Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa
File: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (raw, json)
Hash identifier: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=
Subject key identifier: 44:C7:02:CE:B9:6E:DA:C2:78:5D:2C:58:A2:8F:26:FF:BA:36:EC:42
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 019427486827C95BF5F33708B5406CB4C416
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 206.245.212.0/24 maxlen: 24
206.245.238.0/24 maxlen: 24
206.245.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:68:27:c9:5b:f5:f3:37:08:b5:40:6c:b4:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44c702ceb96edac2785d2c58a28f26ffba36ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:78:c7:04:7c:7a:f7:db:d9:37:5f:4e:df:
c1:5c:c2:31:23:1b:6b:df:9f:81:0b:d5:29:19:0d:
e7:e5:a2:0d:98:e4:07:f0:f9:a8:85:58:fa:58:0c:
43:8e:e2:11:c7:bd:01:eb:7b:f2:09:d1:27:08:a9:
ed:3b:1d:8d:af:ad:18:76:d0:22:5a:67:56:78:2e:
c9:88:68:9c:1a:cd:b5:6a:a4:0c:85:ae:c1:92:77:
5b:a2:6d:33:97:e4:3e:1f:31:6b:a7:40:67:42:0e:
45:4f:04:e5:77:75:17:46:b1:ae:16:cb:11:42:fe:
43:ca:10:0a:2b:a0:b1:16:1b:9e:ec:76:47:03:25:
ed:f8:f5:d9:be:1b:66:fe:08:2b:09:b3:d0:0f:8a:
cd:b8:fc:f8:c9:d8:67:c4:af:5c:32:35:69:4d:c2:
4a:fd:f7:13:a6:d3:fe:e3:f3:37:0a:76:a4:1c:ab:
58:cf:bb:25:6c:00:d5:44:fe:b5:b6:63:d0:af:fd:
f4:3a:e2:a8:b9:26:0e:55:d7:6e:e1:15:de:fc:0f:
3f:53:40:a9:de:2f:74:45:65:ff:46:db:7c:59:51:
f3:86:6c:3f:4c:d7:87:1b:50:9e:18:c9:57:b0:cf:
4b:92:d4:a8:1f:1d:e0:54:5a:ea:81:df:69:5b:cf:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:02:CE:B9:6E:DA:C2:78:5D:2C:58:A2:8F:26:FF:BA:36:EC:42
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.212.0/24
206.245.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:f5:9a:74:90:57:ff:a6:3c:db:88:7c:3d:8d:49:8b:ab:18:
56:b9:6b:93:38:83:89:06:ea:03:25:b6:3c:6e:c5:b4:76:39:
ca:59:fc:c2:9c:d1:92:bb:ae:68:0d:0f:63:9e:3b:be:e8:03:
88:4d:25:fe:bc:ee:6e:62:a8:95:01:dd:5a:43:b9:2b:be:b6:
96:4f:d2:dd:b5:00:97:a5:a1:6d:6d:fa:d1:d8:95:69:1b:19:
1b:b2:27:98:ae:4c:02:96:9c:cd:46:e4:f4:fb:5e:37:3d:30:
a9:7d:58:e8:e0:e6:b4:b7:b9:68:73:5b:84:e9:2b:c3:0f:80:
70:4c:8c:76:88:9b:b2:9a:9f:61:71:ca:fd:18:c9:c0:36:37:
6d:12:37:82:46:0a:7c:49:56:8a:6f:43:b3:13:54:94:e3:ca:
c0:91:e7:ef:8a:13:53:23:c5:85:ee:6b:04:d9:9d:be:2a:bf:
73:11:6e:1f:1a:a5:e7:d1:ab:f0:8f:b5:82:1c:78:ca:98:53:
80:f7:6e:f0:79:5a:7a:ed:56:10:5e:11:e5:92:94:8f:9b:64:
35:b2:0b:65:69:81:78:9e:4b:ae:e8:be:b2:a6:0b:67:4a:fb:
ca:54:c4:b0:d0:c7:26:a8:91:75:d4:98:2a:2c:c5:ed:e2:2d:
2e:ae:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:45 2025 by rpki-client