Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/912a5a-2b92-48ac-ac48-338f155d158a/1/kqSTw_yIXhgnLBEn_4EvsxoEpgQ.roa
File: kqSTw_yIXhgnLBEn_4EvsxoEpgQ.roa (raw, json)
Hash identifier: WxdCJVWO6YFykoiIme+tY35ROxG+T1DH0QS4nGAgr6w=
Subject key identifier: 92:A4:93:C3:FC:88:5E:18:27:2C:11:27:FF:81:2F:B3:1A:04:A6:04
Certificate issuer: /CN=7b8049757feeabebca077d66d511e6073a178603
Certificate serial: 023DCD
Authority key identifier: 7B:80:49:75:7F:EE:AB:EB:CA:07:7D:66:D5:11:E6:07:3A:17:86:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4BJdX_uq-vKB31m1RHmBzoXhgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/912a5a-2b92-48ac-ac48-338f155d158a/1/kqSTw_yIXhgnLBEn_4EvsxoEpgQ.roa
Signing time: Wed 18 May 2022 05:03:05 +0000
ROA not before: Wed 18 May 2022 05:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62375
IP address blocks: 212.18.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146893 (0x23dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8049757feeabebca077d66d511e6073a178603
Validity
Not Before: May 18 05:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92a493c3fc885e18272c1127ff812fb31a04a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:dd:a8:c5:b8:4e:0d:76:ab:93:af:6d:b2:
db:b1:0e:b4:32:cd:a2:20:f1:03:3e:b1:53:d2:11:
68:a2:8d:a7:08:41:90:57:09:59:8a:ad:39:d4:19:
1f:3c:f0:7a:1e:3f:b6:f7:97:37:40:38:ae:f4:38:
9d:30:dd:0a:9e:f3:a8:4b:85:e5:09:97:43:9d:ad:
b4:36:13:dd:27:88:11:00:7e:63:92:40:d3:2f:04:
82:79:36:93:9b:d2:ce:4f:5f:6c:26:75:29:c0:89:
0d:4c:14:1a:6d:d5:8d:28:71:99:8d:74:9a:08:c1:
8e:57:f8:47:95:1d:e3:73:71:0b:68:2e:9f:17:43:
df:5a:5a:72:9e:0c:bd:4b:61:8a:7e:97:d2:7b:bd:
76:f7:cc:35:e3:98:93:a2:cc:86:da:3a:dd:31:77:
a3:84:2e:3c:0a:6a:ca:3d:68:37:be:f7:0c:9b:29:
7d:c3:c2:4e:de:5c:08:fb:9c:a9:12:7e:cc:9b:44:
c3:56:eb:06:be:27:23:cb:9d:cb:b7:3a:b2:2d:68:
86:c9:8b:3a:03:b2:c4:6b:7c:d5:b8:a6:f8:c7:77:
a2:b1:5d:01:3a:ad:36:a8:6c:34:ac:97:bf:65:72:
9b:a4:16:f7:17:28:d9:25:f5:0c:bf:54:a0:8a:15:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A4:93:C3:FC:88:5E:18:27:2C:11:27:FF:81:2F:B3:1A:04:A6:04
X509v3 Authority Key Identifier:
keyid:7B:80:49:75:7F:EE:AB:EB:CA:07:7D:66:D5:11:E6:07:3A:17:86:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4BJdX_uq-vKB31m1RHmBzoXhgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/912a5a-2b92-48ac-ac48-338f155d158a/1/kqSTw_yIXhgnLBEn_4EvsxoEpgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/912a5a-2b92-48ac-ac48-338f155d158a/1/e4BJdX_uq-vKB31m1RHmBzoXhgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6c:bf:e2:80:c2:db:1e:49:b0:56:0d:92:ca:ce:bc:f2:7d:
