Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aIc3KbkINVD2sHnMbwLwSxBBq7s.roa
File: aIc3KbkINVD2sHnMbwLwSxBBq7s.roa (raw, json)
Hash identifier: A1w3zWaULLgyRuYlja7+ex73lpzjRRxBolwQysyFJcc=
Subject key identifier: 68:87:37:29:B9:08:35:50:F6:B0:79:CC:6F:02:F0:4B:10:41:AB:BB
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E4DA65
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aIc3KbkINVD2sHnMbwLwSxBBq7s.roa
Signing time: Sat 01 Jan 2022 16:01:57 +0000
ROA not before: Sat 01 Jan 2022 16:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204483
IP address blocks: 212.243.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357175397 (0x50e4da65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68873729b9083550f6b079cc6f02f04b1041abbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:ea:3f:06:04:e0:13:85:ed:da:7c:99:1e:
68:e6:b1:b9:6e:35:2b:56:2b:e8:cf:3c:53:53:1a:
51:d6:34:21:63:51:95:76:99:9f:40:64:d4:19:67:
c6:39:c7:e3:f3:15:d6:fe:f2:5b:ca:22:d6:8f:36:
93:7c:19:4e:bc:31:ec:16:7a:9d:24:25:f0:0c:be:
ce:3d:4d:0a:44:22:36:c9:fc:bc:a9:b4:9f:40:5e:
b4:7f:98:cb:97:e0:b7:e1:64:41:d7:af:be:5c:ef:
be:cb:87:34:28:54:58:d4:a2:68:e4:2b:b4:23:d9:
91:c8:f3:e5:84:22:4f:65:2a:d9:cf:c0:66:4c:d9:
1f:94:09:04:16:fa:ca:88:d4:1d:63:89:f8:66:da:
52:44:55:1d:83:8f:01:ac:26:26:71:b7:d2:6e:77:
0c:1f:50:63:79:81:48:4e:72:3e:6d:5b:4f:2f:77:
2c:e6:44:67:67:e7:88:df:b7:e3:b2:5d:61:96:57:
ec:4f:bf:8d:35:86:e4:a2:ea:ec:98:ab:fb:b2:b4:
78:e7:7e:17:82:89:b6:14:33:8c:a9:95:fe:65:30:
f2:ef:c1:3a:1f:3b:91:6d:0c:34:1d:aa:16:d8:79:
28:47:89:1e:84:a4:9b:49:0c:74:39:e9:4d:36:74:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:37:29:B9:08:35:50:F6:B0:79:CC:6F:02:F0:4B:10:41:AB:BB
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aIc3KbkINVD2sHnMbwLwSxBBq7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.124.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bb:6d:8f:33:85:fe:45:95:c8:9a:57:9b:76:8c:85:ad:c1:
da:28:61:21:20:df:6d:49:6e:88:87:b6:62:fd:9e:67:9c:65:
b2:bf:9f:c3:f8:9d:8c:8c:59:5d:62:5d:91:46:94:2c:51:6f:
23:7b:78:2a:5d:2b:75:a5:49:19:15:ac:6c:a6:f1:79:4d:41:
c2:1a:78:4c:30:f8:98:ed:55:eb:ab:0a:f7:f8:53:66:cd:dd:
b2:f2:cf:7e:cb:2b:68:26:f1:93:66:b2:19:6f:81:25:e2:30:
9d:ec:93:40:c0:46:4f:fd:60:42:25:d8:56:76:b9:8b:8c:30:
2a:0e:9c:0b:5a:b9:da:aa:ba:2c:2f:46:e4:16:b0:1e:09:50:
58:d1:fb:cd:77:d3:38:99:9e:eb:3e:d0:7b:59:d0:62:d9:bf:
31:26:89:4d:91:38:61:2e:cf:7b:21:8a:1c:24:d0:0a:40:f6:
97:12:e3:49:63:0b:00:01:18:11:f1:c5:26:4b:49:b9:65:fa:
59:d9:cb:69:88:33:1f:64:66:ed:db:82:0a:72:b9:9c:26:7a:
72:78:fd:88:3e:bc:de:10:8d:d9:fc:ca:f9:e5:37:4b:43:f2:
7a:61:6d:f6:e3:5f:4e:69:9d:04:5a:7a:79:17:cf:57:18:76:
72:41:a7:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEUOTaZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjYzZjNkYjE1MmUwNTVhYzE0NWJkYmI0MjllMDE4NjU0MjA0YzhkMB4XDTIyMDEw
MTE2MDE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjg4NzM3MjliOTA4
MzU1MGY2YjA3OWNjNmYwMmYwNGIxMDQxYWJiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKi6j8GBOAThe3afJkeaOaxuW41K1Yr6M88U1MaUdY0IWNR
lXaZn0Bk1BlnxjnH4/MV1v7yW8oi1o82k3wZTrwx7BZ6nSQl8Ay+zj1NCkQiNsn8
vKm0n0BetH+Yy5fgt+FkQdevvlzvvsuHNChUWNSiaOQrtCPZkcjz5YQiT2Uq2c/A
ZkzZH5QJBBb6yojUHWOJ+GbaUkRVHYOPAawmJnG30m53DB9QY3mBSE5yPm1bTy93
LOZEZ2fniN+347JdYZZX7E+/jTWG5KLq7Jir+7K0eOd+F4KJthQzjKmV/mUw8u/B
Oh87kW0MNB2qFth5KEeJHoSkm0kMdDnpTTZ0SjUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRohzcpuQg1UPawecxvAvBLEEGruzAfBgNVHSMEGDAWgBQmY/PbFS4FWsFF
vbtCngGGVCBMjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ptUHoyeFV1QlZyQlJiMjdRcDRCaGxRZ1RJMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvYzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8x
L2FJYzNLYmtJTlZEMnNIbk1id0x3U3hCQnE3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
YzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8xL0ptUHoyeFV1QlZy
QlJiMjdRcDRCaGxRZ1RJMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANTzfDANBgkqhkiG9w0BAQsFAAOC
AQEAkrttjzOF/kWVyJpXm3aMha3B2ihhISDfbUluiIe2Yv2eZ5xlsr+fw/idjIxZ
XWJdkUaULFFvI3t4Kl0rdaVJGRWsbKbxeU1Bwhp4TDD4mO1V66sK9/hTZs3dsvLP
fssraCbxk2ayGW+BJeIwneyTQMBGT/1gQiXYVna5i4wwKg6cC1q52qq6LC9G5Baw
HglQWNH7zXfTOJme6z7Qe1nQYtm/MSaJTZE4YS7PeyGKHCTQCkD2lxLjSWMLAAEY
EfHFJktJuWX6WdnLaYgzH2Rm7duCCnK5nCZ6cnj9iD683hCN2fzK+eU3S0PyemFt
9uNfTmmdBFp6eRfPVxh2ckGnmw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:44:33 2025 by rpki-client