Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eNSe7NZpBc_eJj0y5eMiMmnmRjc.roa
File: eNSe7NZpBc_eJj0y5eMiMmnmRjc.roa (raw, json)
Hash identifier: pwyewnUGvwGvARPw8eNqUHv+LqGl8Wfm67TW8M6UK3A=
Subject key identifier: 78:D4:9E:EC:D6:69:05:CF:DE:26:3D:32:E5:E3:22:32:69:E6:46:37
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D903BE5D53BF9D18FE96499E46C07
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eNSe7NZpBc_eJj0y5eMiMmnmRjc.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13517
IP address blocks: 212.222.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:90:3b:e5:d5:3b:f9:d1:8f:e9:64:99:e4:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d49eecd66905cfde263d32e5e3223269e64637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:fe:4c:68:78:24:99:57:89:2a:2c:1b:54:
22:fb:b3:00:fa:8e:9d:29:05:c1:fd:6d:50:d1:7d:
da:9b:e1:81:86:46:2c:7a:46:dd:55:3a:f8:a2:af:
76:96:37:46:0e:93:98:e5:81:09:8b:df:a4:aa:6c:
8a:a6:0e:7a:ee:76:7b:c9:6a:38:7a:1c:49:fd:8d:
3d:e4:e2:d3:4d:90:89:6a:fc:13:11:2f:17:2b:95:
17:43:8f:c9:7a:5d:3d:44:9d:d3:4b:48:a4:6c:8e:
ec:87:69:23:b8:1b:df:c6:49:27:1e:7d:37:62:ad:
27:fb:f1:95:cb:37:7d:23:53:5d:df:74:4e:21:f5:
97:c6:68:88:e9:80:1c:d3:e7:56:2d:e0:66:3a:ec:
3c:63:dd:70:32:29:b7:20:27:63:24:03:d7:5f:52:
a9:9a:60:37:3e:90:f4:88:76:21:04:7b:97:3f:2d:
8e:37:df:d7:cf:a2:75:34:d6:b9:69:cb:d5:d3:ac:
4e:a8:bf:4f:e8:34:32:85:0d:54:e4:52:bf:f7:5c:
58:00:76:94:08:9c:d3:ce:92:40:06:b3:88:14:b4:
91:20:2f:36:1e:33:89:6b:26:50:13:23:fc:cf:24:
ca:4f:5e:1e:2e:63:87:7b:ba:3d:37:b3:4a:d0:3f:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D4:9E:EC:D6:69:05:CF:DE:26:3D:32:E5:E3:22:32:69:E6:46:37
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eNSe7NZpBc_eJj0y5eMiMmnmRjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.222.13.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:f4:d7:0b:9c:72:0f:0f:b6:13:93:18:26:a5:32:7d:57:c3:
62:6b:96:7f:f0:e2:ca:b7:f3:ca:bd:dc:c3:f4:b2:ec:f2:5f:
30:b1:cc:35:52:52:a6:f9:aa:74:da:46:0d:01:2e:88:74:08:
5f:15:01:a0:a1:dc:22:7b:6b:43:a7:a0:79:18:2e:f2:52:e7:
3a:00:80:c3:16:74:e3:43:11:47:93:fd:3c:eb:e9:4a:01:78:
fc:3a:7a:69:bf:c6:f7:9a:cb:73:96:91:66:4d:da:0a:90:b4:
ff:42:8b:3d:28:34:e2:38:78:ef:3b:14:1b:30:e8:ae:0a:e1:
2d:6b:f8:27:c9:89:34:a2:44:d6:92:c5:32:a9:d8:0b:5e:9f:
c2:5e:dd:8a:99:1c:d1:c1:3b:b8:12:a8:ed:f2:f8:9e:76:f1:
26:d4:87:d8:b3:69:ac:ca:84:d8:71:3b:b7:7a:2a:b5:24:fd:
8f:c4:12:fe:87:1c:56:de:50:97:e1:6b:04:c6:f8:53:e5:c2:
36:c6:3a:9e:2e:3d:d8:f5:a1:02:d6:32:33:ea:5a:43:bc:ea:
55:28:bf:b5:b8:7a:70:a7:2e:48:1b:c0:69:8b:01:17:eb:23:
97:35:6f:09:bd:2d:8c:9b:09:a9:3c:79:2d:e8:7b:35:f0:a5:
08:04:2e:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijZA75dU7+dGP6WSZ5GwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwMTAxMTU0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGQ0OWVlY2Q2NjkwNWNmZGUyNjNkMzJlNWUzMjIzMjY5ZTY0NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGP+TGh4JJlXiSosG1Qi+7MA+o6d
KQXB/W1Q0X3am+GBhkYsekbdVTr4oq92ljdGDpOY5YEJi9+kqmyKpg567nZ7yWo4
ehxJ/Y095OLTTZCJavwTES8XK5UXQ4/Jel09RJ3TS0ikbI7sh2kjuBvfxkknHn03
Yq0n+/GVyzd9I1Nd33ROIfWXxmiI6YAc0+dWLeBmOuw8Y91wMim3ICdjJAPXX1Kp
mmA3PpD0iHYhBHuXPy2ON9/Xz6J1NNa5acvV06xOqL9P6DQyhQ1U5FK/91xYAHaU
CJzTzpJABrOIFLSRIC82HjOJayZQEyP8zyTKT14eLmOHe7o9N7NK0D+ENQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHjUnuzWaQXP3iY9MuXjIjJp5kY3MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvZU5TZTdOWnBCY19lSmoweTVlTWlNbW5tUmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1N4NMA0G
CSqGSIb3DQEBCwUAA4IBAQDS9NcLnHIPD7YTkxgmpTJ9V8Nia5Z/8OLKt/PKvdzD
9LLs8l8wscw1UlKm+ap02kYNAS6IdAhfFQGgodwie2tDp6B5GC7yUuc6AIDDFnTj
QxFHk/086+lKAXj8Onppv8b3mstzlpFmTdoKkLT/Qos9KDTiOHjvOxQbMOiuCuEt
a/gnyYk0okTWksUyqdgLXp/CXt2KmRzRwTu4Eqjt8viedvEm1IfYs2msyoTYcTu3
eiq1JP2PxBL+hxxW3lCX4WsExvhT5cI2xjqeLj3Y9aEC1jIz6lpDvOpVKL+1uHpw
py5IG8BpiwEX6yOXNW8JvS2MmwmpPHkt6Hs18KUIBC4w
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:15 2025 by rpki-client