Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/pVMgUdSHj0nlaCG6yBmxCGoOV48.roa
File: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (raw, json)
Hash identifier: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=
Subject key identifier: A5:53:20:51:D4:87:8F:49:E5:68:21:BA:C8:19:B1:08:6A:0E:57:8F
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0194252238BF6080F03B402BE6C3E6C5F5F1
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/pVMgUdSHj0nlaCG6yBmxCGoOV48.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209565
IP address blocks: 46.21.251.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/23 maxlen: 23
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1b::/48 maxlen: 48
2a04:2dc0:1d::/48 maxlen: 48
2a04:2dc0:21::/48 maxlen: 48
2a04:2dc0:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:38:bf:60:80:f0:3b:40:2b:e6:c3:e6:c5:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5532051d4878f49e56821bac819b1086a0e578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:5b:c1:92:50:16:25:99:b1:3e:e2:d0:8f:
f1:0a:10:34:12:69:b3:6e:83:cb:25:86:9b:40:ef:
e6:5c:cb:e2:cf:2b:e6:d9:01:66:29:d2:1d:16:30:
d5:63:40:de:d6:18:e7:1e:9b:79:72:c8:2c:f5:48:
30:9a:ff:4f:64:27:ee:a0:07:ec:29:30:a4:97:f6:
60:8d:d1:b1:25:45:91:d3:26:b8:1a:9b:18:b5:fc:
44:13:2b:cf:df:9f:20:09:4a:d3:75:23:c6:09:db:
89:6b:44:38:b2:fe:31:1c:9d:cc:39:93:36:63:81:
06:1d:90:35:0a:0d:89:b7:4b:b0:c2:83:c9:28:ec:
f9:c5:2a:58:6a:cc:a2:a1:ce:1d:d5:fc:9e:a0:49:
b3:05:81:17:2e:62:31:f2:97:cc:86:09:e0:a3:47:
18:17:ec:e8:56:18:58:27:d5:a6:64:da:63:f7:be:
c3:3e:88:a8:e7:ec:40:c3:d6:57:55:02:e1:5b:29:
f1:96:4f:3f:1a:66:8a:71:02:bd:8b:20:4b:9e:c2:
8c:72:94:a2:d5:d1:b5:46:60:3d:4d:a6:35:ec:53:
69:d8:c7:76:35:5f:b6:ab:ec:a2:a3:32:1a:22:80:
23:e1:74:17:b3:58:92:ff:d8:70:37:b2:5c:76:35:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:20:51:D4:87:8F:49:E5:68:21:BA:C8:19:B1:08:6A:0E:57:8F
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/pVMgUdSHj0nlaCG6yBmxCGoOV48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.113.0-212.126.114.255
212.126.116.0/24
212.126.120.0/22
212.126.126.0/24
IPv6:
2a04:2dc0:8::/48
2a04:2dc0:a::/48
2a04:2dc0:e::/48
2a04:2dc0:18::/47
2a04:2dc0:1b::/48
2a04:2dc0:1d::/48
2a04:2dc0:21::-2a04:2dc0:22:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:65:cd:18:f4:1a:e3:7a:d0:7d:23:79:e4:2e:99:e3:4b:ec:
f5:0d:50:f0:16:9b:09:9e:9c:66:8c:6a:a3:5e:75:df:b7:0e:
bd:64:a1:71:cd:4d:56:bc:f5:e4:4e:f0:db:9d:34:bf:c2:f2:
87:92:bc:63:5f:c9:c5:1f:a4:1a:fd:fb:26:33:dc:19:fd:e3:
8d:de:80:ba:d1:10:e6:85:05:29:89:33:c7:7f:9a:50:0a:c3:
1c:55:7e:cd:15:6c:f4:67:4d:77:b1:29:c2:09:c0:a4:63:c9:
e1:ff:d5:73:13:c6:14:b5:4f:0b:18:b9:8f:85:a1:61:d4:f9:
ec:12:06:5c:e3:41:35:80:d4:7c:e8:b1:c2:eb:0e:38:f7:e2:
c8:fc:b6:cb:1c:a2:92:c1:0c:b5:6b:ef:1b:ef:88:f5:9c:0a:
4b:f9:35:a4:91:d2:d4:ff:d2:43:f4:b8:4e:bb:e9:35:b1:32:
18:d8:c2:f5:ef:47:85:d1:d1:44:0d:8e:3d:ad:57:a0:75:6f:
88:98:c7:25:4a:ef:cc:49:c7:18:b7:b1:d4:05:08:a2:8d:3e:
10:1b:a6:5b:40:27:fb:95:08:7b:3e:2d:d1:b8:3b:c6:39:b4:
8e:11:08:19:a1:68:a1:be:b4:f4:35:6d:71:66:99:23:ad:e0:
5a:45:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:28 2025 by rpki-client