Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/9nwJkf06ywYV97ycnHX8xephiLw.roa
File: 9nwJkf06ywYV97ycnHX8xephiLw.roa (raw, json)
Hash identifier: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=
Subject key identifier: F6:7C:09:91:FD:3A:CB:06:15:F7:BC:9C:9C:75:FC:C5:EA:61:88:BC
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E892D2B370F5F4573A663211442F
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/9nwJkf06ywYV97ycnHX8xephiLw.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208102
IP address blocks: 212.22.66.0/24 maxlen: 24
212.22.85.0/24 maxlen: 24
212.22.92.0/24 maxlen: 24
212.22.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e8:92:d2:b3:70:f5:f4:57:3a:66:32:11:44:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f67c0991fd3acb0615f7bc9c9c75fcc5ea6188bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:ed:2c:80:39:46:0b:cc:48:cd:34:0c:e9:
eb:41:e1:c8:28:23:e7:cd:a2:e6:47:a1:5e:c5:59:
59:6b:4b:51:33:18:ca:fa:83:ae:4b:cd:20:aa:2c:
81:aa:9f:68:fd:e3:97:64:84:cc:fb:9d:23:81:b7:
b0:aa:50:8c:c9:a0:1b:bc:9e:ab:6e:ae:ee:5e:f1:
04:78:d0:46:8b:6e:c2:2e:46:b2:f2:6e:e6:d3:8e:
e5:9c:f5:b7:a0:fc:69:9d:df:06:e2:7a:bd:36:8b:
83:f4:da:4f:96:2e:04:7c:07:db:56:24:4e:25:49:
07:c0:73:17:9f:42:48:d4:95:72:e7:64:0b:26:fa:
dd:b6:9b:07:73:69:84:58:53:b8:3e:bb:e5:44:bf:
e1:8e:ca:d5:99:1b:2a:94:82:e7:3c:20:5f:92:5e:
57:f1:b7:02:56:62:09:6e:4c:0e:cc:ca:51:5b:ed:
f5:cf:45:30:c9:bb:63:c2:09:8b:1e:a1:2f:50:58:
cf:d2:a4:a1:ca:2d:70:54:be:37:f7:5f:cd:d7:35:
23:42:d0:94:df:ab:c3:f2:91:01:59:56:26:98:66:
08:f8:4b:cd:ae:c5:2b:6f:a5:26:5b:a9:28:d4:70:
ef:d6:83:3e:52:d0:70:54:4d:81:e0:2a:6d:2e:49:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7C:09:91:FD:3A:CB:06:15:F7:BC:9C:9C:75:FC:C5:EA:61:88:BC
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/9nwJkf06ywYV97ycnHX8xephiLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.66.0/24
212.22.85.0/24
212.22.92.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:e7:38:26:a3:d2:90:f9:a4:19:cc:16:c6:cd:0f:34:99:93:
c3:b5:26:9d:8b:ee:03:94:75:c6:11:0f:46:cc:ef:47:a6:a7:
08:00:94:e0:f8:82:52:d8:f1:a3:e1:8c:2d:da:9a:89:8a:60:
36:3e:9b:87:06:38:db:28:04:52:84:ec:12:48:bb:ef:a1:5a:
d7:e6:66:e8:b7:99:f0:68:7c:f7:c8:eb:04:2f:37:0a:84:59:
ad:ad:ac:38:c0:94:8a:25:b5:2c:ac:1b:4e:7f:f9:b8:e2:14:
25:f3:7a:7d:a0:0a:11:8f:20:d3:5f:8b:67:4e:84:73:e2:7d:
fa:29:fa:cd:2c:a2:1c:bc:3c:d1:db:51:ef:5a:af:2c:ab:c9:
d1:37:45:f5:78:5e:c7:2b:b9:d7:c5:36:a3:92:83:49:ea:e7:
97:50:30:28:4c:ce:90:c1:a1:d4:26:55:79:97:c7:9a:61:65:
a3:6d:2c:9b:48:22:3e:33:c1:b3:b6:fe:d3:22:e9:1c:cc:10:
31:13:74:de:23:87:2b:d9:0b:44:ec:f0:b0:82:20:32:82:d2:
94:d8:69:5c:2d:4c:32:84:6c:e8:f7:e0:67:0c:22:53:6a:64:
33:01:55:d9:25:22:ea:25:30:ca:43:35:87:27:7d:9c:f8:9f:
e2:54:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:52 2025 by rpki-client