Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/il77O4awF2RZUv0rPBzQUPgpuIA.roa
File: il77O4awF2RZUv0rPBzQUPgpuIA.roa (raw, json)
Hash identifier: r172edrZVRoIwk/M2KfkUEFK126xFbi6i2JvZobfwvk=
Subject key identifier: 8A:5E:FB:3B:86:B0:17:64:59:52:FD:2B:3C:1C:D0:50:F8:29:B8:80
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018689BAA7FAF1925B4B1769E9667FFE629B
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/il77O4awF2RZUv0rPBzQUPgpuIA.roa
Signing time: Sat 25 Feb 2023 17:59:16 +0000
ROA not before: Sat 25 Feb 2023 17:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202538
IP address blocks: 212.79.122.0/24 maxlen: 24
212.87.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ba:a7:fa:f1:92:5b:4b:17:69:e9:66:7f:fe:62:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Feb 25 17:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a5efb3b86b017645952fd2b3c1cd050f829b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:49:a5:59:50:5b:88:b1:44:79:df:79:71:
61:5e:5c:e2:c5:a2:0b:44:48:54:0a:48:44:00:b1:
10:15:d0:1b:1c:44:a6:e7:2a:d8:fb:35:e3:ac:98:
ff:35:27:93:f5:59:53:9d:e0:28:a1:bf:fe:6b:1f:
4c:2f:3e:a4:cb:d6:8c:89:b5:56:b1:63:ed:5e:25:
91:11:17:bb:c1:c1:12:9d:cf:77:3a:48:15:90:94:
57:11:52:29:75:81:b4:0c:2a:2b:d3:09:69:b2:96:
39:a6:13:b9:52:6f:f1:cf:b8:06:e9:dc:e4:15:87:
7e:2d:92:14:b3:0b:fc:f6:55:87:7a:df:72:86:85:
78:87:60:47:e2:73:13:5e:db:23:db:2a:bd:e0:4f:
d9:97:d8:3f:6e:73:6b:c4:b0:68:c6:ab:c9:22:c1:
de:a1:60:c3:49:03:fa:b6:17:f6:56:95:40:4c:62:
ff:57:75:31:7d:97:66:d2:18:8f:9d:cf:53:88:29:
c3:b9:3a:ec:49:61:e5:43:50:76:50:0f:6d:c5:2b:
d6:5c:71:86:cd:8a:fc:09:22:38:f6:d8:49:50:90:
7c:81:7f:72:86:ae:8d:b5:b3:77:86:dc:20:b8:7c:
21:5e:75:32:89:0d:46:21:32:04:71:e1:b6:62:b2:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:FB:3B:86:B0:17:64:59:52:FD:2B:3C:1C:D0:50:F8:29:B8:80
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/il77O4awF2RZUv0rPBzQUPgpuIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.79.122.0/24
212.87.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8d:c8:ee:61:be:51:ab:2c:3d:14:5a:0b:25:04:93:af:c6:
b7:09:96:94:c0:47:a0:e3:5c:fe:d4:b3:03:b9:70:d1:3d:b7:
67:e8:bd:1e:d9:99:1d:0f:7c:78:28:8b:39:dd:3f:0f:66:a2:
b5:2b:f8:6b:e9:e2:41:46:a6:46:f5:cd:dc:4a:36:f1:ec:b6:
d5:80:21:76:de:82:ff:98:ae:5b:32:cd:90:6c:8d:7a:87:01:
f0:01:96:59:45:57:68:1d:52:b2:26:04:90:ac:de:41:e2:eb:
48:b1:65:6d:c0:53:f3:1b:e4:dc:42:7c:7b:db:3e:75:43:80:
17:e0:d5:ca:42:79:db:82:85:0a:95:3e:e2:d3:c4:85:21:bf:
60:72:64:3c:fe:cc:e3:ff:88:bd:2d:1c:75:dc:87:a6:12:77:
fb:01:00:8c:b9:f4:3a:e2:0f:8e:da:43:7a:66:6d:79:e4:c4:
62:aa:2d:c7:9f:78:b6:6d:c1:d3:57:27:9f:f3:22:25:12:45:
3c:bf:9b:29:79:7d:c0:3a:74:98:33:ce:8f:3a:44:43:4f:0f:
8b:ab:aa:0e:c1:a0:7a:bd:8f:03:89:49:24:45:50:6a:03:da:
71:6e:e9:cc:a4:19:8b:be:f1:32:2c:9a:cb:55:73:d3:7b:4a:
6d:e6:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:31 2025 by rpki-client