Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ENp2NlgP3EZ_Ctg2IXFE1ltrNdM.roa
File: ENp2NlgP3EZ_Ctg2IXFE1ltrNdM.roa (raw, json)
Hash identifier: TUXqsr3fA3RHj6bojPSkgzXHGiUkJIhVH2PBITpU6w4=
Subject key identifier: 10:DA:76:36:58:0F:DC:46:7F:0A:D8:36:21:71:44:D6:5B:6B:35:D3
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01946FA2C93E4A699CA296ED91B4967C85F2
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ENp2NlgP3EZ_Ctg2IXFE1ltrNdM.roa
Signing time: Thu 16 Jan 2025 15:02:06 +0000
ROA not before: Thu 16 Jan 2025 15:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 212.16.86.0/24 maxlen: 24
212.80.18.0/23 maxlen: 23
212.80.18.0/24 maxlen: 24
212.80.19.0/24 maxlen: 24
212.80.20.0/22 maxlen: 22
212.80.20.0/24 maxlen: 24
212.80.21.0/24 maxlen: 24
212.80.22.0/24 maxlen: 24
212.80.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:a2:c9:3e:4a:69:9c:a2:96:ed:91:b4:96:7c:85:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 16 15:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10da7636580fdc467f0ad836217144d65b6b35d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:b4:10:97:3b:1c:f3:03:03:37:2c:5d:65:
88:29:fd:8a:3e:2d:af:5a:d9:73:08:58:2e:3a:e7:
8f:1e:65:1d:e4:e2:5d:0e:02:f2:7c:3c:d0:65:51:
ad:0c:e2:d2:cf:af:8a:85:34:ab:65:66:ab:38:de:
93:c9:b3:b6:77:29:65:b1:58:6c:29:7e:76:57:94:
fb:52:e9:2f:f7:42:92:00:60:2a:0d:66:0e:80:0b:
3e:83:37:36:c5:71:ea:a3:fd:50:b9:20:34:1a:e0:
33:c9:73:58:3e:7c:40:bb:6e:f1:ba:79:eb:fd:ad:
b4:1e:01:bc:59:ef:50:00:f0:f2:da:9b:54:f0:dc:
0b:43:9d:0b:f8:5f:2d:2a:45:7f:c0:46:6b:34:6a:
fd:43:86:1c:2a:dd:e3:78:93:a4:5d:be:8e:a5:b7:
a2:91:6f:4b:78:42:5a:d4:b6:88:ab:b8:a4:0c:ba:
24:31:a9:33:a9:35:50:33:d7:52:f6:d8:04:70:91:
14:25:d1:a2:6a:0b:b9:c0:95:3d:3d:2e:f6:6c:7c:
fd:5e:58:c9:58:4f:00:06:9a:66:04:ea:2e:68:04:
3f:33:55:5c:d9:df:e1:f8:c0:13:0b:4a:ce:e4:45:
2b:c6:35:b2:fa:5e:d5:fa:49:1f:03:5c:0e:3a:d9:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:76:36:58:0F:DC:46:7F:0A:D8:36:21:71:44:D6:5B:6B:35:D3
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ENp2NlgP3EZ_Ctg2IXFE1ltrNdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.86.0/24
212.80.18.0-212.80.23.255
Signature Algorithm: sha256WithRSAEncryption
2d:91:82:2d:4f:cf:3e:53:ca:20:8c:4f:62:82:cb:d5:d7:8c:
27:70:79:91:32:69:e5:5b:48:b8:26:63:43:38:9c:39:5d:a6:
1a:2d:70:74:05:c3:a8:3b:90:57:7a:b5:7a:65:64:d2:ea:26:
5e:c0:38:2a:9e:66:60:cb:63:4e:f4:b3:e9:ce:28:6c:83:2e:
d5:e8:44:3c:84:19:95:06:13:e6:f8:a3:55:c9:15:78:be:bc:
f4:ca:b6:c3:a0:d0:0b:a5:10:96:63:fb:fc:bc:dc:81:31:d0:
4c:86:cd:87:ff:85:5b:b9:af:2b:f2:00:2c:b5:55:c2:bc:8f:
f1:8f:c6:32:52:6f:cd:0d:a7:48:93:8b:39:c7:02:c2:a2:c5:
5c:06:7f:24:40:ae:69:ba:56:e8:eb:3b:e2:f6:ac:e9:e4:30:
ba:fc:0f:a5:db:66:68:9f:16:3d:d2:05:2c:f3:0f:89:bb:e2:
a8:0b:11:28:a0:3b:ba:be:8b:a5:98:1a:cf:0f:3d:a3:a7:7b:
39:12:1e:8e:ad:3b:47:e6:3c:09:19:f0:e7:c3:59:db:6a:4f:
6f:d4:c2:e9:b2:25:81:12:08:cd:46:cf:5a:4c:44:94:1c:fa:
19:f3:5c:3a:f8:70:13:c7:23:ad:88:3b:c4:ae:f4:49:cb:5e:
47:55:60:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:17 2025 by rpki-client