Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/AVj9zN7kGKErw7bTHyy5U77czlw.roa
File: AVj9zN7kGKErw7bTHyy5U77czlw.roa (raw, json)
Hash identifier: CNBQEghwKq9/BiPRKpGm0NT6fdK7ajzfR5aRd2nuZzA=
Subject key identifier: 01:58:FD:CC:DE:E4:18:A1:2B:C3:B6:D3:1F:2C:B9:53:BE:DC:CE:5C
Certificate issuer: /CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
Certificate serial: 018571D79AB53C6F7FDE69394C08EBED7C1C
Authority key identifier: A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/AVj9zN7kGKErw7bTHyy5U77czlw.roa
Signing time: Mon 02 Jan 2023 09:37:13 +0000
ROA not before: Mon 02 Jan 2023 09:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47125
IP address blocks: 212.46.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:9a:b5:3c:6f:7f:de:69:39:4c:08:eb:ed:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
Validity
Not Before: Jan 2 09:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0158fdccdee418a12bc3b6d31f2cb953bedcce5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:e4:32:dc:d5:f5:78:b5:bc:80:8b:77:a7:
f2:47:73:f9:31:5b:74:5c:84:81:f8:3b:18:50:72:
18:8a:36:55:72:b8:17:80:de:5b:50:e0:06:41:c3:
72:66:70:50:de:4c:01:93:b1:10:88:d1:99:43:26:
2e:d7:60:89:d2:3a:96:24:5a:e8:c5:b3:4f:eb:d6:
f6:bb:ca:ae:35:1a:5e:59:e5:fb:40:65:7d:f2:c0:
f1:34:fd:5d:b8:51:e0:81:74:8d:d6:2c:89:57:5d:
7e:b9:e2:2f:d0:68:94:d5:e4:d7:2d:98:62:99:57:
dc:23:86:09:e1:51:7c:fa:76:4b:86:3d:b0:e4:cc:
08:c7:66:e7:03:69:6c:d9:10:f0:db:5a:58:69:4a:
70:18:50:6b:63:a7:f0:9b:ab:07:6c:48:31:35:56:
28:2d:ac:b1:a9:b6:7e:35:5b:a4:49:de:a8:d2:7c:
a3:83:5e:be:d2:71:58:8d:2b:5e:76:35:0f:c6:4d:
a7:02:2d:3b:7d:17:91:00:6a:b2:bc:aa:d5:15:0e:
c4:da:85:09:43:51:dd:14:3d:5f:90:92:a1:e5:7f:
25:69:47:ad:2e:53:3e:69:6e:ee:15:2c:94:0f:3e:
4e:60:93:b1:83:2c:6e:01:41:2a:03:23:db:bf:1c:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:58:FD:CC:DE:E4:18:A1:2B:C3:B6:D3:1F:2C:B9:53:BE:DC:CE:5C
X509v3 Authority Key Identifier:
keyid:A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/AVj9zN7kGKErw7bTHyy5U77czlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qLG5am6eXjonNwjfXOZD3VA8kTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:da:e0:a9:db:40:36:3f:ba:98:79:08:1d:88:67:53:1c:68:
0a:05:bb:58:d9:a3:8c:9f:84:d7:46:01:8c:76:ec:2d:c2:0e:
20:39:3c:a7:04:b1:dc:9f:d8:3e:ac:34:2e:87:11:39:56:af:
cc:b5:3d:b5:2c:6d:9a:9d:97:be:06:fd:46:0f:8e:11:e6:8f:
86:44:60:04:6d:3a:81:73:dc:ae:dc:c5:0b:b1:11:aa:e0:ae:
e0:ee:75:a0:2a:81:83:d4:56:c1:da:40:b2:9a:c1:4d:3e:28:
44:99:36:ab:e6:3f:0f:eb:d4:16:ef:67:7b:ac:1a:98:27:61:
b9:d1:70:1f:52:17:8a:15:9c:09:69:bf:cc:db:89:73:a7:91:
aa:a7:5e:c5:5b:c8:3b:c4:bc:5f:b9:6c:ec:e4:f1:7d:8f:c7:
43:49:dd:d3:fb:63:61:70:10:5d:15:49:9c:37:28:d5:9d:3a:
a3:62:02:51:cf:60:6b:13:c7:10:16:eb:d9:35:17:36:96:33:
80:96:80:e8:9d:46:b5:83:7a:0a:0e:ce:50:64:b9:70:fa:97:
d9:da:f8:80:fd:f8:d6:2f:db:e9:5b:3f:55:11:ea:8e:04:77:
27:c6:01:6c:6e:21:07:7e:c2:7e:78:a1:9a:e0:00:b6:58:72:
12:25:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:07 2025 by rpki-client