Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/EnqvCYrpk9ES0GHMBx3AnceXgP0.roa
File: EnqvCYrpk9ES0GHMBx3AnceXgP0.roa (raw, json)
Hash identifier: 4evrcdOjJD4VFiExQorejQNX1aNlJptSyX2Sa5LokUo=
Subject key identifier: 12:7A:AF:09:8A:E9:93:D1:12:D0:61:CC:07:1D:C0:9D:C7:97:80:FD
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 01856F42A6DA07FE2CD0F829BCEBE296BBD0
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/EnqvCYrpk9ES0GHMBx3AnceXgP0.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204275
IP address blocks: 212.87.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a6:da:07:fe:2c:d0:f8:29:bc:eb:e2:96:bb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=127aaf098ae993d112d061cc071dc09dc79780fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4e:56:3b:4d:81:95:51:8f:b3:ce:f4:0e:20:
14:b7:92:14:08:a3:2c:43:ba:3f:af:85:e1:8f:b9:
0e:94:37:6c:6b:45:d6:c7:ad:ee:58:be:b6:72:fe:
f2:7c:ef:83:48:c9:f6:6d:6f:33:a0:17:f2:fa:81:
30:f7:0d:71:56:ab:bc:9f:eb:2f:3e:25:78:a4:df:
5e:01:64:20:6b:b6:db:24:ae:d8:4b:cd:a2:c1:36:
f7:78:07:0b:b3:08:ab:04:c2:05:42:38:d2:47:f8:
56:87:d0:91:42:0b:e9:80:a4:d4:b7:d3:c4:36:e5:
54:a9:1b:75:ef:a4:fb:11:bb:6d:c6:31:55:80:f6:
df:f3:77:6e:c5:37:f6:8a:0e:e9:d0:2f:a2:84:2e:
dd:b8:7b:52:a5:bc:7b:ce:72:15:2e:37:03:76:f6:
9e:79:0b:d2:c1:86:a6:f2:8f:23:1a:df:47:f3:54:
06:1b:51:6f:67:82:4a:fa:e5:14:40:d4:a8:a4:77:
84:16:5e:29:5e:6f:c0:2a:8c:9c:9d:81:03:ab:fa:
a8:99:6c:65:bd:8b:73:b9:19:7b:7f:fa:bd:16:62:
c6:e0:e1:0a:83:37:0b:c7:94:dd:4a:e3:b1:5d:e8:
96:38:cf:e7:b6:aa:2b:4b:8f:25:7f:da:64:d2:0b:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:AF:09:8A:E9:93:D1:12:D0:61:CC:07:1D:C0:9D:C7:97:80:FD
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/EnqvCYrpk9ES0GHMBx3AnceXgP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.250.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:bf:b6:b1:58:43:f2:2a:cc:9f:a9:1e:f2:29:bb:91:99:ec:
9b:d5:70:e7:9f:8c:7f:dd:61:44:12:e7:7e:5b:1f:bb:d6:c8:
48:8f:77:ee:24:4e:bd:8d:c1:aa:27:6d:d6:c9:61:91:7b:2f:
18:24:ef:da:a9:eb:a5:fb:83:aa:55:a8:32:fd:c6:0e:0f:5f:
28:79:e1:ea:8e:23:a0:d6:18:3f:ee:11:88:51:8c:cd:75:80:
95:1c:95:d1:77:51:3d:19:c3:8d:44:3a:ec:17:ca:aa:4f:96:
fd:5d:10:9a:4b:b0:23:f8:6c:14:13:7e:20:f0:d6:e9:d9:1e:
73:56:61:db:0c:cb:e6:53:e2:87:d6:e2:5d:15:c7:50:67:47:
3e:ff:76:ac:60:60:a4:44:68:aa:1e:46:99:ed:e5:57:c1:a2:
2a:d6:d4:af:1a:bb:f3:c4:1d:ee:76:87:30:6b:58:9a:72:f6:
96:75:0b:4b:26:32:6c:08:bd:55:90:1a:47:05:c4:15:2d:39:
13:b9:33:b3:b1:5a:be:6f:83:29:06:c6:66:c8:87:40:e8:c7:
87:31:0b:87:ce:92:75:7d:3f:0b:dc:97:c9:96:9a:b1:59:2b:
95:60:96:9f:d5:c0:0d:66:b3:60:13:5f:7c:a5:33:06:3b:48:
0f:c2:b5:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQqbaB/4s0PgpvOvilrvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2
ZDcwOTAwHhcNMjMwMTAxMjEzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdhYWYwOThhZTk5M2QxMTJkMDYxY2MwNzFkYzA5ZGM3OTc4MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU5WO02BlVGPs870DiAUt5IUCKMs
Q7o/r4Xhj7kOlDdsa0XWx63uWL62cv7yfO+DSMn2bW8zoBfy+oEw9w1xVqu8n+sv
PiV4pN9eAWQga7bbJK7YS82iwTb3eAcLswirBMIFQjjSR/hWh9CRQgvpgKTUt9PE
NuVUqRt176T7EbttxjFVgPbf83duxTf2ig7p0C+ihC7duHtSpbx7znIVLjcDdvae
eQvSwYam8o8jGt9H81QGG1FvZ4JK+uUUQNSopHeEFl4pXm/AKoycnYEDq/qomWxl
vYtzuRl7f/q9FmLG4OEKgzcLx5TdSuOxXeiWOM/ntqorS48lf9pk0guN1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJ6rwmK6ZPREtBhzAcdwJ3Hl4D9MB8GA1UdIwQY
MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt
MDc4N2E1MDNjYTY5LzEvRW5xdkNZcnBrOUVTMEdITUJ4M0FuY2VYZ1AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5
LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1Ff6MA0G
CSqGSIb3DQEBCwUAA4IBAQANv7axWEPyKsyfqR7yKbuRmeyb1XDnn4x/3WFEEud+
Wx+71shIj3fuJE69jcGqJ23WyWGRey8YJO/aqeul+4OqVagy/cYOD18oeeHqjiOg
1hg/7hGIUYzNdYCVHJXRd1E9GcONRDrsF8qqT5b9XRCaS7Aj+GwUE34g8Nbp2R5z
VmHbDMvmU+KH1uJdFcdQZ0c+/3asYGCkRGiqHkaZ7eVXwaIq1tSvGrvzxB3udocw
a1iacvaWdQtLJjJsCL1VkBpHBcQVLTkTuTOzsVq+b4MpBsZmyIdA6MeHMQuHzpJ1
fT8L3JfJlpqxWSuVYJaf1cANZrNgE198pTMGO0gPwrVV
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:53 2025 by rpki-client