Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/annCiPN132yTitXRHw_7bHEVLXg.roa
File: annCiPN132yTitXRHw_7bHEVLXg.roa (raw, json)
Hash identifier: EdVM7QIkdAP06xlvmGfVQcIXrvazDref1UvymV69i1A=
Subject key identifier: 6A:79:C2:88:F3:75:DF:6C:93:8A:D5:D1:1F:0F:FB:6C:71:15:2D:78
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019598C174E44DA7546AB4136DB651FDF56D
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/annCiPN132yTitXRHw_7bHEVLXg.roa
Signing time: Sat 15 Mar 2025 07:42:49 +0000
ROA not before: Sat 15 Mar 2025 07:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.228.0/22 maxlen: 24
212.116.236.0/22 maxlen: 24
212.116.236.0/23 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:c1:74:e4:4d:a7:54:6a:b4:13:6d:b6:51:fd:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 15 07:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a79c288f375df6c938ad5d11f0ffb6c71152d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:94:e0:f7:e6:1c:0d:cd:9a:82:63:0f:73:
58:94:cd:0a:61:28:ae:de:a6:37:52:cb:95:c2:c8:
5b:06:42:a1:96:fd:7b:57:21:68:63:ae:1e:19:af:
54:f4:09:f8:c4:e3:31:7e:8b:73:b4:8c:e0:4c:e7:
da:ce:f2:9f:b9:8b:e8:6f:bb:1b:b9:7b:65:10:34:
f3:a0:30:65:1f:e7:e1:6a:29:37:63:a1:90:1e:3e:
9f:63:cf:9f:1b:1f:4d:6c:f8:cc:5d:8f:0a:e0:62:
0e:8e:68:c8:68:79:48:bc:87:97:f3:ff:e5:dc:a8:
65:c2:50:ab:e7:38:25:c0:ef:c2:c8:a3:92:5b:4d:
a2:35:5d:46:59:43:ff:fd:a9:49:d2:8c:36:27:a2:
65:30:03:f0:fc:06:be:90:95:4d:a0:13:ec:86:29:
c3:1d:47:af:da:ab:45:65:f2:f7:1e:24:37:f8:1c:
32:0c:c8:b4:c5:4a:69:3c:61:37:81:33:d3:8c:50:
44:84:3b:7f:12:aa:55:3d:54:da:33:23:4c:47:4d:
a1:43:4e:33:20:ed:5f:e1:42:b7:3c:19:36:63:8c:
0c:bb:a7:5a:f8:f3:a0:a3:08:9b:c2:c5:ba:cb:c5:
23:b1:18:9c:92:43:73:5b:e5:a8:f8:26:ab:b6:ed:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:C2:88:F3:75:DF:6C:93:8A:D5:D1:1F:0F:FB:6C:71:15:2D:78
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/annCiPN132yTitXRHw_7bHEVLXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0-212.116.231.255
212.116.236.0/22
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
63:14:55:d4:8e:08:f0:95:31:2b:55:8e:38:f6:c8:f5:1c:a7:
a1:54:39:a7:9d:dd:9b:fa:a9:81:c0:3c:bc:fe:8e:c3:4a:ea:
3e:73:78:fb:3e:b7:f8:97:aa:83:c3:f7:28:4f:fb:5c:d2:6b:
f0:5e:73:6c:56:cb:6e:c0:83:4a:68:c0:22:e3:b8:c8:0b:75:
10:59:3e:88:96:05:54:2d:45:3f:e0:e3:d9:97:13:d8:2f:e2:
42:0e:6c:10:59:3e:59:7a:3e:6d:c3:b7:25:fe:dd:f5:62:da:
99:be:a0:36:7e:43:71:7d:de:2b:72:b8:1b:b4:80:5b:d2:72:
29:4a:6e:08:7c:c3:16:62:4a:df:dc:83:c7:87:1e:02:09:c9:
d0:5f:bb:0c:c3:10:4b:0e:ba:e5:c8:15:aa:bc:15:8f:f0:03:
b5:3e:84:9a:ee:b2:83:23:c4:20:a6:d1:6b:26:29:b5:04:ed:
46:71:9b:ce:d3:31:89:74:29:d6:77:b2:e5:4f:0b:57:c6:82:
59:a9:54:0a:5c:d4:db:fc:ed:19:2d:27:13:df:05:92:4f:99:
f7:7a:f9:5a:6f:0e:4d:ba:8b:c3:14:c6:95:1d:3d:2a:f1:c4:
8e:f6:31:00:6f:78:16:80:8d:8b:d7:0e:42:4f:e8:7c:48:f0:
40:29:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:43 2025 by rpki-client