Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/mfbZVdq9U34OeMkxk6hF0I-IiUw.roa
File: mfbZVdq9U34OeMkxk6hF0I-IiUw.roa (raw, json)
Hash identifier: 9EuZ0OPsmGIAQsHl9Riv2eeHyNztmXWvWPcE2dshfNk=
Subject key identifier: 99:F6:D9:55:DA:BD:53:7E:0E:78:C9:31:93:A8:45:D0:8F:88:89:4C
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01945FB16F3D65FDEB7AA7F1B810C395FB79
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/mfbZVdq9U34OeMkxk6hF0I-IiUw.roa
Signing time: Mon 13 Jan 2025 12:44:11 +0000
ROA not before: Mon 13 Jan 2025 12:44:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31493
IP address blocks: 212.124.192.0/19 maxlen: 19
212.124.192.0/20 maxlen: 20
212.124.208.0/22 maxlen: 22
2a00:19e8::/29 maxlen: 29
2a00:19e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b1:6f:3d:65:fd:eb:7a:a7:f1:b8:10:c3:95:fb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 13 12:44:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99f6d955dabd537e0e78c93193a845d08f88894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:2d:bb:3a:bc:0e:ff:68:34:1d:80:36:e6:
58:8c:49:5f:71:69:9c:1d:0b:b0:6b:3a:2e:e6:39:
26:ef:ad:0f:1e:73:da:dc:ec:f7:d1:02:00:e5:40:
8c:a8:4a:a7:9b:37:0e:62:b7:59:e7:8d:9d:75:59:
a7:c3:bb:a4:de:a6:07:7e:49:72:ba:84:b7:01:24:
a7:1a:17:62:23:86:2d:96:94:31:76:64:99:4e:55:
39:0d:46:45:66:77:5e:8a:42:f8:a3:ed:6e:91:0c:
02:e9:ed:d5:9c:4b:14:13:9a:1a:60:1e:ed:45:0b:
c7:f8:20:4f:fc:66:c3:b4:d1:ed:1a:26:ba:fa:c5:
22:0f:4b:72:1a:91:03:f9:29:34:f2:43:9f:6f:65:
79:d6:aa:21:7f:dc:21:af:6c:8f:5b:ed:d1:6d:f4:
70:cd:aa:cf:55:f6:18:c6:fb:70:98:40:f7:d1:f6:
74:9f:bb:52:7e:66:42:d6:0f:35:ed:79:41:72:1b:
08:0d:76:86:a3:d6:88:e5:dd:fd:a7:86:ee:9d:cb:
cb:7f:ba:59:3a:f3:d9:23:e9:ef:e9:39:06:93:1c:
a9:b2:12:02:23:a2:42:8c:f4:a5:78:e6:45:3b:a4:
8e:d0:a8:46:e7:a9:b8:17:46:b7:56:94:7c:c1:51:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:D9:55:DA:BD:53:7E:0E:78:C9:31:93:A8:45:D0:8F:88:89:4C
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/mfbZVdq9U34OeMkxk6hF0I-IiUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.192.0/19
IPv6:
2a00:19e8::/29
Signature Algorithm: sha256WithRSAEncryption
5f:68:ee:92:93:7a:bc:0e:97:9e:f3:29:e9:7b:3e:63:e7:a3:
80:fd:26:57:3c:d3:9b:b3:a6:8d:c3:a9:09:c1:39:eb:94:77:
93:84:95:3f:84:b5:4b:69:82:70:77:b1:b4:84:bd:f6:a9:2f:
86:70:20:3e:59:cf:76:c5:0e:f3:70:c6:73:e8:22:20:34:9b:
10:e2:a6:7a:25:13:e4:71:3c:47:7f:fb:c3:b6:ba:ff:9d:72:
30:a9:14:2d:f5:69:44:81:18:05:c4:b9:d7:02:57:2b:89:a1:
8e:e6:11:83:87:80:45:37:c1:4e:e2:b5:1c:de:a6:15:66:99:
ec:39:c9:35:16:7f:1e:05:76:73:91:3d:fe:ad:cd:d4:24:be:
78:5e:11:ed:2e:db:f3:7b:ae:d3:a7:f6:e4:c1:72:a6:ba:c2:
e5:99:73:fc:f5:47:35:16:37:1a:f8:07:ef:64:95:f4:38:47:
bd:24:7e:27:38:34:38:63:49:39:18:d1:bd:fd:9c:23:07:ed:
a3:17:9c:d1:54:b1:14:dd:1b:b0:27:01:e9:93:79:4d:af:08:
be:af:6b:82:b9:d6:2d:e7:85:f3:a7:b4:b0:05:d8:37:43:3a:
62:44:ef:72:38:b0:d1:03:05:b2:4c:93:a3:f6:12:dd:c1:73:
d1:d9:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:50 2025 by rpki-client