Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa
File: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (raw, json)
Hash identifier: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=
Subject key identifier: AE:46:6B:86:65:D7:C8:4D:53:64:6D:92:E7:04:C4:10:82:FC:5D:21
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F83E5C95BFEC779107EE340E289DC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12687
IP address blocks: 212.111.192.0/19 maxlen: 24
212.111.192.0/20 maxlen: 24
212.111.192.0/21 maxlen: 24
212.111.198.0/24 maxlen: 24
212.111.199.0/24 maxlen: 24
212.111.201.0/24 maxlen: 24
212.111.202.0/23 maxlen: 24
212.111.205.0/24 maxlen: 24
212.111.206.0/24 maxlen: 24
212.111.208.0/22 maxlen: 22
212.111.212.0/23 maxlen: 23
212.111.213.0/24 maxlen: 24
2a01:5c40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:83:e5:c9:5b:fe:c7:79:10:7e:e3:40:e2:89:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae466b8665d7c84d53646d92e704c41082fc5d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:c6:fc:e8:5a:9e:01:78:6a:d0:e7:f8:ef:
cf:21:f7:d2:7e:e3:af:74:13:42:41:a1:36:a6:e1:
95:bc:b3:38:49:18:61:c2:39:fb:75:a4:56:3f:3b:
23:10:77:0b:64:b0:36:5c:31:fa:52:92:86:0f:d1:
52:bb:04:76:cd:d3:18:61:90:ed:62:34:b3:90:cb:
86:a9:2a:40:36:7b:56:a6:74:11:ba:6e:99:82:0b:
32:49:4f:a6:6b:2e:6f:12:d6:3a:df:22:e7:db:0f:
88:a2:d7:34:43:e2:e8:0c:71:1d:4f:6f:92:f7:6c:
b6:71:8a:f6:9e:2f:ca:4e:b3:ef:60:af:ba:05:e0:
b4:e6:e5:c3:0c:97:57:0a:da:c6:8b:f8:ae:f5:d8:
43:06:8f:ba:25:13:4f:d5:3d:04:c7:89:41:2b:85:
7b:79:33:53:ed:5b:d5:7d:a9:0f:a0:f6:9b:91:29:
4b:63:fa:76:b0:2e:6a:ca:c6:1d:b7:7c:05:ea:3c:
4e:40:c1:07:f1:50:66:a1:18:dc:e1:a0:f2:dc:46:
a7:83:f4:b4:aa:9d:b5:ad:ea:30:ad:8d:ef:21:74:
78:66:8d:d0:9b:9f:cb:28:aa:4b:da:d9:5f:e5:ad:
01:31:00:00:d9:7e:ca:e0:3c:e0:9b:89:d7:26:f8:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:6B:86:65:D7:C8:4D:53:64:6D:92:E7:04:C4:10:82:FC:5D:21
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.192.0/19
IPv6:
2a01:5c40::/32
Signature Algorithm: sha256WithRSAEncryption
ba:20:80:53:a9:73:2b:e1:3d:ed:25:ab:ae:bc:12:87:bf:a8:
a6:4e:55:e2:55:6c:27:ea:44:c1:e6:e4:96:fa:49:4b:bf:da:
b5:ec:33:4b:a8:6e:97:0a:b9:f6:9b:82:97:e8:70:e9:ce:b9:
80:f5:f3:36:d5:9e:6a:12:b9:ae:a8:02:d9:89:e9:7c:b3:7c:
bd:0d:e1:80:3b:ff:0b:7d:f4:65:f0:4d:8d:89:12:f1:9d:ac:
ad:c8:92:8b:14:7f:f5:f0:10:84:62:bf:9e:c0:dc:fb:c2:5d:
33:14:ce:4e:39:00:15:6c:fe:a5:3e:02:87:68:56:79:d4:a4:
82:41:e0:d3:1c:27:89:5d:f6:e4:99:3e:12:ed:d0:50:19:b0:
3f:f3:11:5f:e1:d9:68:4d:c2:4a:14:53:ca:88:07:58:db:e8:
79:36:04:ce:42:6f:03:20:22:ab:be:b8:4f:dd:17:a4:93:6f:
12:6b:0d:42:b4:31:79:f8:c1:ec:d8:b9:1d:28:c7:34:35:d4:
c3:0d:d0:d3:da:8e:1f:b2:bd:96:aa:be:88:ff:3c:b7:ba:37:
3a:86:a5:a9:ec:14:09:ca:94:b7:f9:89:5c:93:9e:6d:b5:86:
84:1b:67:ce:62:4c:cc:4e:66:5a:5d:4c:d3:09:ed:a4:26:f8:
67:d2:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:40:51 2025 by rpki-client