Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/DQrh5hk2b-lJxtNxYJ-D0B7ZtJc.roa
File: DQrh5hk2b-lJxtNxYJ-D0B7ZtJc.roa (raw, json)
Hash identifier: SLxs11eviAywq3/dLs6pwr3nO2des6w0402J1WmLZsY=
Subject key identifier: 0D:0A:E1:E6:19:36:6F:E9:49:C6:D3:71:60:9F:83:D0:1E:D9:B4:97
Certificate issuer: /CN=823c757e5ffbde563f27a95d6d97a498c312252e
Certificate serial: 1485A801
Authority key identifier: 82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/DQrh5hk2b-lJxtNxYJ-D0B7ZtJc.roa
Signing time: Sat 01 Jan 2022 03:01:48 +0000
ROA not before: Sat 01 Jan 2022 03:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12536
IP address blocks: 212.121.32.0/19 maxlen: 19
212.121.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344303617 (0x1485a801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823c757e5ffbde563f27a95d6d97a498c312252e
Validity
Not Before: Jan 1 03:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d0ae1e619366fe949c6d371609f83d01ed9b497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:6b:19:91:d0:99:69:8b:67:ad:03:29:59:
40:d2:19:b3:2b:eb:50:b7:97:9f:0f:01:2f:86:20:
c2:00:a4:a4:89:8a:91:8e:35:13:b3:c7:48:1f:91:
81:d6:05:9a:6f:74:87:41:33:eb:36:24:d8:8d:c3:
f9:f3:c3:9a:cd:f9:17:d7:79:75:5b:73:35:40:4b:
d2:32:a9:79:5e:09:28:80:e8:0f:52:f0:dc:61:c6:
be:ec:98:1d:73:f2:77:62:6b:33:a7:29:db:f7:ce:
ac:12:bd:88:6a:88:40:64:b9:ed:10:49:2c:fc:86:
f7:13:74:c3:4a:24:0d:15:6f:cb:c6:3b:05:e2:db:
a7:1f:9a:65:3a:d2:b7:9f:ae:20:8d:a5:9a:44:dc:
00:a7:7e:0a:21:2c:61:a6:83:4e:82:bb:50:a0:12:
42:58:be:3e:f2:52:31:6d:a3:e0:b3:29:43:27:c2:
a8:28:85:e9:b8:21:24:83:c5:f9:35:15:a9:e1:83:
64:31:de:69:05:cc:f6:4e:50:8b:9d:24:84:00:5e:
b4:e6:aa:66:33:05:f6:d6:ae:04:65:44:1d:ac:b0:
de:54:8b:6c:cc:d4:e1:05:92:1a:30:d2:3a:f7:cb:
8e:64:05:8b:57:bc:e4:98:8b:b7:93:e9:55:07:18:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:E1:E6:19:36:6F:E9:49:C6:D3:71:60:9F:83:D0:1E:D9:B4:97
X509v3 Authority Key Identifier:
keyid:82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/DQrh5hk2b-lJxtNxYJ-D0B7ZtJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.121.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:c0:11:06:5a:33:ff:3d:93:74:50:6f:fe:57:dd:23:a7:b3:
ed:82:5c:e6:89:b1:87:3d:fa:e0:ba:e9:15:60:58:99:86:1c:
77:ce:ae:81:90:41:ab:e5:44:26:bf:0d:9b:4e:0b:f0:8c:be:
1d:25:ca:fe:f3:9b:09:02:ce:3a:dd:a6:6a:2f:b4:4f:fc:26:
27:f7:90:f4:fe:54:56:43:0f:77:57:8c:a1:05:2e:f2:b3:67:
b5:d8:e6:1b:4a:9e:4a:08:5c:e3:28:2c:7c:de:e4:b5:f6:80:
b6:1c:38:d6:5b:05:8a:75:9c:b0:ae:5c:f0:5b:0a:9a:88:06:
13:ec:5a:07:e9:01:50:cb:dc:12:44:cc:14:09:6f:5b:23:97:
46:e4:30:d6:ad:dd:ac:a9:89:18:82:8f:e9:80:5f:a6:7e:13:
72:65:c7:be:0e:0f:51:d8:d8:18:8d:cb:74:6a:00:55:f8:63:
b0:a5:14:6c:39:ee:65:6b:20:bc:a0:1b:45:5a:42:ad:29:11:
48:a7:23:9d:6f:ef:20:53:b9:dc:24:ab:61:75:78:12:ab:ff:
64:ef:f2:a6:40:16:11:61:37:4d:f8:d0:6a:70:3e:68:89:d2:
62:ad:d0:75:84:c8:bf:78:c4:3c:89:41:39:93:6b:e3:7d:52:
5d:12:12:0c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFIWoATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MjNjNzU3ZTVmZmJkZTU2M2YyN2E5NWQ2ZDk3YTQ5OGMzMTIyNTJlMB4XDTIyMDEw
MTAzMDE0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQwYWUxZTYxOTM2
NmZlOTQ5YzZkMzcxNjA5ZjgzZDAxZWQ5YjQ5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzuaxmR0Jlpi2etAylZQNIZsyvrULeXnw8BL4YgwgCkpImK
kY41E7PHSB+RgdYFmm90h0Ez6zYk2I3D+fPDms35F9d5dVtzNUBL0jKpeV4JKIDo
D1Lw3GHGvuyYHXPyd2JrM6cp2/fOrBK9iGqIQGS57RBJLPyG9xN0w0okDRVvy8Y7
BeLbpx+aZTrSt5+uII2lmkTcAKd+CiEsYaaDToK7UKASQli+PvJSMW2j4LMpQyfC
qCiF6bghJIPF+TUVqeGDZDHeaQXM9k5Qi50khABetOaqZjMF9tauBGVEHayw3lSL
bMzU4QWSGjDSOvfLjmQFi1e85JiLt5PpVQcYpdUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQNCuHmGTZv6UnG03Fgn4PQHtm0lzAfBgNVHSMEGDAWgBSCPHV+X/veVj8n
qV1tl6SYwxIlLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dqeDFmbF83M2xZX0o2bGRiWmVrbU1NU0pTNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvODlmZWExLTBlMzEtNDBhOC1iYzg0LWZkMDQwNzY3ZTE5OS8x
L0RRcmg1aGsyYi1sSnh0TnhZSi1EMEI3WnRKYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
ODlmZWExLTBlMzEtNDBhOC1iYzg0LWZkMDQwNzY3ZTE5OS8xL2dqeDFmbF83M2xZ
X0o2bGRiWmVrbU1NU0pTNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdR5IDANBgkqhkiG9w0BAQsFAAOC
AQEAW8ARBloz/z2TdFBv/lfdI6ez7YJc5omxhz364LrpFWBYmYYcd86ugZBBq+VE
Jr8Nm04L8Iy+HSXK/vObCQLOOt2mai+0T/wmJ/eQ9P5UVkMPd1eMoQUu8rNntdjm
G0qeSghc4ygsfN7ktfaAthw41lsFinWcsK5c8FsKmogGE+xaB+kBUMvcEkTMFAlv
WyOXRuQw1q3drKmJGIKP6YBfpn4TcmXHvg4PUdjYGI3LdGoAVfhjsKUUbDnuZWsg
vKAbRVpCrSkRSKcjnW/vIFO53CSrYXV4Eqv/ZO/ypkAWEWE3TfjQanA+aInSYq3Q
dYTIv3jEPIlBOZNr431SXRISDA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:19 2025 by rpki-client