Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ANh_3uWLpmivgRflaOBcLqhZlu0.roa
File: ANh_3uWLpmivgRflaOBcLqhZlu0.roa (raw, json)
Hash identifier: +LbOBYZVWU7E5I9nY7TQ0CEjABTaBJj0Lna9dJdn56E=
Subject key identifier: 00:D8:7F:DE:E5:8B:A6:68:AF:81:17:E5:68:E0:5C:2E:A8:59:96:ED
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01927A7A5B0B266FF8421E51BEEF100C66EC
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ANh_3uWLpmivgRflaOBcLqhZlu0.roa
Signing time: Fri 11 Oct 2024 07:28:11 +0000
ROA not before: Fri 11 Oct 2024 07:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.87.201.0/24 maxlen: 24
212.87.202.0/24 maxlen: 24
212.87.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:7a:5b:0b:26:6f:f8:42:1e:51:be:ef:10:0c:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 11 07:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00d87fdee58ba668af8117e568e05c2ea85996ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:9c:cb:5b:62:93:49:13:ef:0c:42:a8:53:
8e:8f:fe:82:63:83:f2:bb:41:c9:0d:50:ca:c1:79:
29:1f:d0:cf:62:52:9f:6e:44:8b:2c:f3:a0:c2:df:
7d:68:77:cb:6d:8a:cd:8d:74:48:e7:28:4a:eb:62:
15:a0:da:43:f3:c7:4e:c8:41:84:64:3d:3e:bd:7e:
e8:5b:ba:80:91:74:53:57:ef:4c:87:6a:76:7a:e8:
74:1d:d9:b3:63:df:33:ed:3f:69:04:3f:d5:45:1b:
e6:f5:db:b2:f6:86:de:47:cb:36:13:3d:84:f8:11:
09:e2:6e:de:81:cb:5a:53:b3:95:6a:e3:b4:09:73:
c3:3b:b5:cc:7f:f9:30:4e:a3:42:a1:46:e1:66:ed:
a4:27:45:0e:25:ba:01:e7:04:17:08:25:a3:8f:b8:
92:79:57:a8:cc:f3:5b:bd:4a:ef:2c:a0:18:4c:ef:
1d:44:fd:76:d0:63:e6:7a:90:01:fd:6c:84:1f:5b:
be:19:ff:db:86:ec:64:82:22:42:25:aa:fe:de:31:
c8:f5:9b:a1:f2:34:ca:e5:fb:a8:12:96:3c:32:e2:
e5:12:dd:61:fd:90:ea:e2:c9:30:67:87:61:34:13:
1c:3f:56:f8:10:37:0a:50:89:bf:1f:23:a0:76:73:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D8:7F:DE:E5:8B:A6:68:AF:81:17:E5:68:E0:5C:2E:A8:59:96:ED
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ANh_3uWLpmivgRflaOBcLqhZlu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.201.0-212.87.203.255
Signature Algorithm: sha256WithRSAEncryption
68:67:66:0b:f6:08:60:43:a5:ef:27:d2:0b:d7:2c:2f:ca:c5:
c7:83:3f:c7:b4:cd:4c:ec:7b:c6:9c:d4:2b:63:cc:59:e2:6a:
7f:d3:02:b9:12:56:18:9d:36:73:72:ed:5b:a9:ea:b4:f5:05:
68:58:9f:5d:21:0b:81:c0:fd:a4:9c:fe:e9:5b:aa:6e:5f:cf:
30:6a:0c:b9:8a:c2:94:99:bb:07:c7:8a:48:e5:5d:2c:ab:5f:
7a:3c:f8:fa:f6:da:d8:e1:31:26:99:84:62:3c:4e:af:73:6d:
e5:39:fe:e4:96:c5:c0:46:d2:39:95:a9:80:f6:23:e3:8e:1b:
86:54:97:e5:89:17:5e:8b:f3:90:c3:5f:33:d6:09:b4:d6:03:
00:35:20:5c:e4:65:08:5f:19:ce:66:b8:80:e4:23:e8:3f:e9:
51:09:51:cb:2f:52:35:73:dd:1d:8d:8f:22:47:16:ed:94:0d:
8e:04:2f:c8:02:62:26:0e:80:ff:4a:73:1e:ca:0c:02:4f:25:
e1:ab:bb:c6:a9:3c:92:09:17:fe:64:4f:9d:da:f3:a6:66:da:
9c:4c:46:22:14:c2:7d:5a:41:ff:78:15:76:e9:ac:b4:9e:99:
25:5d:14:38:36:63:cf:dd:ae:54:af:09:b7:86:dc:c3:61:80:
20:fc:e0:b0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJ6elsLJm/4Qh5Rvu8QDGbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjQxMDExMDcyODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGQ4N2ZkZWU1OGJhNjY4YWY4MTE3ZTU2OGUwNWMyZWE4NTk5NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmWcy1tik0kT7wxCqFOOj/6CY4Py
u0HJDVDKwXkpH9DPYlKfbkSLLPOgwt99aHfLbYrNjXRI5yhK62IVoNpD88dOyEGE
ZD0+vX7oW7qAkXRTV+9Mh2p2euh0HdmzY98z7T9pBD/VRRvm9duy9obeR8s2Ez2E
+BEJ4m7egctaU7OVauO0CXPDO7XMf/kwTqNCoUbhZu2kJ0UOJboB5wQXCCWjj7iS
eVeozPNbvUrvLKAYTO8dRP120GPmepAB/WyEH1u+Gf/bhuxkgiJCJar+3jHI9Zuh
8jTK5fuoEpY8MuLlEt1h/ZDq4skwZ4dhNBMcP1b4EDcKUIm/HyOgdnPwuQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFADYf97li6Zor4EX5WjgXC6oWZbtMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvQU5oXzN1V0xwbWl2Z1JmbGFPQmNMcWhabHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUV8kD
BALUV8gwDQYJKoZIhvcNAQELBQADggEBAGhnZgv2CGBDpe8n0gvXLC/KxceDP8e0
zUzse8ac1CtjzFnian/TArkSVhidNnNy7Vup6rT1BWhYn10hC4HA/aSc/ulbqm5f
zzBqDLmKwpSZuwfHikjlXSyrX3o8+Pr22tjhMSaZhGI8Tq9zbeU5/uSWxcBG0jmV
qYD2I+OOG4ZUl+WJF16L85DDXzPWCbTWAwA1IFzkZQhfGc5muIDkI+g/6VEJUcsv
UjVz3R2NjyJHFu2UDY4EL8gCYiYOgP9Kcx7KDAJPJeGru8apPJIJF/5kT53a86Zm
2pxMRiIUwn1aQf94FXbprLSemSVdFDg2Y8/drlSvCbeG3MNhgCD84LA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:42 2025 by rpki-client