Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/h_wKw8soWFxgRuHS6A95s-ovjqU.roa
File: h_wKw8soWFxgRuHS6A95s-ovjqU.roa (raw, json)
Hash identifier: c4ZYt7Tyz12qMO6YCVjf1T39qDV6z2Th7V8r47Jgtdg=
Subject key identifier: 87:FC:0A:C3:CB:28:58:5C:60:46:E1:D2:E8:0F:79:B3:EA:2F:8E:A5
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019425223731B1F0B96B673D4E290A92C814
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/h_wKw8soWFxgRuHS6A95s-ovjqU.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200865
IP address blocks: 212.126.96.0/22 maxlen: 22
212.126.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:31:b1:f0:b9:6b:67:3d:4e:29:0a:92:c8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87fc0ac3cb28585c6046e1d2e80f79b3ea2f8ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:f4:48:b8:4e:64:e1:e4:13:ab:76:83:33:
f7:12:4b:b8:a0:9c:88:6c:6e:d4:82:7b:9f:85:5e:
5c:dd:02:a9:a1:01:2c:93:98:0c:49:9a:50:c7:56:
b0:44:f4:da:ab:d6:37:c7:88:bb:03:79:1a:33:5b:
0c:cf:77:60:6e:e7:4b:2f:21:9a:d5:75:66:16:1d:
34:65:10:bb:a4:3e:1f:15:5e:a3:66:e3:08:db:9e:
ab:e8:ca:ac:6e:21:1c:da:6d:48:a1:f7:95:27:ea:
d1:f6:ed:45:b7:89:09:c4:6b:c4:14:c6:15:c6:ba:
1b:42:e9:6f:49:e1:94:1f:6f:57:8c:25:ca:20:42:
f0:9b:4c:84:73:c7:89:d9:cf:ad:d6:e0:e2:de:95:
ce:31:95:5d:78:17:83:96:de:78:4d:6c:a8:0e:eb:
27:40:36:a3:a9:5a:68:fa:3b:00:69:ff:3b:31:0d:
63:46:0e:de:d1:94:58:89:f7:e3:68:3f:ac:81:9b:
da:50:21:f6:fc:b5:e5:80:82:9b:59:8b:a5:ea:6a:
0d:61:70:95:42:6f:96:fa:68:ac:27:4d:56:9d:55:
65:d1:48:a1:5e:cf:ee:7f:fe:ee:97:65:1d:27:05:
35:74:8e:3f:e7:7f:7f:18:db:06:42:54:75:d3:bd:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:0A:C3:CB:28:58:5C:60:46:E1:D2:E8:0F:79:B3:EA:2F:8E:A5
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/h_wKw8soWFxgRuHS6A95s-ovjqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0-212.126.100.255
Signature Algorithm: sha256WithRSAEncryption
34:f1:36:e1:e9:08:12:ed:82:59:bc:9d:ec:94:e5:18:f8:45:
3e:e9:8b:36:ff:60:47:47:e9:2d:d9:fd:77:d1:07:8d:5f:4d:
99:3a:e2:f1:70:af:26:6c:20:9c:bc:21:c5:e3:b1:cb:f2:4e:
b8:92:c5:fd:87:dc:c7:99:f0:ad:8e:c9:4b:5d:4a:63:ae:c6:
1b:2b:b1:16:2e:5a:ac:71:66:4a:c6:f4:a6:b1:73:4a:b4:b1:
f8:54:01:2a:34:1d:3e:2e:70:06:b4:eb:2e:63:4f:56:2e:02:
c9:38:e5:59:31:39:ec:a7:84:fa:80:e5:85:d4:71:f8:16:38:
80:44:d8:2a:44:fd:43:08:d3:24:ab:3e:5d:38:07:74:a5:17:
bc:ad:0e:0f:50:41:3f:f1:1c:96:bd:dc:14:b0:b8:7c:f3:f0:
fe:37:49:e5:7a:a2:49:11:27:f1:ae:36:0d:6c:3c:f5:f1:eb:
bc:4e:98:39:b4:37:3c:2a:eb:76:87:f4:46:42:af:29:df:56:
e1:13:c6:c3:cc:59:58:54:3e:c8:c7:3b:e4:2d:69:ca:3b:a4:
1b:67:8d:d8:48:d8:2f:f6:ab:74:42:e9:2d:ea:28:b1:5f:d3:
ba:83:bd:e7:29:f2:52:60:1d:b9:8f:f5:6a:f2:ba:ba:23:d6:
0b:5b:d5:3b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZQlIjcxsfC5a2c9TikKksgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy
MzMyMmMwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2ZjMGFjM2NiMjg1ODVjNjA0NmUxZDJlODBmNzliM2VhMmY4ZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8r0SLhOZOHkE6t2gzP3Eku4oJyI
bG7UgnufhV5c3QKpoQEsk5gMSZpQx1awRPTaq9Y3x4i7A3kaM1sMz3dgbudLLyGa
1XVmFh00ZRC7pD4fFV6jZuMI256r6MqsbiEc2m1IofeVJ+rR9u1Ft4kJxGvEFMYV
xrobQulvSeGUH29XjCXKIELwm0yEc8eJ2c+t1uDi3pXOMZVdeBeDlt54TWyoDusn
QDajqVpo+jsAaf87MQ1jRg7e0ZRYiffjaD+sgZvaUCH2/LXlgIKbWYul6moNYXCV
Qm+W+misJ01WnVVl0UihXs/uf/7ul2UdJwU1dI4/539/GNsGQlR1072YxwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFIf8CsPLKFhcYEbh0ugPebPqL46lMB8GA1UdIwQY
MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0
LWE0OWU1YzY2MzNiZC8xL2hfd0t3OHNvV0Z4Z1J1SFM2QTk1cy1vdmpxVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi
ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEBdR+
YAMEANR+ZDANBgkqhkiG9w0BAQsFAAOCAQEANPE24ekIEu2CWbyd7JTlGPhFPumL
Nv9gR0fpLdn9d9EHjV9NmTri8XCvJmwgnLwhxeOxy/JOuJLF/Yfcx5nwrY7JS11K
Y67GGyuxFi5arHFmSsb0prFzSrSx+FQBKjQdPi5wBrTrLmNPVi4CyTjlWTE57KeE
+oDlhdRx+BY4gETYKkT9QwjTJKs+XTgHdKUXvK0OD1BBP/Eclr3cFLC4fPPw/jdJ
5XqiSREn8a42DWw89fHrvE6YObQ3PCrrdof0RkKvKd9W4RPGw8xZWFQ+yMc75C1p
yjukG2eN2EjYL/ardELpLeoosV/TuoO95ynyUmAduY/1avK6uiPWC1vVOw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:53:08 2025 by rpki-client