Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V51fQsmdOucWQLFJANFvs_Ma2i0.roa
File: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (raw, json)
Hash identifier: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=
Subject key identifier: 57:9D:5F:42:C9:9D:3A:E7:16:40:B1:49:00:D1:6F:B3:F3:1A:DA:2D
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E73FECA36B4B16DDB43E920A061A
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V51fQsmdOucWQLFJANFvs_Ma2i0.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204102
IP address blocks: 212.22.67.0/24 maxlen: 24
212.22.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e7:3f:ec:a3:6b:4b:16:dd:b4:3e:92:0a:06:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=579d5f42c99d3ae71640b14900d16fb3f31ada2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:af:c3:14:dd:e2:f7:d5:13:42:7f:ee:fc:
87:c1:eb:15:ac:1e:8b:e0:f0:80:d0:03:df:9b:66:
46:82:d3:3d:85:cc:ad:1c:97:0f:38:1a:09:18:9c:
b6:ce:08:3f:1a:57:73:61:6a:43:a0:31:5c:0b:ca:
9a:36:52:4d:37:f4:91:eb:b1:b1:d1:b5:d0:39:d2:
57:fe:1f:d4:32:72:68:fa:61:57:ac:be:4c:98:bd:
9c:af:dd:ba:68:f4:e3:78:14:85:33:04:9e:8c:2f:
83:df:9c:dc:d0:3f:7b:78:13:ec:28:82:6a:1d:e2:
2e:09:69:da:d3:51:0b:93:2e:48:f5:d0:24:78:44:
96:28:16:8d:20:df:92:e2:02:e9:44:b8:2b:3d:34:
e5:3e:b9:5b:57:fb:33:d1:d2:b8:89:e7:1e:49:56:
ce:56:e0:1c:7e:24:97:2b:aa:ee:e2:f9:2e:be:e9:
02:7f:ce:4d:c9:4e:94:54:b9:f2:09:e4:1d:e7:6f:
c0:2c:be:cf:02:de:61:ff:bf:c0:7e:2b:4e:e6:6d:
2e:a8:ea:b4:a7:2e:4d:7d:81:9d:89:aa:28:0a:9e:
23:2e:05:d1:34:8b:7b:73:f3:35:0d:ca:83:6d:6c:
9c:ad:04:ec:4c:a0:0e:4c:9d:67:26:f7:fa:90:bc:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:5F:42:C9:9D:3A:E7:16:40:B1:49:00:D1:6F:B3:F3:1A:DA:2D
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V51fQsmdOucWQLFJANFvs_Ma2i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.67.0/24
212.22.84.0/24
Signature Algorithm: sha256WithRSAEncryption
73:16:32:75:e6:7d:1d:53:96:a1:7f:05:c2:25:92:3c:c0:7d:
94:5c:68:a2:08:bd:aa:6d:88:dd:29:92:dc:ec:9d:1d:ea:e3:
ff:a8:dc:b6:f0:28:94:00:c5:42:04:04:45:5a:26:48:fb:82:
cc:a9:82:1e:98:5e:d9:58:a3:90:9e:6b:bb:8d:36:4a:53:4e:
62:de:31:04:ad:a5:d0:12:1f:8f:3c:39:82:d7:c2:1c:57:d3:
a7:c6:fd:7f:ed:e5:19:6a:eb:fb:eb:26:03:84:92:a8:7a:55:
d6:c5:f4:61:13:ad:2f:ad:af:05:ea:a6:5e:48:cd:a8:5e:4d:
d5:a2:84:e0:47:31:92:52:94:c7:1c:9f:38:f2:1a:1d:c0:a0:
6e:8a:6c:60:3d:5c:f9:96:e3:10:f9:23:db:76:1c:f8:a3:70:
43:bc:bf:de:a6:d8:27:83:aa:19:f5:7b:18:2d:a2:95:d1:ac:
70:14:e3:61:57:de:0d:f3:e3:04:57:9c:73:16:05:83:27:0a:
c3:6c:f9:61:87:9c:46:0e:a9:9f:41:c1:e8:bd:e0:e2:c2:d8:
70:11:20:a2:25:a9:df:70:8d:0b:d0:c9:59:92:ef:11:45:a0:
f9:b6:8a:9b:f8:6e:fa:aa:51:f8:b7:ad:41:43:cd:91:ce:1e:
25:52:32:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:36 2025 by rpki-client