Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/eQf0fzT1TpCrCtQpX64ANEQyzhI.roa
File: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (raw, json)
Hash identifier: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=
Subject key identifier: 79:07:F4:7F:34:F5:4E:90:AB:0A:D4:29:5F:AE:00:34:44:32:CE:12
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0194228DA02BDCF5865362FF1CA741C33A05
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/eQf0fzT1TpCrCtQpX64ANEQyzhI.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15623
IP address blocks: 212.117.193.0/24 maxlen: 24
212.117.194.0/24 maxlen: 24
212.117.208.0/24 maxlen: 24
212.117.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a0:2b:dc:f5:86:53:62:ff:1c:a7:41:c3:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7907f47f34f54e90ab0ad4295fae00344432ce12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:e4:28:aa:2f:44:c3:3d:18:5b:be:af:b8:
24:6c:d5:8c:93:5e:d7:57:2f:3e:d2:11:3e:f4:bc:
f4:c1:86:86:10:0f:b9:59:3a:34:7a:84:2c:0e:95:
a9:65:8b:48:f5:69:d7:49:f9:da:d4:61:de:f7:93:
d9:30:f7:12:6e:41:3d:ab:73:1e:d9:ca:fb:fe:de:
8f:bd:f6:8f:33:f1:c5:85:09:1a:21:7d:e9:a7:54:
e5:7e:be:b3:41:03:1e:e6:8d:d5:34:0c:56:b3:b4:
97:f8:ab:75:67:97:16:45:44:cf:ed:98:3d:cd:64:
b0:09:54:d8:49:6a:05:7f:5a:33:1d:2e:e8:49:33:
4a:28:82:63:0a:bb:cc:10:0e:2f:6b:ab:77:b7:e0:
c0:46:18:7f:f9:f9:f9:0a:f3:77:77:f0:bc:fd:6a:
1e:8d:3b:65:f3:40:62:3f:74:c4:5d:4e:8b:3d:3c:
ac:bc:92:5e:b3:43:f0:69:6b:fb:1c:3d:92:61:4b:
04:fd:bb:f1:13:81:a1:4a:eb:4a:f1:a9:62:cc:8e:
d3:c4:3f:5d:6a:c0:50:e2:bc:ff:cb:26:3b:5e:09:
c8:61:5f:35:49:bc:3d:62:dd:9c:31:5d:ac:dd:ee:
13:67:4e:e6:9b:69:72:c3:f3:5a:0c:56:ac:f4:83:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:07:F4:7F:34:F5:4E:90:AB:0A:D4:29:5F:AE:00:34:44:32:CE:12
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/eQf0fzT1TpCrCtQpX64ANEQyzhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.117.193.0-212.117.194.255
212.117.208.0/24
212.117.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:65:45:99:91:99:37:57:8f:6a:bf:6d:73:a2:8e:6a:4c:2e:
76:e7:72:a5:17:8c:b2:86:6f:de:c0:b6:20:f1:a1:d1:e3:24:
30:59:21:9d:a6:e0:91:8b:18:24:94:ca:33:e3:48:65:ec:e4:
14:dd:ec:3c:5f:76:98:d2:65:9c:e5:bb:fc:e0:16:01:a0:5b:
b0:1f:dc:6d:a6:f9:91:f6:b4:34:8d:81:16:34:3c:62:80:14:
dd:b5:ac:49:a3:9f:c6:1f:fb:6a:c3:0b:c8:0f:92:7c:5f:df:
93:4d:e6:11:68:4e:44:b5:67:45:cd:ec:b2:93:8d:3f:04:9f:
7a:f7:15:16:3c:77:00:36:b9:b9:57:84:bb:fa:24:5e:cb:1d:
08:68:cc:22:4b:4d:e9:d7:32:46:75:a0:49:48:98:65:3f:7f:
d8:0c:36:6e:e4:e4:63:ae:7f:7b:e1:36:25:1a:c2:9a:4c:8a:
a1:09:54:ea:06:67:12:be:f8:8e:19:e9:aa:70:1b:78:9c:d7:
bb:bf:20:1c:f6:65:d4:3d:54:13:5b:a4:b2:73:84:36:7a:a4:
86:e4:7a:6e:cb:2c:e4:25:51:3d:d6:c2:f2:91:23:4e:b4:91:
79:62:70:2d:4b:5b:52:80:99:00:26:27:60:c7:03:bb:bd:d0:
00:2a:ac:56
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQijaAr3PWGU2L/HKdBwzoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0
ODg5ZTAwHhcNMjUwMTAxMTU0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTA3ZjQ3ZjM0ZjU0ZTkwYWIwYWQ0Mjk1ZmFlMDAzNDQ0MzJjZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssXkKKovRMM9GFu+r7gkbNWMk17X
Vy8+0hE+9Lz0wYaGEA+5WTo0eoQsDpWpZYtI9WnXSfna1GHe95PZMPcSbkE9q3Me
2cr7/t6PvfaPM/HFhQkaIX3pp1Tlfr6zQQMe5o3VNAxWs7SX+Kt1Z5cWRUTP7Zg9
zWSwCVTYSWoFf1ozHS7oSTNKKIJjCrvMEA4va6t3t+DARhh/+fn5CvN3d/C8/Woe
jTtl80BiP3TEXU6LPTysvJJes0PwaWv7HD2SYUsE/bvxE4GhSutK8alizI7TxD9d
asBQ4rz/yyY7XgnIYV81Sbw9Yt2cMV2s3e4TZ07mm2lyw/NaDFas9IMkfQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHkH9H809U6QqwrUKV+uADREMs4SMB8GA1UdIwQY
MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et
MWRhZWE0YmM5NGIzLzEvZVFmMGZ6VDFUcENyQ3RRcFg2NEFORVF5emhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz
LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADUdcED
BADUdcIDBADUddADBADUddMwDQYJKoZIhvcNAQELBQADggEBAH1lRZmRmTdXj2q/
bXOijmpMLnbncqUXjLKGb97AtiDxodHjJDBZIZ2m4JGLGCSUyjPjSGXs5BTd7Dxf
dpjSZZzlu/zgFgGgW7Af3G2m+ZH2tDSNgRY0PGKAFN21rEmjn8Yf+2rDC8gPknxf
35NN5hFoTkS1Z0XN7LKTjT8En3r3FRY8dwA2ublXhLv6JF7LHQhozCJLTenXMkZ1
oElImGU/f9gMNm7k5GOuf3vhNiUawppMiqEJVOoGZxK++I4Z6apwG3ic17u/IBz2
ZdQ9VBNbpLJzhDZ6pIbkem7LLOQlUT3WwvKRI060kXlicC1LW1KAmQAmJ2DHA7u9
0AAqrFY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:08 2025 by rpki-client