Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/RTN7ctApkTYd2Og2JaBeJOrSDKw.roa
File: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (raw, json)
Hash identifier: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=
Subject key identifier: 45:33:7B:72:D0:29:91:36:1D:D8:E8:36:25:A0:5E:24:EA:D2:0C:AC
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF526FAF011FC163D79B135928D30
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/RTN7ctApkTYd2Og2JaBeJOrSDKw.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60121
IP address blocks: 212.59.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:26:fa:f0:11:fc:16:3d:79:b1:35:92:8d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45337b72d02991361dd8e83625a05e24ead20cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:fa:48:cc:76:ac:5f:33:10:bf:02:1f:86:
79:9d:89:53:26:f6:f0:64:1e:88:80:15:b6:fd:f7:
bf:c0:01:78:c7:e5:28:f1:67:2c:16:94:06:12:2f:
47:62:14:40:17:b9:49:be:c8:ef:e7:76:2a:2a:c7:
e6:7a:a8:e1:d5:ad:f2:7a:4a:23:ad:17:35:d3:42:
2f:1b:69:b9:22:11:be:a1:47:d7:ca:09:f2:7b:a2:
1b:ea:31:d6:49:b0:0c:93:e3:c0:84:0a:f5:05:01:
c1:42:c1:09:ec:27:44:c3:53:97:0d:8e:1b:b8:0b:
56:d4:25:86:49:95:b7:0c:57:a9:d4:78:db:44:87:
87:cc:b0:4e:65:f0:9e:41:28:10:f2:60:d8:3f:ea:
15:c6:69:1e:d2:bb:ec:6c:cb:da:a5:9f:b7:28:86:
a1:4b:ab:f2:dd:0c:a3:63:3d:7d:78:9e:ce:73:31:
71:80:11:76:41:2b:53:90:49:64:f2:3a:9b:ce:e7:
48:f7:65:8e:29:4c:51:7a:c4:a3:3f:b8:4c:a3:eb:
c5:b6:45:9f:2d:bc:f8:c8:b3:22:30:06:a0:65:9e:
af:94:18:94:80:0f:1b:98:f8:c3:a1:bc:3b:14:5b:
34:dc:05:e0:59:f0:d8:99:b2:38:7d:42:66:3f:89:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:7B:72:D0:29:91:36:1D:D8:E8:36:25:A0:5E:24:EA:D2:0C:AC
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/RTN7ctApkTYd2Og2JaBeJOrSDKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.59.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:06:3e:2e:bf:8b:b1:e0:b3:9c:56:bc:50:08:9e:e2:0b:ba:
a1:1c:ef:89:20:cf:3b:ac:73:ea:fd:0c:eb:bd:61:2a:b4:4c:
d3:de:64:f7:6b:90:ce:8f:97:bb:c1:76:51:69:4a:59:47:64:
36:cb:b5:e3:32:65:21:15:78:c0:93:97:45:a7:8e:81:fb:78:
80:c6:2a:55:79:39:6d:87:94:50:b7:75:ed:d5:ce:0b:23:26:
14:9e:58:03:73:88:86:e6:dd:41:78:03:9e:50:66:fc:f2:92:
dc:ef:02:6b:ab:c4:1f:46:76:98:c6:c6:25:e7:90:23:f3:47:
f8:19:bd:41:ce:26:6e:21:8b:3b:e7:7c:d6:ee:7d:95:61:28:
45:fd:58:07:ff:ec:01:36:d6:78:40:4b:89:29:76:e9:45:0e:
bb:de:ab:f3:1c:e7:52:38:a0:6e:1a:3d:88:85:ec:79:2e:39:
f2:5c:78:1f:19:b4:72:5e:81:1a:ed:b9:c4:c9:48:df:ef:74:
67:bb:3d:ca:25:5c:94:a0:e8:e4:bc:33:9c:c1:de:c4:ac:e0:
26:48:6b:d2:b5:3f:47:0d:d6:a1:14:f5:3c:4b:e7:9c:93:25:
ec:4b:24:7d:2c:bc:08:ed:f6:78:1c:34:07:fa:7b:7a:c9:20:
32:68:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:21 2025 by rpki-client