Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/1-uQE08VmMWMxSGInQ76da1_06s4.roa
File: 1-uQE08VmMWMxSGInQ76da1_06s4.roa (raw, json)
Hash identifier: AVUFeAYeFlG4FX7lon2MdsLDY6fRmsa85Mps6Ye2AU0=
Subject key identifier: FA:E4:04:D3:C5:66:31:63:31:48:62:27:43:BE:9D:6B:5F:F4:EA:CE
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 019424B38F9F020EBD3BC3D45725AB29399D
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/1-uQE08VmMWMxSGInQ76da1_06s4.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 212.56.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8f:9f:02:0e:bd:3b:c3:d4:57:25:ab:29:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae404d3c56631633148622743be9d6b5ff4eace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:e7:47:0a:3a:3e:7d:ad:b6:80:29:39:f3:
7d:4e:fb:e6:34:1b:b1:1b:bc:1e:30:ef:3d:73:2a:
9b:19:55:6a:0f:10:e2:5f:24:6e:66:18:93:cc:47:
b0:3e:05:39:9d:c1:bd:9e:47:59:a7:e2:cd:e2:4b:
7b:b0:f8:b8:68:a7:82:71:07:f4:da:d5:7b:1e:72:
08:63:af:3f:ce:5a:d0:e2:cb:06:c9:67:c9:1e:ca:
2c:3e:94:ab:89:b5:70:e4:6b:38:e0:93:16:d9:31:
42:3e:3d:fe:32:02:cb:1c:be:7b:21:37:cc:56:2a:
76:30:c0:5c:ae:05:fa:a0:21:0a:39:91:8d:1d:1f:
ec:75:e6:b7:4f:b2:2c:bf:f2:b4:72:ff:fd:2e:ee:
9a:48:e8:2c:73:c1:eb:e3:a0:8d:80:8d:c1:fe:1e:
ef:e0:18:c4:61:52:6a:8c:55:a3:19:fb:3d:da:a6:
5b:3e:ea:25:ed:58:e8:19:9a:5a:79:5d:50:c8:16:
3b:2b:23:42:40:0c:10:71:61:1e:ea:96:43:4d:d7:
c0:c2:31:bf:ca:df:5b:69:9e:9f:46:58:b7:95:29:
9e:eb:fc:43:75:34:05:10:af:05:31:cf:8f:2c:8d:
c4:8b:03:9e:47:23:e0:ae:9d:de:3c:4a:94:99:22:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:04:D3:C5:66:31:63:31:48:62:27:43:BE:9D:6B:5F:F4:EA:CE
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/1-uQE08VmMWMxSGInQ76da1_06s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.56.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:80:ba:f1:90:a3:bd:cb:f0:84:a0:e5:8a:8b:94:eb:dd:d4:
25:c8:6c:50:c3:f4:5b:36:16:e4:0e:11:06:f5:ed:e7:ca:58:
0d:f0:3e:66:53:a8:66:51:01:b9:ef:34:58:bc:b0:89:42:cd:
3e:37:f5:2b:10:9b:cb:82:06:f9:ea:dc:7a:98:61:09:2d:16:
11:bd:b9:25:9d:5b:3a:61:86:cc:e3:99:4a:94:75:e1:e7:af:
ec:dc:49:f2:16:92:78:17:21:da:66:07:97:a2:91:9c:37:2b:
52:54:29:61:12:55:01:a5:c0:81:de:25:ab:93:c2:f0:ad:d6:
39:66:dd:f9:cd:5d:95:62:4c:11:77:23:71:95:73:2a:08:da:
2c:3c:0d:e6:df:18:a6:31:97:51:15:e1:6d:5e:89:d8:a5:2d:
bf:99:d1:94:1d:ff:89:19:39:6a:45:ee:ea:cd:35:9b:ea:24:
d5:01:b1:47:e7:fb:2c:84:30:ef:a6:4b:98:7b:65:c3:9b:a4:
b3:68:d2:5d:9f:08:9d:9e:37:4b:07:e1:03:35:19:15:83:97:
a3:7a:78:8f:0f:5d:38:5e:8c:d7:de:bd:5f:b6:65:5c:47:c1:
22:9b:3d:04:b5:d4:26:08:f7:88:5d:ca:00:3d:4d:f4:7c:d9:
81:ef:e9:3e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQks4+fAg69O8PUVyWrKTmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0
NzNiMDAwHhcNMjUwMTAyMDE0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWU0MDRkM2M1NjYzMTYzMzE0ODYyMjc0M2JlOWQ2YjVmZjRlYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw3nRwo6Pn2ttoApOfN9TvvmNBux
G7weMO89cyqbGVVqDxDiXyRuZhiTzEewPgU5ncG9nkdZp+LN4kt7sPi4aKeCcQf0
2tV7HnIIY68/zlrQ4ssGyWfJHsosPpSribVw5Gs44JMW2TFCPj3+MgLLHL57ITfM
Vip2MMBcrgX6oCEKOZGNHR/sdea3T7Isv/K0cv/9Lu6aSOgsc8Hr46CNgI3B/h7v
4BjEYVJqjFWjGfs92qZbPuol7VjoGZpaeV1QyBY7KyNCQAwQcWEe6pZDTdfAwjG/
yt9baZ6fRli3lSme6/xDdTQFEK8FMc+PLI3EiwOeRyPgrp3ePEqUmSLvzQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrkBNPFZjFjMUhiJ0O+nWtf9OrOMB8GA1UdIwQY
MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct
NmUyOWVmZGZkNGUzLzEvMS11UUUwOFZtTVdNeFNHSW5RNzZkYTFfMDZzNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODYvMmZmNzZkLWYxMTYtNDQzMC04NDA3LTZlMjllZmRmZDRl
My8xL0tmbG5EdUtqRHF5TUNqbmNSXzk2ak5KSE93QS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQ4OzAN
BgkqhkiG9w0BAQsFAAOCAQEAs4C68ZCjvcvwhKDliouU693UJchsUMP0WzYW5A4R
BvXt58pYDfA+ZlOoZlEBue80WLywiULNPjf1KxCby4IG+ercephhCS0WEb25JZ1b
OmGGzOOZSpR14eev7NxJ8haSeBch2mYHl6KRnDcrUlQpYRJVAaXAgd4lq5PC8K3W
OWbd+c1dlWJMEXcjcZVzKgjaLDwN5t8YpjGXURXhbV6J2KUtv5nRlB3/iRk5akXu
6s01m+ok1QGxR+f7LIQw76ZLmHtlw5uks2jSXZ8InZ43SwfhAzUZFYOXo3p4jw9d
OF6M1969X7ZlXEfBIps9BLXUJgj3iF3KAD1N9HzZge/pPg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:24:32 2025 by rpki-client