Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/rIDBSpqsMKVu062KC5Smebl0wi4.roa
File: rIDBSpqsMKVu062KC5Smebl0wi4.roa (raw, json)
Hash identifier: yUCEYX3wDQA1eOq1NU2Es0UUoedGP0f4pPJAOvGWY1Y=
Subject key identifier: AC:80:C1:4A:9A:AC:30:A5:6E:D3:AD:8A:0B:94:A6:79:B9:74:C2:2E
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01856C4A6D002C4A039D7A0D30CC05A2077B
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/rIDBSpqsMKVu062KC5Smebl0wi4.roa
Signing time: Sun 01 Jan 2023 07:44:54 +0000
ROA not before: Sun 01 Jan 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200865
IP address blocks: 212.126.96.0/22 maxlen: 22
212.126.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6d:00:2c:4a:03:9d:7a:0d:30:cc:05:a2:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac80c14a9aac30a56ed3ad8a0b94a679b974c22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:57:53:fe:13:bb:df:2c:48:1b:d1:51:f9:
fd:b0:e5:9c:84:59:0e:03:97:27:a7:7a:50:93:81:
cb:47:4d:0b:5d:b5:9d:b9:61:f3:e8:d8:a8:e0:ca:
43:5c:b1:6e:d8:00:d8:67:23:f1:d1:cc:a0:1f:5e:
cd:cd:c6:fb:26:2e:f3:02:32:eb:8e:43:c8:c6:2b:
d2:ea:74:14:84:54:5b:78:bf:d2:1b:99:eb:79:a9:
d3:a4:1d:eb:e2:85:71:2b:21:4c:7c:df:0a:54:7d:
0d:c4:86:27:0d:71:73:95:4a:78:30:62:99:6c:84:
a0:88:9f:f5:1e:be:1d:fd:95:a1:3d:17:1b:ea:f0:
5a:7c:be:d3:4d:dc:e1:16:bd:25:8f:51:58:83:da:
e9:36:f8:65:98:a1:66:3b:d0:79:ad:0e:c9:ed:66:
6f:ef:a1:a1:e8:0e:3f:07:67:d3:43:33:86:86:f1:
9f:96:bd:25:16:b8:d3:41:57:04:ba:e8:7f:12:2e:
f5:df:20:b6:62:39:d1:02:1f:7d:f4:fd:1e:66:c9:
ef:fd:d0:67:09:74:d0:ae:26:ac:8d:06:d4:3d:b1:
ff:db:61:3e:c4:03:1f:68:54:f4:da:ed:44:14:d7:
bb:64:69:c0:2b:6d:70:30:0c:04:5e:a4:4d:79:ce:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:80:C1:4A:9A:AC:30:A5:6E:D3:AD:8A:0B:94:A6:79:B9:74:C2:2E
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/rIDBSpqsMKVu062KC5Smebl0wi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0-212.126.100.255
Signature Algorithm: sha256WithRSAEncryption
7a:9e:8f:f8:75:74:9c:17:91:ee:f7:23:a3:f2:5b:be:5d:ee:
68:d1:77:3a:82:bb:1a:e5:09:17:5a:4c:bd:56:53:b6:57:13:
5f:b5:69:4e:1f:b8:d4:95:b0:b2:e8:a9:2b:af:87:7f:82:d2:
e9:66:95:d5:ee:3d:11:8b:6a:75:42:eb:52:65:dd:1d:7c:a5:
e7:b8:d2:4e:5f:37:42:28:d0:85:91:fb:11:e8:2b:72:6b:44:
1d:55:1c:d5:25:24:57:17:09:23:22:d8:16:db:12:97:13:26:
1f:ee:d2:b9:f9:61:a6:7d:e2:dd:82:f7:15:dd:89:34:b2:88:
ef:37:c6:a5:a8:27:26:91:72:39:c3:fb:ea:d3:b1:d1:09:3d:
14:db:cc:48:07:f1:29:f5:3f:51:34:e5:04:78:23:61:2b:9f:
2a:34:84:40:8c:ad:86:7e:35:67:ec:09:3b:7c:14:88:66:f8:
5d:cb:b7:fa:b2:fc:20:41:80:49:f1:a5:2c:9c:05:84:25:1a:
67:fb:ed:23:26:41:f1:b0:93:49:0d:43:6e:fb:e5:65:2b:89:
47:18:98:98:86:f9:2c:16:5f:80:4a:d8:dd:22:f1:05:d9:76:
2b:0c:17:f6:33:8d:56:21:c4:51:37:50:a9:e9:4a:1e:77:a3:
cc:f7:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:31 2025 by rpki-client