Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/4dG5kQTpuoKWr7iHq6HFf5bqtcY.roa
File: 4dG5kQTpuoKWr7iHq6HFf5bqtcY.roa (raw, json)
Hash identifier: yQD1ZBfKLQ6QNxgcXjNcc7qBR/x8P7Vw50OQxwqxEko=
Subject key identifier: E1:D1:B9:91:04:E9:BA:82:96:AF:B8:87:AB:A1:C5:7F:96:EA:B5:C6
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0192ED22EA82030B21E0AD80CCE22BD24CB6
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/4dG5kQTpuoKWr7iHq6HFf5bqtcY.roa
Signing time: Sat 02 Nov 2024 13:49:01 +0000
ROA not before: Sat 02 Nov 2024 13:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.87.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ed:22:ea:82:03:0b:21:e0:ad:80:cc:e2:2b:d2:4c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Nov 2 13:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1d1b99104e9ba8296afb887aba1c57f96eab5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:9b:71:d6:25:00:68:cf:b1:42:d3:f2:a1:
92:d0:e2:27:84:31:95:78:7f:fd:90:db:cd:d8:2d:
07:ff:e6:ea:dd:4e:4f:32:0f:77:fe:e6:96:d5:16:
c8:8c:b6:12:fb:3e:f3:fc:65:25:0b:0c:75:3e:9d:
02:3a:9d:87:94:33:56:9c:1a:d8:c0:32:e1:8c:1b:
eb:00:96:ec:54:7e:2b:be:c2:a2:9c:bd:b2:7e:cc:
cf:4e:ca:b8:3c:a4:58:33:cb:b0:7a:5c:ac:54:4d:
b4:03:4f:bb:52:50:6c:ea:49:3f:97:44:2a:fe:e1:
66:96:90:dc:70:6f:75:db:c1:13:7c:df:ce:65:cb:
35:ee:9e:eb:13:cf:c2:c3:7e:88:0d:43:31:d6:fa:
21:50:85:08:13:f6:2e:24:bd:b6:c2:63:09:24:13:
c1:32:a1:74:e8:8d:4a:c9:23:1d:86:87:e2:f2:02:
34:8a:99:e7:7f:99:c7:ca:9e:81:e5:bd:01:a3:3a:
fb:18:da:bf:8c:2f:9e:dc:1f:bf:d3:3c:27:2e:39:
ea:0f:e8:d0:d4:57:93:b3:d5:5a:33:c0:81:38:ac:
df:97:ac:30:a5:e4:c1:28:64:1a:30:d4:84:86:c5:
0e:16:c8:3e:86:28:61:3e:4f:7a:71:24:17:34:1a:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:B9:91:04:E9:BA:82:96:AF:B8:87:AB:A1:C5:7F:96:EA:B5:C6
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/4dG5kQTpuoKWr7iHq6HFf5bqtcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:24:cb:86:80:74:0c:fc:ee:12:80:1b:d1:46:73:c3:b5:8b:
ac:ec:f8:91:67:62:a6:4b:8d:38:1d:9f:c9:e4:a1:72:20:3b:
a1:f4:1a:0d:d3:ba:fb:a7:77:7f:f8:69:17:8f:ae:61:41:2b:
7d:f4:fd:0a:72:03:41:d9:51:4c:9b:6b:3e:75:23:56:6f:57:
00:3f:f7:42:00:0d:39:05:57:73:d6:3b:5a:4b:54:3e:8b:63:
1a:b4:78:af:13:04:26:c0:c2:1e:fd:8d:54:22:8f:d8:32:5f:
9c:f8:5f:7c:3d:b4:ef:0e:2d:d6:d3:1d:71:8c:51:42:80:a8:
b9:f1:fe:11:59:41:34:c2:d6:92:d0:8c:7f:03:87:60:60:41:
e8:28:5d:c8:ce:33:7e:c7:e8:8b:73:07:a8:36:e4:f0:ae:45:
aa:f3:81:a7:09:b7:e2:89:1f:ed:ff:0e:cf:42:be:79:51:c3:
0c:55:6f:21:e7:fb:b6:59:ca:1b:5b:fe:79:08:c5:76:51:5d:
a8:48:eb:56:98:a8:0a:39:4e:04:2a:9e:0d:83:8d:84:11:65:
4d:18:1d:9f:80:84:01:3b:60:34:f1:13:32:c9:69:83:05:3e:
b0:1d:4c:32:02:9f:14:ed:99:32:76:a3:25:6c:96:eb:af:92:
f9:58:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:38 2025 by rpki-client