Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/11W7aqclKKJdHxsqnT9vcIzMG-Y.roa
File: 11W7aqclKKJdHxsqnT9vcIzMG-Y.roa (raw, json)
Hash identifier: /TpS/OjtTVO1pij34Emq/j3yxqMZWCPbMtaRLBpqDck=
Subject key identifier: D7:55:BB:6A:A7:25:28:A2:5D:1F:1B:2A:9D:3F:6F:70:8C:CC:1B:E6
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 018CD48E0E1561B6253753E9AF862032CCEF
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/11W7aqclKKJdHxsqnT9vcIzMG-Y.roa
Signing time: Thu 04 Jan 2024 12:58:48 +0000
ROA not before: Thu 04 Jan 2024 12:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15623
IP address blocks: 212.117.194.0/24 maxlen: 24
212.117.197.0/24 maxlen: 24
212.117.193.0/24 maxlen: 24
212.117.208.0/24 maxlen: 24
212.117.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:8e:0e:15:61:b6:25:37:53:e9:af:86:20:32:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jan 4 12:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d755bb6aa72528a25d1f1b2a9d3f6f708ccc1be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:af:c8:e6:09:80:a4:01:e1:91:9b:ce:12:
69:ad:a0:c3:c7:ff:e4:01:d6:22:5e:61:ca:e8:56:
76:3b:c7:d5:aa:e1:6e:12:b5:47:04:b3:5a:b9:a0:
cd:ba:47:f5:6c:21:b6:5b:eb:b1:7d:95:ca:3f:6a:
26:98:cc:87:db:0f:a8:15:b9:e3:ce:68:a4:cd:8a:
cf:a4:c0:cf:88:18:d3:3f:3f:7d:37:46:ec:f8:39:
1e:33:d1:06:07:fe:2a:bb:56:94:51:62:40:22:f5:
8b:bd:7a:9b:98:be:2d:c1:79:b0:6b:6b:3c:83:b1:
c6:58:35:0f:02:00:75:7b:29:3b:b6:1f:53:5f:35:
0c:82:d6:d7:ff:23:8d:c2:d7:fb:77:67:b2:9f:32:
5c:ed:be:ff:ca:54:a8:cc:08:64:25:28:4f:d6:d0:
16:43:77:b1:a5:ca:3b:64:9b:bf:ba:55:45:db:57:
7f:d9:84:dc:98:45:ea:1c:d0:9d:3b:8e:18:ae:a3:
52:5b:46:32:6a:32:67:2d:02:43:a2:50:74:fb:0a:
92:22:0b:69:a1:45:de:a6:16:95:f1:fa:bf:28:60:
5b:cc:d2:b8:6c:80:b9:b7:ab:80:75:81:70:56:fd:
fd:3c:08:3e:f5:c2:6c:02:89:d9:0a:da:c0:a9:5f:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:BB:6A:A7:25:28:A2:5D:1F:1B:2A:9D:3F:6F:70:8C:CC:1B:E6
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/11W7aqclKKJdHxsqnT9vcIzMG-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.117.193.0-212.117.194.255
212.117.197.0/24
212.117.208.0/24
212.117.211.0/24
Signature Algorithm: sha256WithRSAEncryption
40:18:bc:24:7c:76:9f:96:26:22:65:5a:44:64:6e:6d:ed:58:
5c:23:4b:2c:aa:b6:6e:97:e8:66:52:f7:db:50:27:cd:7f:dd:
c3:86:c0:30:64:86:6d:e0:ee:7d:bf:a4:87:ed:61:6a:42:4d:
ef:c1:32:c8:fb:07:d0:ce:59:f9:e1:1d:34:50:14:2a:49:d7:
d4:07:21:54:63:e6:0f:aa:4a:0c:87:fb:4d:45:93:e8:f1:7a:
b9:20:b5:df:16:58:1a:ea:55:5d:56:f4:25:a6:ee:10:61:5b:
b7:87:c6:ed:33:7d:84:a6:17:cf:64:a2:44:d4:b7:0e:4f:78:
0f:3c:40:2d:f2:72:6e:a6:a9:10:3b:d6:c0:16:9c:8f:56:b9:
06:08:d2:58:6a:cf:0f:2d:0b:be:b5:09:7e:81:39:0b:c6:6c:
05:9e:0c:5a:12:90:fe:7b:0f:97:80:2c:60:32:1a:f2:9f:8b:
86:da:81:5d:ff:c8:0a:8b:8c:a8:a3:ca:7c:b1:55:55:b2:f9:
de:0d:78:44:2c:ec:35:2e:49:94:42:a9:db:97:2d:3c:75:eb:
88:8d:98:02:58:e3:48:37:76:4e:27:83:bf:15:3f:37:a8:1a:
ac:5e:d8:6b:2e:0f:c8:ac:fe:36:b4:b6:7c:1d:38:3c:84:b5:
6a:d0:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:28 2025 by rpki-client