Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/tJZkynRy8uV8yQcd4yzCAEqpLIg.roa
File: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (raw, json)
Hash identifier: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=
Subject key identifier: B4:96:64:CA:74:72:F2:E5:7C:C9:07:1D:E3:2C:C2:00:4A:A9:2C:88
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019427B58F0919F1FF450590DBB632841F29
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/tJZkynRy8uV8yQcd4yzCAEqpLIg.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202538
IP address blocks: 212.79.122.0/24 maxlen: 24
212.87.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8f:09:19:f1:ff:45:05:90:db:b6:32:84:1f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b49664ca7472f2e57cc9071de32cc2004aa92c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:e8:2a:1a:87:9b:e9:42:76:dd:a6:5f:5e:
d6:2a:02:c3:37:8f:42:64:77:f6:c3:6f:76:cd:d4:
26:a6:c0:b6:9e:59:e5:b4:53:ce:43:61:70:86:be:
c4:db:ca:aa:ab:43:a3:35:52:04:8c:5f:27:74:49:
cf:a1:9d:6d:b8:54:f0:41:72:cd:48:8f:24:99:b5:
08:10:f4:1d:40:bf:ae:fe:83:8b:4a:ba:25:be:35:
61:0d:c4:42:ba:f2:63:7a:7c:b8:40:86:65:f3:3d:
ab:64:93:e2:03:17:18:01:0c:8e:92:b1:95:d7:65:
be:0d:62:1c:91:42:ea:10:70:09:89:5d:43:1e:0e:
63:43:a1:8a:45:24:6e:cd:ba:f9:37:61:e6:1c:81:
6f:26:4b:37:9a:c3:6b:a5:e4:3d:88:fd:49:c2:4b:
46:33:2a:67:73:8b:69:08:7a:d3:f6:df:05:54:0a:
4e:de:54:97:f6:54:9b:35:6b:7d:e2:81:cd:71:5a:
17:1c:06:a1:0a:18:5d:c4:95:92:3d:e7:e7:12:97:
51:6f:36:96:40:8b:9f:ec:0d:bc:40:e7:59:61:69:
48:6a:69:f0:68:48:de:76:66:73:9a:7d:c4:b5:31:
ca:d6:41:c5:d7:75:ad:82:b7:9e:65:68:aa:5a:8d:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:64:CA:74:72:F2:E5:7C:C9:07:1D:E3:2C:C2:00:4A:A9:2C:88
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/tJZkynRy8uV8yQcd4yzCAEqpLIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.79.122.0/24
212.87.169.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4b:27:09:02:b4:46:ca:fb:73:dd:66:99:ce:31:63:2c:7d:
60:2d:9c:7f:d6:6a:22:f6:20:4f:ad:5f:f3:45:95:c1:5c:1e:
5b:bb:05:c5:48:f3:a2:80:6f:66:55:4d:61:54:bb:83:98:e1:
df:a8:7e:60:d6:15:e7:18:10:b9:ad:18:aa:90:67:97:8d:c6:
5f:93:d9:4c:53:f6:cb:b4:8b:d2:67:c8:21:16:64:8f:6c:58:
0a:9c:b4:4b:8b:d4:21:61:c5:80:08:24:ec:4b:fe:29:20:ed:
fd:9e:28:39:6b:f5:43:14:7a:78:f9:ae:83:00:6d:b1:55:7c:
3b:d6:99:40:c5:53:3b:f6:1e:2c:f2:aa:4e:01:6e:e0:1a:94:
5b:7e:15:5a:07:1e:29:e5:c6:a2:48:dd:4d:16:ec:ee:d5:0f:
9b:7f:10:5d:ff:20:06:66:3d:e2:49:93:2f:73:7c:eb:4e:3a:
21:a5:b6:5f:df:ae:18:64:29:32:bb:a3:6c:77:fe:7a:44:c1:
5f:97:10:bf:29:de:cc:ec:d3:df:dd:a5:20:93:b7:25:ce:4e:
2f:47:24:05:d8:0d:64:d0:63:4d:4b:75:59:97:d0:8d:b2:cd:
f8:5a:b8:b9:e3:f1:66:ca:17:0d:4c:d6:f9:70:98:97:a3:17:
6b:01:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:04 2025 by rpki-client