Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa
File: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (raw, json)
Hash identifier: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=
Subject key identifier: 01:47:8D:55:5F:D2:32:A3:EA:12:CD:8E:E6:21:D2:C6:1D:E0:EF:20
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 0194228DBA80C74DF4D2D3C4986FEC806457
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49158
IP address blocks: 212.9.96.0/19 maxlen: 20
212.9.117.0/24 maxlen: 24
2a02:2b90::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ba:80:c7:4d:f4:d2:d3:c4:98:6f:ec:80:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01478d555fd232a3ea12cd8ee621d2c61de0ef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:21:bb:e6:90:4c:e7:bc:eb:f1:fc:3e:92:
28:ef:0d:31:28:ff:36:c0:2d:a9:84:a4:85:3c:b9:
6c:10:80:fc:4c:32:dc:e6:19:46:da:38:ff:9d:db:
8c:12:0c:9b:b7:09:58:1d:de:31:90:a5:7f:e9:49:
b3:43:ec:50:d0:bf:70:39:07:02:03:39:e0:8d:b9:
d1:b0:29:8f:33:f9:48:94:c8:6a:43:ec:8d:59:71:
0a:54:2c:1c:d5:a7:1d:ff:5f:72:be:53:d3:c3:86:
e6:1e:76:20:cd:63:a4:2a:af:7d:d0:cc:d1:48:69:
9e:a9:a9:d6:3a:80:66:ae:52:53:a0:36:a4:d2:98:
44:5a:b5:bf:0e:90:15:a6:93:55:76:f3:b8:12:84:
ef:d4:fe:63:b5:1a:49:b6:29:b2:e1:6c:2c:b8:28:
57:74:15:39:7d:35:83:92:0f:0a:67:77:3a:bb:f5:
c2:29:19:4e:83:46:43:88:d1:bd:be:f4:58:30:5b:
ff:55:74:be:f0:37:62:5f:5d:a8:07:a8:a8:4d:f8:
16:07:5a:e0:4f:4f:2f:c6:b4:46:6a:2d:02:e2:3f:
4f:b1:42:1b:d7:02:ab:44:24:26:24:24:df:21:cd:
56:a5:79:0a:73:ad:81:df:09:75:92:2b:27:a2:a6:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:8D:55:5F:D2:32:A3:EA:12:CD:8E:E6:21:D2:C6:1D:E0:EF:20
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.9.96.0/19
IPv6:
2a02:2b90::/29
Signature Algorithm: sha256WithRSAEncryption
65:5b:ae:7e:86:5b:d5:3a:dd:17:f7:2c:d1:b5:69:84:f7:3e:
f0:60:2b:1c:5a:87:6a:47:2c:63:df:f8:7f:8c:61:ea:8f:82:
f0:d8:66:77:14:e5:56:63:04:97:29:6e:03:65:4e:1f:37:6e:
87:74:0b:36:9e:99:31:d9:59:43:18:53:33:20:f1:c1:58:8c:
43:88:3b:72:28:fd:03:2d:b3:92:c2:05:bd:34:e9:51:79:08:
4b:9c:b5:17:5c:fb:f0:8b:f6:97:56:e7:d0:b4:ac:a3:56:18:
53:6b:5e:28:70:8e:59:de:d6:f8:58:6d:07:85:57:ba:90:a5:
b9:61:99:44:38:fc:e6:20:b8:c0:26:3a:a3:0d:a0:33:e7:2d:
ef:51:d1:96:e4:3a:21:b2:4c:52:ae:b6:9a:b4:f4:d5:ea:32:
cf:07:e3:44:bf:17:9f:c3:f9:3e:11:c1:d9:b6:07:3d:36:9a:
8d:0e:0d:a8:bb:fb:95:17:a1:e0:f5:f3:e4:4b:5d:5f:63:20:
c1:dd:2a:4b:e0:23:0e:bf:7a:21:a8:00:14:c1:58:61:67:08:
4b:2d:53:4b:2a:c8:34:05:19:20:cf:27:9e:6f:4c:e2:37:f8:
42:6e:1c:2b:3e:05:0b:3f:80:9b:6b:60:50:00:3c:1b:1b:5c:
ef:bc:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:48 2025 by rpki-client