Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/84vkoPKxTF7pgwUvztDxRbjDrhQ.roa
File: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (raw, json)
Hash identifier: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=
Subject key identifier: F3:8B:E4:A0:F2:B1:4C:5E:E9:83:05:2F:CE:D0:F1:45:B8:C3:AE:14
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 019427B3F1DC1E91A16565F8290A8240793C
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/84vkoPKxTF7pgwUvztDxRbjDrhQ.roa
Signing time: Thu 02 Jan 2025 15:48:11 +0000
ROA not before: Thu 02 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51660
IP address blocks: 212.70.142.0/24 maxlen: 24
212.70.143.0/24 maxlen: 24
212.70.144.0/22 maxlen: 22
212.70.144.0/24 maxlen: 24
212.70.145.0/24 maxlen: 24
212.70.146.0/24 maxlen: 24
212.70.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:f1:dc:1e:91:a1:65:65:f8:29:0a:82:40:79:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Jan 2 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f38be4a0f2b14c5ee983052fced0f145b8c3ae14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:d6:6a:a1:62:1e:0f:85:2a:83:ef:5a:8d:
48:88:5f:78:59:8d:7c:7d:71:8d:8a:f1:c7:b7:bc:
43:67:9d:b0:c5:74:1e:80:c4:63:61:94:d6:ac:04:
f7:1d:0e:b0:64:39:34:2d:1e:8c:6a:73:67:05:c7:
ac:a6:a6:da:5f:7e:a9:9a:2e:73:69:3d:8a:87:b3:
06:e9:f8:59:30:39:a0:58:a7:0e:fd:e3:80:88:25:
a3:fa:13:6a:50:bf:ca:4d:89:b1:d2:74:74:76:ea:
f3:68:22:86:71:ca:bf:43:51:65:e7:f8:06:39:db:
7c:58:7e:66:fb:10:c7:c0:ac:75:1c:ce:30:c8:38:
e7:07:64:a6:55:97:48:61:98:fa:60:00:a6:c1:9d:
f0:2b:2f:0e:2f:fe:7e:37:a1:59:48:a8:65:b4:c8:
1c:41:c7:e6:e1:66:9b:a5:b3:9f:fa:88:07:3c:b4:
72:75:9d:63:59:4e:1b:1a:2d:d3:22:8d:78:86:d3:
54:d5:30:bf:98:1a:2d:66:33:76:de:b3:b5:c5:ea:
36:44:16:1d:03:73:bf:71:8c:25:30:43:9e:b9:69:
ef:75:c3:49:03:fa:88:b6:21:09:1c:0b:d2:e0:a2:
cb:7c:e3:8b:d4:56:52:ef:a7:af:0b:67:62:ad:33:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:E4:A0:F2:B1:4C:5E:E9:83:05:2F:CE:D0:F1:45:B8:C3:AE:14
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/84vkoPKxTF7pgwUvztDxRbjDrhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.142.0-212.70.147.255
Signature Algorithm: sha256WithRSAEncryption
62:1d:25:a5:fb:18:52:cd:8d:e5:b7:e4:1e:b1:34:fa:95:af:
cf:d2:ea:e5:c9:3c:ab:31:51:6a:84:4d:db:26:72:63:b2:39:
76:62:6f:09:ef:9d:ad:00:07:6a:69:f9:ac:fb:ff:6e:7c:07:
27:1b:d6:57:ee:f9:4b:51:5f:ba:f5:2d:32:e7:53:98:d7:bd:
0a:f1:c5:cb:a8:f0:2b:0c:48:9d:bb:45:0a:25:0b:9e:57:7c:
9d:ed:ef:58:90:09:32:37:c2:4c:31:4c:ec:cd:bc:37:a7:8c:
06:7d:08:8e:cc:c4:ec:f7:a8:96:12:f5:7f:d3:c5:93:43:4a:
4d:3a:e7:22:3c:44:ed:33:86:48:fd:a4:b5:50:a2:f0:d6:af:
86:0d:0e:f8:e4:1e:cc:a9:a1:9d:ca:56:50:ac:6d:b1:7d:36:
3a:87:d7:cf:3d:92:f4:84:c7:91:34:80:44:33:ea:ea:2b:db:
1b:57:17:e7:d6:52:2e:6f:48:d5:a2:20:8b:85:c1:4d:b5:b2:
49:49:8c:00:68:7c:bb:91:2b:ad:6f:a2:12:2a:f6:40:15:96:
d1:65:f9:27:f6:8f:a8:5a:09:4b:86:0e:9e:6f:3c:f7:bb:97:
93:ad:bb:30:54:13:21:c1:5e:1c:13:d1:1a:a7:68:0b:b6:d2:
37:2b:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:39:49 2025 by rpki-client