Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/DLK7aUuoCrkixmfK1Tr6lgYywbs.roa
File: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (raw, json)
Hash identifier: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=
Subject key identifier: 0C:B2:BB:69:4B:A8:0A:B9:22:C6:67:CA:D5:3A:FA:96:06:32:C1:BB
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 0194282525D4B05B3A090D543CC84D88286F
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/DLK7aUuoCrkixmfK1Tr6lgYywbs.roa
Signing time: Thu 02 Jan 2025 17:51:50 +0000
ROA not before: Thu 02 Jan 2025 17:51:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 212.6.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:25:d4:b0:5b:3a:09:0d:54:3c:c8:4d:88:28:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jan 2 17:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cb2bb694ba80ab922c667cad53afa960632c1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:eb:4c:0a:a3:d9:52:65:9e:e2:fe:3e:fa:
a6:58:83:46:d4:7b:9a:ca:94:64:7c:93:6b:73:87:
d5:8c:78:0a:0d:a3:3e:ed:62:8e:6a:93:6c:45:c8:
f0:b0:b9:64:56:eb:28:ad:7a:a2:90:a5:ad:7e:b3:
c4:18:37:3f:06:38:ed:f5:ca:60:13:97:b0:47:34:
9c:62:39:01:b5:24:ee:d5:f1:78:2b:e0:a6:b1:53:
32:11:d9:4e:20:8e:8c:87:ec:95:4b:d9:86:74:14:
5d:e6:c8:ca:e1:4f:95:da:2c:8d:fd:03:52:86:31:
ac:9f:12:8a:e3:c0:b4:d0:ef:dd:37:7d:8a:75:24:
bb:b8:b1:88:1f:c0:ee:ca:b7:9a:ec:aa:4b:13:34:
fa:05:e9:05:f1:3c:e3:eb:44:83:b3:80:5e:23:94:
0c:53:7f:16:d5:10:5e:23:47:80:16:4e:28:db:26:
09:58:d2:67:15:c7:5f:6e:2b:49:74:60:a0:35:1e:
35:4f:12:b9:0d:6e:f6:b9:29:c3:38:02:0d:52:bd:
2e:16:b2:b9:71:e0:f4:c3:03:f4:8a:3c:10:25:aa:
7d:eb:20:7c:78:7c:7b:27:9b:96:ea:dd:cf:0c:f4:
b9:51:7a:52:66:59:52:b3:1e:8f:d5:ae:c3:6f:29:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:BB:69:4B:A8:0A:B9:22:C6:67:CA:D5:3A:FA:96:06:32:C1:BB
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/DLK7aUuoCrkixmfK1Tr6lgYywbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.39.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e8:1e:4f:20:80:1c:3f:4a:56:2a:d6:43:8b:6f:50:21:f2:
89:43:e4:cc:32:f4:64:6e:ed:4e:83:bf:16:32:89:ad:b2:17:
ad:32:b3:91:4e:ac:10:a8:ad:fb:a5:59:08:c1:2e:cc:70:74:
54:4e:20:d2:27:14:db:71:b7:5d:2c:2b:25:b1:31:e2:11:dc:
f7:7a:04:10:51:17:e6:6c:12:ff:05:81:64:bf:77:df:62:97:
12:6a:70:14:d0:7f:31:84:bb:85:b6:b1:10:f5:29:74:06:17:
93:64:00:8e:65:0d:0c:71:4f:ce:fe:64:52:b5:58:33:e0:3e:
a8:a1:ac:3c:db:d2:b9:77:48:ec:c3:10:75:4e:37:50:66:99:
02:3d:64:81:94:2b:95:ee:e1:1c:59:3a:05:36:ce:ce:91:c4:
95:0d:2c:f8:12:5d:4a:db:86:2c:a4:5b:01:c3:90:ef:a4:cb:
09:65:53:11:a4:d6:70:a3:2c:75:e1:2d:b9:4b:76:40:4c:d8:
03:81:50:e6:33:99:6d:34:f9:92:16:87:9d:0a:32:c8:48:b2:
00:3c:25:35:b7:79:2e:cf:68:ed:3b:f7:de:3f:54:df:ac:4e:
23:72:7b:68:2a:ac:21:e2:a6:4b:bc:cd:fb:41:33:6f:f2:8a:
a9:d0:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:17 2025 by rpki-client