Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/k66OCRPIZR5zEdB2C8V_xNYPA2c.roa
File: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (raw, json)
Hash identifier: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=
Subject key identifier: 93:AE:8E:09:13:C8:65:1E:73:11:D0:76:0B:C5:7F:C4:D6:0F:03:67
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B7859582705674FB7B207DDC0B0C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/k66OCRPIZR5zEdB2C8V_xNYPA2c.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212843
IP address blocks: 212.86.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b7:85:95:82:70:56:74:fb:7b:20:7d:dc:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93ae8e0913c8651e7311d0760bc57fc4d60f0367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:76:a9:bb:d0:3a:25:fd:f4:db:90:71:2e:
3b:7e:a0:39:d8:bb:a4:de:31:f3:7b:a3:e3:2c:b1:
8a:7e:89:6f:46:37:28:b6:5a:94:17:6f:5d:5c:34:
ba:99:0f:0b:a4:88:cf:d2:26:57:be:96:0c:cf:d0:
84:f1:40:1c:de:31:38:5e:cf:bf:1a:f2:aa:b3:d5:
f8:f6:fd:2a:a2:42:19:97:99:e4:af:0f:76:3f:26:
9b:6e:7d:c6:70:f2:21:99:a0:f2:91:42:8d:79:cf:
3e:dc:ae:7a:37:e3:c5:ff:11:34:03:f2:4e:71:06:
ff:ba:83:6d:82:04:bb:2f:59:7b:bd:0e:32:ba:f4:
1e:69:d6:51:b3:f9:22:f0:73:b1:40:05:07:de:88:
4b:75:d1:85:84:56:5e:8c:ae:fe:a3:55:b9:aa:fa:
ec:bc:75:90:4a:f5:fd:00:d5:e2:d4:b5:88:f7:70:
29:bd:f9:17:5e:be:8d:0c:10:bb:b9:6f:ec:99:a7:
19:fc:50:8a:d8:ee:88:02:59:84:a5:27:30:07:8e:
da:04:25:46:4c:02:75:3f:63:c3:1c:ad:d3:39:cf:
f4:99:32:b9:ef:8b:ec:15:83:65:d3:42:8c:0e:c1:
41:df:30:ab:29:cf:69:04:f9:fb:50:c5:8c:7c:46:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:8E:09:13:C8:65:1E:73:11:D0:76:0B:C5:7F:C4:D6:0F:03:67
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/k66OCRPIZR5zEdB2C8V_xNYPA2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ac:c7:ca:e8:7f:61:14:0d:8e:aa:88:3c:5f:91:fc:da:bf:
8b:70:79:27:30:17:9a:d1:91:be:44:f6:3f:0d:4a:97:3a:c2:
a6:c1:bf:b0:6e:16:4c:38:85:77:70:81:38:8b:23:5b:ab:66:
1d:be:33:9c:76:1f:03:8b:72:5d:ea:86:7c:16:e7:43:f2:68:
e7:51:2d:fb:34:dd:78:c7:a7:f0:30:a4:d5:78:fc:31:5e:69:
b3:51:16:6d:25:a4:2b:2b:56:9d:0b:f7:e1:40:b9:8c:d6:da:
43:73:ab:35:2b:3e:f6:92:c0:91:09:30:49:f0:6e:69:f4:bc:
17:8c:de:73:c9:cc:bc:37:92:9c:72:22:c1:60:c4:5f:90:f9:
70:1f:38:37:d4:2d:83:57:81:77:9f:79:d7:7e:e9:54:de:e9:
b3:a0:48:94:4a:0d:a2:f2:11:61:f1:e3:db:2e:44:60:15:f6:
1f:ad:12:bc:c5:2c:9c:aa:af:e6:2b:a9:f2:ec:7f:3a:25:57:
79:0a:88:a8:b4:ba:c9:6d:d0:8b:d2:6b:e7:f3:7a:8b:90:74:
39:d5:08:5d:19:c6:fe:d3:3b:df:25:4d:26:ec:4d:7e:c0:e3:
4e:5e:c0:f6:7a:5c:62:49:e4:81:8c:23:a8:0f:24:6a:d9:70:
f9:ea:80:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:50 2025 by rpki-client