Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/G0UVoOQ8yVB9V1s57eJhr5aDEH4.roa
File: G0UVoOQ8yVB9V1s57eJhr5aDEH4.roa (raw, json)
Hash identifier: qzVMfko1qrcYhU4koqEeXTwaQuZOFCHnfY01TTxgRAU=
Subject key identifier: 1B:45:15:A0:E4:3C:C9:50:7D:57:5B:39:ED:E2:61:AF:96:83:10:7E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01953789F4F5C37DBBC1687D95E46E523C08
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/G0UVoOQ8yVB9V1s57eJhr5aDEH4.roa
Signing time: Mon 24 Feb 2025 10:39:02 +0000
ROA not before: Mon 24 Feb 2025 10:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 212.32.68.0/24 maxlen: 24
212.32.69.0/24 maxlen: 24
212.32.72.0/24 maxlen: 24
213.254.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:89:f4:f5:c3:7d:bb:c1:68:7d:95:e4:6e:52:3c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 24 10:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b4515a0e43cc9507d575b39ede261af9683107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:ef:3f:da:08:c4:f6:78:61:fe:fd:eb:87:
39:bc:34:b9:82:f1:4e:05:48:d7:ce:58:c3:bd:d7:
d7:2e:60:08:b8:c8:0e:6a:99:81:81:ff:b4:ef:14:
c3:0d:28:52:7a:61:e7:b0:b3:eb:cc:54:6d:d6:59:
cf:fe:12:24:2d:85:d7:f3:86:81:23:b9:6d:1b:0a:
74:86:97:d0:ce:84:b0:b1:71:5d:02:7f:90:e1:f1:
62:a1:d5:9f:c1:61:5b:df:b9:01:b5:f4:31:c1:4d:
a8:94:f1:20:a4:41:61:d7:87:b5:56:81:15:f2:3d:
97:fe:9e:67:ce:39:92:18:71:92:69:a4:ec:fe:0c:
84:22:ed:0a:70:05:d1:fc:3e:97:01:46:56:f4:cd:
46:cc:cd:79:f5:b7:ee:ab:55:b4:c4:6c:2f:9f:61:
bd:1a:9e:43:d9:2c:63:bd:c3:42:db:99:83:fc:4e:
6e:ec:dd:86:11:73:66:3c:1e:1a:6f:d7:4c:1d:db:
47:a9:c3:e2:ae:1a:0d:10:1a:08:5f:42:85:4a:67:
86:d0:09:db:4f:59:79:80:96:9f:c7:52:ad:dd:9f:
ae:64:f9:50:8c:f7:ac:c4:7b:38:c0:82:05:b7:5e:
9f:fb:02:22:19:7b:e4:7b:74:41:d5:5f:30:bf:1f:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:15:A0:E4:3C:C9:50:7D:57:5B:39:ED:E2:61:AF:96:83:10:7E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/G0UVoOQ8yVB9V1s57eJhr5aDEH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.68.0/23
212.32.72.0/24
213.254.161.0/24
Signature Algorithm: sha256WithRSAEncryption
88:52:c8:77:e6:77:87:63:0e:4d:2b:5f:f5:1e:e3:41:90:3c:
92:c8:ed:fd:4e:d3:78:b2:76:b1:37:ed:d2:bd:1a:01:cd:9f:
0f:21:6c:c9:8e:d0:22:6d:69:0a:93:fc:46:53:e2:4e:a6:74:
c6:55:0b:fe:64:13:e3:58:66:13:80:28:93:ba:8a:24:da:b2:
0a:74:b5:9b:46:47:e5:56:67:9c:ad:83:97:71:82:44:fa:1a:
06:cc:90:d5:f5:52:ee:18:55:af:ce:9a:90:6e:db:ba:63:cd:
c2:ca:1d:26:22:85:dd:cb:89:eb:46:a9:28:c5:bd:8a:64:d1:
a2:cc:0d:d6:e3:6d:83:94:7f:b6:6f:1c:da:11:f9:78:bf:97:
cc:69:50:3c:25:a2:ab:00:f5:4f:d5:96:d8:28:bd:09:bc:b3:
aa:d8:c1:1d:c8:b7:6a:57:68:fa:f0:c6:70:9f:68:3f:26:45:
81:71:ff:cf:3d:56:f6:8a:dc:f9:89:44:37:e6:6e:44:54:78:
9a:7d:90:93:58:be:53:3c:ea:80:9d:0a:c7:dd:e1:1b:16:9f:
6f:27:65:e6:4a:be:2a:5a:96:bc:bd:de:7e:ab:e5:f9:56:a7:
05:41:b7:49:e3:a1:ee:bd:ad:76:a9:a6:35:e9:32:17:53:20:
20:11:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:08 2025 by rpki-client