Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/Z406JsldDq5gjN_1Lio77tcegQc.roa
File: Z406JsldDq5gjN_1Lio77tcegQc.roa (raw, json)
Hash identifier: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=
Subject key identifier: 67:8D:3A:26:C9:5D:0E:AE:60:8C:DF:F5:2E:2A:3B:EE:D7:1E:81:07
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 019425FD831A62BEE1831A3FCFFAB48E7CD5
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/Z406JsldDq5gjN_1Lio77tcegQc.roa
Signing time: Thu 02 Jan 2025 07:49:18 +0000
ROA not before: Thu 02 Jan 2025 07:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12409
IP address blocks: 212.94.192.0/19 maxlen: 19
2a0a:fc80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:83:1a:62:be:e1:83:1a:3f:cf:fa:b4:8e:7c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Jan 2 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=678d3a26c95d0eae608cdff52e2a3beed71e8107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:25:d4:62:7a:99:ce:28:f6:5a:4f:9a:b7:
4e:70:be:f9:fd:a3:fc:07:c3:38:5b:46:d3:a7:d3:
7e:8e:75:a0:ba:c4:63:2f:fb:1a:ea:8e:2a:93:40:
f0:55:99:1a:4f:fa:be:75:9a:80:2c:b2:7c:f4:bb:
cb:6c:11:a5:64:29:35:e6:9d:be:a0:c8:ed:80:02:
91:16:8c:06:d7:b1:96:8e:14:4a:70:c4:70:4f:79:
01:09:04:f2:76:12:5a:1a:d3:1c:85:3d:52:89:5e:
75:74:07:22:15:97:4c:55:4a:f1:f3:07:ff:2b:71:
1f:03:33:1f:e3:8a:a6:d1:a1:e1:d4:67:26:ff:6b:
5f:1b:5c:29:c6:58:c6:1d:3b:c0:0a:0e:5b:54:74:
94:73:1c:2b:5a:6a:ec:09:dc:41:9e:41:74:bd:52:
71:7c:11:cd:ed:8a:9c:88:72:aa:2e:52:c5:3b:65:
d8:c2:84:3c:86:db:23:73:0f:a9:77:6d:09:2c:b8:
5a:a4:7b:92:05:fd:95:59:82:81:e5:68:38:ba:bf:
ab:35:d4:9e:32:c9:35:07:f9:ad:23:12:d7:a1:8e:
ba:93:7c:c5:b9:5f:81:55:00:cc:a5:3b:21:d9:90:
4d:74:fe:04:86:42:dd:28:13:91:47:81:90:00:d1:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:3A:26:C9:5D:0E:AE:60:8C:DF:F5:2E:2A:3B:EE:D7:1E:81:07
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/Z406JsldDq5gjN_1Lio77tcegQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.192.0/19
IPv6:
2a0a:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
42:f0:8c:ea:6c:5a:80:bf:d9:55:9a:8e:77:a5:0f:62:3a:da:
cd:02:d0:5a:99:54:e3:f5:e8:e0:62:c6:f2:fe:a3:4c:52:05:
0f:b5:00:b5:a0:7a:41:af:26:ba:39:69:1e:82:30:05:b3:46:
b5:ac:e6:2b:38:e1:f4:69:61:43:e6:c4:8d:46:28:83:6b:25:
40:65:9f:5a:67:ec:4f:34:2f:27:25:d0:aa:c6:5e:7b:a4:39:
64:23:1a:f5:32:be:f9:ba:09:91:af:78:de:56:bf:44:aa:ce:
ec:f4:d1:ca:1c:81:bc:63:99:45:e7:0d:a4:bc:f1:9d:50:83:
f7:c3:0d:48:c0:87:ce:cc:ba:0f:ad:e8:cf:93:1e:59:80:06:
ce:f4:75:1c:ff:9d:5b:d2:f8:f4:92:66:26:ec:b8:83:08:67:
e0:03:3d:0c:38:cc:f9:fd:f5:40:f4:5b:2b:ff:a9:c8:47:e2:
ca:1a:ec:90:cb:bd:8f:98:64:a7:28:8b:3b:db:a3:39:be:f6:
79:e8:f5:41:27:3c:49:f6:61:a2:38:92:26:9f:19:13:4b:ec:
87:ce:a9:a6:cf:2d:da:fc:4e:5f:02:fb:aa:34:5a:c2:84:3a:
6b:93:ae:0c:d9:50:79:7f:a0:2b:e9:f2:19:5a:76:5d:85:e3:
a2:0b:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:19 2025 by rpki-client