Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/M5jtoM41Y8zxhgX6892Azn7CbgI.roa
File: M5jtoM41Y8zxhgX6892Azn7CbgI.roa (raw, json)
Hash identifier: SsoCa6KU5R2ocIrHDaK8+DXGCTEtvLA0sldxtO1jaaY=
Subject key identifier: 33:98:ED:A0:CE:35:63:CC:F1:86:05:FA:F3:DD:80:CE:7E:C2:6E:02
Certificate issuer: /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial: 019427B5EA1036618F3D0E7DB955877DEB5E
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/M5jtoM41Y8zxhgX6892Azn7CbgI.roa
Signing time: Thu 02 Jan 2025 15:50:20 +0000
ROA not before: Thu 02 Jan 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209931
IP address blocks: 212.162.128.0/24 maxlen: 24
212.162.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ea:10:36:61:8f:3d:0e:7d:b9:55:87:7d:eb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3398eda0ce3563ccf18605faf3dd80ce7ec26e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:2c:08:90:ba:e0:4e:3a:ed:28:38:f6:a7:
38:18:df:53:96:4b:5e:a7:a7:44:b3:38:be:e2:c7:
a6:27:c9:f4:40:f5:b0:9a:84:f6:09:a7:e9:30:33:
05:63:d5:b2:cf:4c:1e:be:b9:ad:ae:0f:39:e8:eb:
71:d1:63:c8:2e:cb:4c:97:85:73:06:c7:e5:1c:01:
b0:9e:eb:54:60:7b:f3:02:1f:84:2c:42:12:95:a7:
40:ef:06:0c:a8:11:65:51:2a:01:d1:d0:58:a6:9c:
9f:6d:ec:a5:c9:8c:fb:a7:a3:85:4c:5b:15:f9:cc:
c2:ae:2e:be:0e:5c:17:78:76:e1:6c:77:31:b2:cd:
7d:b1:49:6f:3e:33:00:c5:c8:c2:59:e9:f5:0f:25:
95:4c:66:de:a2:e3:67:32:e1:e7:70:7f:47:1f:b5:
30:9b:54:af:dc:1a:c0:9b:8c:40:f0:21:92:c4:a7:
c3:7a:16:46:e3:4c:4e:48:53:29:ab:92:25:f2:73:
a5:a1:a2:6a:88:2e:05:39:f0:8e:41:bd:45:12:97:
e7:d2:bd:a5:66:4a:c5:1a:25:a4:eb:15:1f:4c:9a:
3a:14:f6:8c:af:f8:3d:48:94:ce:e0:53:1b:1f:01:
3b:05:23:18:70:a4:b2:e0:ee:bc:f3:4e:56:13:4e:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:ED:A0:CE:35:63:CC:F1:86:05:FA:F3:DD:80:CE:7E:C2:6E:02
X509v3 Authority Key Identifier:
keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/M5jtoM41Y8zxhgX6892Azn7CbgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.162.128.0/23
Signature Algorithm: sha256WithRSAEncryption
69:23:e4:a5:fb:fa:eb:b6:73:fd:cd:c1:63:bd:57:27:dc:cf:
2f:61:bc:45:40:8f:1f:ab:27:09:71:4b:c4:e4:4c:fa:66:58:
f3:11:62:f9:1d:e8:86:84:c8:36:60:63:30:79:bd:85:56:9a:
b1:a4:9f:00:0d:f9:ee:cb:1a:c5:ba:0d:50:c0:ad:5f:99:8d:
8c:89:ed:70:52:bf:39:72:61:a8:49:c7:9c:b2:d9:9e:68:be:
8b:b8:9f:ed:48:b9:92:3f:15:6d:66:9f:da:de:02:15:fe:58:
89:9f:34:b2:c6:5c:73:8b:ce:ba:3c:3a:d3:dc:69:6d:b0:7b:
2f:ab:5c:4e:91:e1:cd:8d:00:c8:da:47:56:f6:be:b5:5f:60:
20:34:52:97:c2:90:fe:ac:16:ac:a4:38:e8:84:f5:d4:a2:af:
59:ca:90:e8:3a:96:69:97:ff:93:98:5c:9c:ec:7d:a0:33:d9:
a5:f9:3e:d3:21:46:4b:c1:66:97:52:61:60:18:d6:34:fe:00:
01:0b:07:07:0f:2c:3f:de:d2:90:2f:8f:bc:d0:70:a2:6d:56:
ca:89:5e:4a:83:ff:1f:94:25:43:a8:4a:9c:5a:58:c0:92:b6:
50:94:7e:6a:83:71:17:76:79:73:21:54:e5:63:53:3a:77:4d:
1c:cf:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:10 2025 by rpki-client