Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/4SB0BEGXSawZj1JygTtf6YZfUIQ.roa
File: 4SB0BEGXSawZj1JygTtf6YZfUIQ.roa (raw, json)
Hash identifier: 7s+Q/Z6Iz4lBjiJbD1Ct7gwlwZi0b2x53mxIdCgG0XI=
Subject key identifier: E1:20:74:04:41:97:49:AC:19:8F:52:72:81:3B:5F:E9:86:5F:50:84
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01945F9C60D71E8D299D4808D367609CC6C6
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/4SB0BEGXSawZj1JygTtf6YZfUIQ.roa
Signing time: Mon 13 Jan 2025 12:21:11 +0000
ROA not before: Mon 13 Jan 2025 12:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31493
IP address blocks: 212.124.192.0/19 maxlen: 19
212.124.192.0/20 maxlen: 20
2a00:19e8::/29 maxlen: 29
2a00:19e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:9c:60:d7:1e:8d:29:9d:48:08:d3:67:60:9c:c6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 13 12:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1207404419749ac198f5272813b5fe9865f5084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:88:91:74:e1:e7:48:b9:f4:c3:56:94:a4:
c9:66:aa:72:51:28:1c:c4:70:3e:fa:80:8b:f8:13:
03:00:5f:e2:70:f4:56:17:16:7a:65:c7:25:4e:17:
28:d9:1c:5f:d4:9d:3b:a5:0a:65:23:75:ef:11:6c:
7f:1b:3d:eb:19:fc:79:f1:08:e0:11:52:ca:f1:2f:
9f:46:58:83:2b:d9:af:0a:3a:68:0d:36:07:4b:3d:
4d:06:9b:d2:a9:33:38:85:92:a7:2c:08:1b:f7:e7:
04:5f:f9:0a:26:e9:3b:4f:9b:54:bf:d8:82:09:3d:
df:c6:3e:ec:9f:ae:69:b1:af:83:b6:48:eb:15:18:
f3:a3:39:a0:7a:aa:f7:17:74:c1:7e:03:e2:05:b6:
c8:77:c1:8d:8d:85:4b:83:1a:47:7c:2b:9b:62:8e:
62:c3:e9:f1:22:91:ab:34:35:16:b4:e9:f2:9a:f5:
e5:75:83:67:73:a6:cc:52:e6:d6:be:55:7f:1b:00:
69:e8:83:f6:2f:04:51:18:91:4f:4f:26:d8:28:d1:
ac:bf:6e:11:e5:37:1e:d1:3e:5f:f2:a4:b3:02:93:
63:94:ee:c9:d7:76:92:bb:c1:73:bc:b3:86:e6:d6:
09:dd:a9:79:26:3c:c7:14:b7:a7:e8:a0:61:24:c6:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:74:04:41:97:49:AC:19:8F:52:72:81:3B:5F:E9:86:5F:50:84
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/4SB0BEGXSawZj1JygTtf6YZfUIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.192.0/19
IPv6:
2a00:19e8::/29
Signature Algorithm: sha256WithRSAEncryption
79:57:ef:d6:0e:49:76:d1:74:37:8c:f6:55:1f:1d:25:06:5f:
31:aa:61:80:23:47:08:7f:cf:c2:f7:8d:dc:74:5d:82:bb:ef:
aa:3b:91:95:86:1d:79:8f:2d:58:dc:b7:e6:b4:cd:a3:eb:a1:
8b:81:5a:8f:9a:da:1e:d3:94:a5:c6:ee:5e:d5:e3:16:4a:f1:
b8:82:92:f1:8e:25:42:84:1d:00:38:a2:90:a3:be:67:29:67:
70:99:e0:91:66:9d:99:c3:98:df:4b:64:f6:54:fb:23:ee:83:
4b:87:1d:5e:db:d5:d9:46:6a:e0:4e:df:d5:ea:48:e1:2c:96:
28:c4:40:a3:76:60:69:91:1e:dd:68:1f:66:a0:3f:2e:32:ae:
74:99:b7:f3:71:58:62:e6:71:98:db:94:46:89:94:52:aa:4f:
33:09:ef:1f:76:48:1e:3e:77:1b:54:23:82:57:75:8d:18:c7:
97:48:25:71:db:40:8e:63:23:a4:88:5d:66:e3:c1:43:26:f0:
ae:2e:87:84:be:20:66:36:35:40:b9:e8:5b:0f:2a:bd:1b:79:
f0:10:4d:53:1c:c6:ad:79:49:48:fb:b9:19:e5:65:6e:7d:3f:
72:81:20:99:f3:0b:3f:f6:5f:27:19:9f:e8:06:5c:17:d7:f1:
db:e6:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:02 2025 by rpki-client