Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/1-8m9ngZPvUePzgi-xDyYNgbVw8E.roa
File: 1-8m9ngZPvUePzgi-xDyYNgbVw8E.roa (raw, json)
Hash identifier: jzjGgbtxCHsH98Q0qLcOaXdySrU9NoiAIEa0I0ivZtk=
Subject key identifier: FB:C9:BD:9E:06:4F:BD:47:8F:CE:08:BE:C4:3C:98:36:06:D5:C3:C1
Certificate issuer: /CN=fc9d3c20fd7cefd1004d9e6aff7323dacc1ea88f
Certificate serial: 64A659
Authority key identifier: FC:9D:3C:20:FD:7C:EF:D1:00:4D:9E:6A:FF:73:23:DA:CC:1E:A8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J08IP1879EATZ5q_3Mj2sweqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/1-8m9ngZPvUePzgi-xDyYNgbVw8E.roa
Signing time: Sat 01 Jan 2022 03:00:54 +0000
ROA not before: Sat 01 Jan 2022 03:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 212.52.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6596185 (0x64a659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9d3c20fd7cefd1004d9e6aff7323dacc1ea88f
Validity
Not Before: Jan 1 03:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbc9bd9e064fbd478fce08bec43c983606d5c3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:58:55:06:3c:11:fd:fb:0f:82:4b:6e:79:
b9:6a:02:67:b0:d9:90:97:2c:d6:06:82:73:0b:5b:
be:a4:53:b0:2b:a3:9a:df:ff:52:64:58:c3:82:d6:
4c:fb:d3:73:9d:47:7c:b3:84:70:e4:bc:a5:dd:fb:
0e:99:5f:bd:90:f7:a1:dd:1d:2d:b2:1e:92:ef:e0:
1b:31:8f:e5:48:68:fc:22:ad:48:6f:f2:b8:b6:1d:
f7:3d:d8:fd:bd:01:39:4f:f9:69:ef:4f:ba:bb:1a:
b3:04:49:35:5c:ab:58:e8:94:5c:82:45:22:eb:56:
2e:18:b6:ce:2a:bb:81:2a:d5:45:05:29:5f:bb:ac:
d9:12:ec:4f:b4:e0:bd:59:b7:7a:96:d3:53:52:eb:
c9:19:39:53:01:5c:37:1b:b2:d4:3d:d6:a7:6f:3d:
3c:7f:24:4f:95:e4:66:be:ae:98:ac:e6:98:a5:92:
f0:78:9f:b7:72:01:b8:7d:15:f1:ad:34:3f:c3:e9:
ae:30:d4:aa:e7:02:a0:35:c4:60:13:80:77:13:2e:
33:ea:89:e0:26:4d:c9:2a:df:99:9b:12:8d:a7:8a:
7d:7e:3d:44:89:e6:f0:06:d5:7e:9e:ec:f8:d8:f4:
65:56:5a:cc:c2:68:b0:8f:ed:61:05:35:1f:6b:57:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C9:BD:9E:06:4F:BD:47:8F:CE:08:BE:C4:3C:98:36:06:D5:C3:C1
X509v3 Authority Key Identifier:
keyid:FC:9D:3C:20:FD:7C:EF:D1:00:4D:9E:6A:FF:73:23:DA:CC:1E:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J08IP1879EATZ5q_3Mj2sweqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/1-8m9ngZPvUePzgi-xDyYNgbVw8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/_J08IP1879EATZ5q_3Mj2sweqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.30.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bc:2b:13:20:83:d1:47:b6:cf:89:c1:e5:3e:07:0d:ff:b2:
53:c0:bb:a5:24:c7:4b:cb:17:5c:8f:09:27:5f:3d:fe:4b:ab:
3e:28:35:1c:04:9f:66:15:6e:59:98:16:5b:26:8a:9b:db:f3:
73:2b:9e:85:b2:be:08:5d:1a:3f:7f:9c:6e:24:f7:a9:81:d8:
c5:c6:64:f4:fd:41:d3:53:c7:0d:a5:14:73:10:90:b4:b9:c7:
dc:15:dc:6d:55:b8:47:0a:bd:63:68:f5:aa:ef:2c:1b:28:41:
21:6e:5a:e2:b0:fb:6f:49:6b:74:d4:c3:62:41:2b:23:ad:6f:
b0:f8:66:45:26:fe:d7:b4:3f:ad:81:b6:81:64:e2:d7:05:92:
bb:e5:29:df:9b:af:9c:52:dd:a9:13:45:85:5a:65:3e:10:6c:
5c:80:3e:1d:87:4f:b9:ef:52:26:44:f4:2d:85:b4:68:31:6e:
dc:d0:52:95:6f:40:74:45:ce:5a:2a:70:6a:9c:77:e9:17:5d:
05:33:ff:79:a6:dc:65:85:a0:63:f7:47:44:c0:c5:80:f8:df:
8f:72:fd:8e:da:9e:95:54:80:84:93:5e:58:98:66:2e:de:01:
e9:86:3b:e5:2f:d2:89:7f:d4:56:b1:45:33:88:7c:f0:da:4a:
01:3a:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:49:57 2025 by rpki-client