Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/mS2JhooWVs4pCSV-LHVShtSMGSE.roa
File: mS2JhooWVs4pCSV-LHVShtSMGSE.roa (raw, json)
Hash identifier: 0AADYP3iAWIygix8J5f0oaVIOHxewCUVp+vkjFtY30Q=
Subject key identifier: 99:2D:89:86:8A:16:56:CE:29:09:25:7E:2C:75:52:86:D4:8C:19:21
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 01942826563DC7BB22460CB8C2ACD0A9718C
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/mS2JhooWVs4pCSV-LHVShtSMGSE.roa
Signing time: Thu 02 Jan 2025 17:53:08 +0000
ROA not before: Thu 02 Jan 2025 17:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209860
IP address blocks: 212.87.242.0/23 maxlen: 23
212.87.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:56:3d:c7:bb:22:46:0c:b8:c2:ac:d0:a9:71:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 2 17:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=992d89868a1656ce2909257e2c755286d48c1921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:28:67:a6:70:a9:71:f0:c1:cc:33:3f:b8:
6f:67:46:95:1e:c6:f8:55:19:a0:72:80:bf:2c:e7:
b4:2a:e0:b6:19:ac:6b:5b:a9:bd:93:96:95:a6:92:
59:f9:7b:1d:68:2e:82:7c:f2:af:de:18:08:8e:31:
b8:3a:43:bc:b4:ba:2c:4d:5d:bb:29:33:5b:c8:ec:
7a:a3:64:76:e9:3a:7b:97:42:5e:ac:7b:66:02:86:
c0:a7:a2:ab:91:c2:6f:98:29:d0:df:47:48:d7:8a:
66:8e:88:99:0d:51:59:21:be:3c:e8:cb:aa:fe:b3:
3c:2b:5b:02:5e:b7:bc:76:f1:6b:02:46:a9:51:80:
2b:cc:7d:6c:e5:f8:d4:87:01:8f:fe:8c:78:a3:37:
2e:6b:3b:80:49:f5:de:a5:56:5a:63:fa:aa:e3:52:
d2:7e:9b:4f:8a:7b:18:f7:fd:a3:f1:bd:37:7a:d1:
ed:e4:5d:8a:60:e1:9b:66:57:4b:9c:31:b6:be:86:
9e:99:99:19:3e:d0:11:a5:f8:be:e2:45:0b:6e:fd:
50:c5:cb:1c:e9:e1:04:0e:97:64:dc:bc:52:3f:2a:
a9:28:b4:a4:3d:53:c2:11:86:ff:d7:b8:26:89:3a:
bb:aa:6c:0e:00:d5:5c:3d:af:21:33:89:02:a7:2f:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:89:86:8A:16:56:CE:29:09:25:7E:2C:75:52:86:D4:8C:19:21
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/mS2JhooWVs4pCSV-LHVShtSMGSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.242.0/23
212.87.249.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3d:ee:58:9b:a7:2f:e3:43:8c:b7:36:ad:83:44:08:0a:6f:
04:b6:77:05:c7:61:d2:02:08:1b:38:3c:da:7b:0a:5d:4d:b5:
b1:14:e3:0d:35:49:19:60:a3:4e:8b:29:a4:5b:0d:f2:8a:56:
55:80:f4:c7:68:c4:a2:f0:d1:76:3e:ba:e1:6c:55:f0:bd:2a:
92:7f:2a:16:e4:4c:31:cc:07:8d:49:a7:24:ed:c3:a6:4c:3b:
ec:46:da:c7:a9:24:28:f0:89:1b:df:23:8f:e6:43:e0:98:cc:
2e:57:df:64:88:df:dc:6d:da:01:4a:95:b2:f1:75:24:e5:6b:
c1:7d:20:58:d3:fa:c6:80:e2:60:b1:1d:41:64:6f:46:56:14:
b9:82:8f:f2:0e:e8:6b:b6:23:4b:fa:07:2f:f8:ab:d0:88:1f:
75:db:d9:84:6f:4f:25:d3:7f:f1:10:ed:a7:a8:6e:3d:ef:d1:
b8:40:56:be:eb:97:b5:de:46:ce:b1:fa:fc:e4:04:39:1e:8a:
35:c0:26:b9:49:61:bf:6d:82:a8:ee:c4:0c:b3:51:99:b8:29:
3d:b7:53:76:23:0c:5a:28:68:b3:ed:e8:07:42:ac:0a:34:f1:
39:22:25:3e:fd:c6:5f:95:12:90:13:6a:2c:64:b0:6f:38:45:
ef:df:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:59 2025 by rpki-client