:5d:c1:c7:7c:70:9a:a8:
b3:3c:2c:fd:44:96:7d:2b:ba:0d:1f:d5:44:9e:b2:
2b:84:c9:59:bd:e4:e2:25:05:b8:84:07:46:70:b1:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FC:7B:AB:2C:55:ED:C6:D1:47:FB:96:08:5C:92:38:F1:96:EB:AF
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EPx7qyxV7cbRR_uWCFySOPGW668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.122.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cc:56:e5:c6:ab:4c:fd:92:91:67:ea:2c:de:f3:6f:b4:24:
06:15:2c:5a:f0:76:56:a4:4c:13:7c:d4:3a:95:ab:72:51:d9:
26:eb:7d:3f:7b:e1:80:87:cd:d9:00:31:93:9d:fc:6b:c5:cf:
22:bc:de:b0:6e:a8:d2:0b:f2:b3:03:0d:a7:85:72:2c:ca:0a:
5e:59:ff:81:56:d2:4b:54:f9:78:5e:00:7b:17:83:f5:c6:61:
1b:fb:ab:a7:f9:c9:84:8b:ca:af:b5:af:32:2f:9a:9c:0c:3d:
3e:1b:45:4d:13:23:75:ba:6a:59:29:80:ba:92:1b:ba:e9:86:
0c:10:db:56:39:b7:87:d3:d3:01:b6:8f:f7:15:b2:8a:db:17:
0a:05:ae:bc:94:8e:77:91:2a:6e:05:99:3b:18:55:f7:c0:b4:
1b:b8:40:60:3b:71:7d:3c:3a:68:9b:47:c1:18:a3:60:24:3c:
d8:37:b8:ff:57:61:19:91:91:3f:7b:5a:af:78:8d:07:dc:15:
09:f5:a0:36:02:d1:85:80:b3:1d:bf:1c:a8:e6:90:93:f7:1c:
8b:3e:40:7f:6a:e2:cc:60:9b:c9:68:c2:a9:de:ff:08:e7:95:
2c:51:9b:04:2f:d3:61:4d:77:7a:05:a9:fa:49:16:c7:23:79:
77:74:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:54 2025 by rpki-client