Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/fWDdDEZ5-7TJ7ifcAQ9Kizx3VI0.roa
File: fWDdDEZ5-7TJ7ifcAQ9Kizx3VI0.roa (raw, json)
Hash identifier: 9iAjE9rwQQFIjLwRuw0Wl4wwOwQae4btRIJRt6LJVxE=
Subject key identifier: 7D:60:DD:0C:46:79:FB:B4:C9:EE:27:DC:01:0F:4A:8B:3C:77:54:8D
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 0194274784F49F6689DFDC1660F071288AF4
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/fWDdDEZ5-7TJ7ifcAQ9Kizx3VI0.roa
Signing time: Thu 02 Jan 2025 13:49:45 +0000
ROA not before: Thu 02 Jan 2025 13:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 212.124.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:84:f4:9f:66:89:df:dc:16:60:f0:71:28:8a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 2 13:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d60dd0c4679fbb4c9ee27dc010f4a8b3c77548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:5d:b7:0c:d9:5c:0e:31:b7:64:6d:23:da:
1d:e0:68:b6:ae:41:69:ee:ad:73:33:47:de:ef:52:
ef:73:9c:22:8c:f3:6b:dc:46:8f:4d:eb:84:19:75:
4f:bd:6c:f1:8d:a5:7f:59:81:0f:0a:d7:3f:25:a2:
ed:67:f9:79:15:48:2b:f6:69:f6:ae:0c:92:08:4d:
7a:7f:a1:fa:c2:0d:d6:14:8e:15:ef:97:b4:10:86:
1a:05:04:ca:d1:e5:57:fd:88:bf:8d:3d:19:c0:8a:
f3:a4:e9:49:51:7a:ca:d1:26:ba:f7:25:53:f1:3d:
8f:c3:9b:9a:ed:88:84:d1:ac:07:1d:80:34:41:1e:
37:b7:b1:93:e0:70:1f:7c:7c:4d:2d:da:fb:37:f8:
d6:e3:4b:a8:04:ee:59:be:1d:f9:53:ef:ad:18:4d:
b7:97:b7:b6:b3:81:da:dd:05:85:0e:89:62:1e:d6:
53:0f:07:eb:63:f3:ab:1b:fc:a2:78:0a:f3:dc:6c:
b2:7a:91:bd:4e:6c:e9:6f:00:16:72:4d:71:30:2e:
3e:ba:13:1a:54:18:8a:c7:84:6c:e2:22:01:84:33:
dc:b0:2d:9e:ce:8c:14:30:25:b9:a8:6c:f5:9f:be:
aa:16:56:76:e7:30:e3:95:3f:78:2b:9c:1a:66:87:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:60:DD:0C:46:79:FB:B4:C9:EE:27:DC:01:0F:4A:8B:3C:77:54:8D
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/fWDdDEZ5-7TJ7ifcAQ9Kizx3VI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:33:0d:aa:1f:f2:47:ea:38:1c:f6:9b:b9:8c:9c:41:b1:54:
77:6a:0a:a9:06:5b:57:96:bd:4f:e1:45:d3:27:31:d4:fc:51:
13:c2:7c:a9:08:43:c2:22:71:66:67:09:9d:f2:9b:52:32:65:
e3:e2:5c:e5:8b:7c:47:5c:63:cd:55:26:45:04:47:cd:e6:eb:
75:9e:62:f2:03:f5:d7:35:9d:fa:26:fe:87:7c:d0:f8:f7:ab:
35:03:f1:d7:17:11:a6:a7:75:57:4c:b6:79:66:e3:90:35:46:
1f:80:42:7d:6b:31:79:d5:21:07:85:b6:d6:45:7e:47:24:5b:
ec:5a:ed:ed:f6:cd:97:45:7e:74:97:50:1c:60:11:78:13:f8:
86:c7:bf:90:16:47:39:ff:61:b9:f0:e2:4b:3c:95:0c:00:c3:
51:d4:67:75:e2:40:4e:fd:1d:a8:6d:aa:cf:2a:d3:8d:b0:23:
67:79:bf:8c:d4:d1:42:b9:a8:7c:fd:41:ff:3e:33:68:53:6a:
d0:1a:9f:bf:09:f9:10:ae:3c:d1:05:5c:05:d6:ab:50:f1:58:
d7:57:05:9f:76:da:17:e0:36:68:f4:c2:d6:ab:df:93:60:33:
fe:b4:99:85:ec:68:8b:6b:c9:0b:92:62:43:c7:0c:37:a0:fa:
8d:0a:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:14:49 2025 by rpki-client