69:c4:3f:75:93:cf:d2:ef:a1:37:b1:e6:46:71:e9:6d:b4:a8:
9e:87:79:1f:43:71:ef:a2:cf:d3:a0:36:2d:c8:dc:d9:a6:98:
18:97:86:89:28:6b:ab:77:8f:4a:cf:41:06:5b:aa:ff:6b:7e:
91:94:8e:10:c3:fa:5b:ac:af:ed:87:42:d9:80:34:ed:b1:a2:
88:e7:c5:fb:06:f8:b0:7e:1d:be:5f:5b:b8:68:09:95:84:c9:
4e:97:2c:36:e7:96:68:ca:8e:b3:11:1e:fc:e2:a2:1b:3a:49:
68:ad:a4:15:8d:eb:74:fa:a6:f8:c5:45:22:6b:42:b0:69:fe:
0e:33:0c:74:8b:2e:a9:a2:42:82:ec:1c:4c:9f:79:35:2a:eb:
55:e9:21:7c:2c:61:58:99:ea:4d:a5:a8:e6:7a:e6:e6:21:9a:
20:1a:7d:71:95:43:5c:1d:5d:d3:b1:e4:3b:3c:73:22:57:df:
ee:75:e6:18:2e:8a:95:e4:6f:a1:d0:79:19:bb:95:c9:80:a2:
fc:da:9f:5e:13:0d:5f:c1:5d:cc:33:b1:a0:94:e6:94:18:b0:
ae:a7:af:ce:97:8a:b7:d9:a6:a1:3d:fd:47:21:4b:b8:4d:1c:
3d:df:b4:19
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAj3NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdi
ODA0OTc1N2ZlZWFiZWJjYTA3N2Q2NmQ1MTFlNjA3M2ExNzg2MDMwHhcNMjIwNTE4
MDUwMzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5MmE0OTNjM2ZjODg1
ZTE4MjcyYzExMjdmZjgxMmZiMzFhMDRhNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsDjdqMW4Tg12q5OvbbLbsQ60Ms2iIPEDPrFT0hFooo2nCEGQ
VwlZiq051BkfPPB6Hj+295c3QDiu9DidMN0KnvOoS4XlCZdDna20NhPdJ4gRAH5j
kkDTLwSCeTaTm9LOT19sJnUpwIkNTBQabdWNKHGZjXSaCMGOV/hHlR3jc3ELaC6f
F0PfWlpyngy9S2GKfpfSe71298w145iTosyG2jrdMXejhC48CmrKPWg3vvcMmyl9
w8JO3lwI+5ypEn7Mm0TDVusGvicjy53LtzqyLWiGyYs6A7LEa3zVuKb4x3eisV0B
Oq02qGw0rJe/ZXKbpBb3FyjZJfUMv1SgihWNTwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJKkk8P8iF4YJywRJ/+BL7MaBKYEMB8GA1UdIwQYMBaAFHuASXV/7qvrygd9
ZtUR5gc6F4YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZTRCSmRYX3VxLXZLQjMxbTFSSG1Cem9YaGdNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82OS85MTJhNWEtMmI5Mi00OGFjLWFjNDgtMzM4ZjE1NWQxNThhLzEv
a3FTVHdfeUlYaGduTEJFbl80RXZzeG9FcGdRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85
MTJhNWEtMmI5Mi00OGFjLWFjNDgtMzM4ZjE1NWQxNThhLzEvZTRCSmRYX3VxLXZL
QjMxbTFSSG1Cem9YaGdNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BJsMA0GCSqGSIb3DQEBCwUAA4IB
AQCObL/igMLbHkmwVg2Sys688n1pxD91k8/S76E3seZGcelttKieh3kfQ3Hvos/T
oDYtyNzZppgYl4aJKGurd49Kz0EGW6r/a36RlI4Qw/pbrK/th0LZgDTtsaKI58X7
Bviwfh2+X1u4aAmVhMlOlyw255Zoyo6zER784qIbOkloraQVjet0+qb4xUUia0Kw
af4OMwx0iy6pokKC7BxMn3k1KutV6SF8LGFYmepNpajmeubmIZogGn1xlUNcHV3T
seQ7PHMiV9/udeYYLoqV5G+h0HkZu5XJgKL82p9eEw1fwV3MM7GglOaUGLCup6/O
l4q32aahPf1HIUu4TRw937QZ
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:12 2025 by rpki-client