Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eYs91QuIUivPDMCo56N46mZSUDM.roa
File: eYs91QuIUivPDMCo56N46mZSUDM.roa (raw, json)
Hash identifier: DAFc2vUDhGtr+6xqenEjJlZgxrv2J15106uH+1Fjn3w=
Subject key identifier: 79:8B:3D:D5:0B:88:52:2B:CF:0C:C0:A8:E7:A3:78:EA:66:52:50:33
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194221FFF19E31B3ADDD25ABEB55E340D93
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eYs91QuIUivPDMCo56N46mZSUDM.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 212.87.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ff:19:e3:1b:3a:dd:d2:5a:be:b5:5e:34:0d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=798b3dd50b88522bcf0cc0a8e7a378ea66525033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:d8:e3:fa:28:02:78:9b:0a:08:3a:99:f1:
16:91:13:26:43:ac:fe:10:cb:1c:c1:4d:67:0a:ee:
62:82:2f:39:f5:17:b4:ec:ce:81:6e:64:5d:97:85:
74:e7:2c:48:04:e4:be:8b:76:be:0f:79:c9:ee:24:
e4:fd:80:67:6c:d4:18:8d:ef:d7:40:51:ba:a4:37:
ce:6a:42:c1:bc:e7:8e:16:21:62:b1:00:26:bc:e8:
01:48:7f:b4:74:e8:c0:76:f3:cc:c2:40:f5:41:f2:
83:ab:af:25:d0:90:a6:63:27:3e:e0:36:4f:8f:25:
06:e1:49:bf:5a:e6:ee:24:08:03:d5:b7:ba:3a:9a:
99:50:6a:8b:b5:b0:b8:5f:70:c9:46:74:64:94:0c:
69:e8:7e:d0:32:86:f2:73:1f:7f:8a:1f:93:c7:d1:
03:49:b1:70:39:78:66:08:fa:b5:48:1a:ff:a0:59:
3d:f3:dc:3f:41:97:a1:0b:91:ce:ca:16:2e:f2:7f:
c4:1b:5d:ca:be:a4:02:5e:42:94:9f:65:68:4d:84:
50:22:32:9c:1a:b8:7b:8a:14:78:73:26:ef:6b:0d:
00:85:46:bf:e0:8e:fc:20:9a:4e:e5:eb:71:00:0d:
f6:38:c3:98:81:34:14:29:b4:c4:63:52:c2:85:90:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:3D:D5:0B:88:52:2B:CF:0C:C0:A8:E7:A3:78:EA:66:52:50:33
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eYs91QuIUivPDMCo56N46mZSUDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ad:cf:82:89:cc:cc:0e:e3:a5:fd:e8:91:ac:dd:3f:7c:4b:
a5:9e:4b:a2:a1:87:90:f4:67:09:8c:4c:6a:af:dd:0e:53:f2:
ac:08:a6:59:c0:6f:df:f6:44:46:f6:58:72:e0:59:fe:a4:9a:
b5:f5:0f:09:46:de:a0:de:02:78:2a:be:91:40:41:be:c6:98:
12:8c:75:46:01:fe:49:37:0d:0d:49:18:5e:de:7f:49:a2:9f:
ce:9b:98:0c:f2:7a:03:f1:fb:08:93:bc:d3:1e:3c:5d:d1:3f:
92:df:82:22:63:85:b7:f0:3d:b4:27:0a:99:dd:14:23:78:25:
99:30:f5:10:67:3a:2d:9b:91:b6:4a:63:43:ef:86:36:91:82:
e2:04:6c:b1:ef:2a:dc:ad:aa:76:08:86:4b:fb:ca:ae:0f:97:
50:28:92:6d:9b:ee:1f:6e:f4:05:2e:b9:6a:8f:c0:81:4f:cc:
e8:60:18:7f:78:70:4a:a8:f8:67:6b:a8:9f:a1:4b:4e:42:7e:
79:68:3e:90:53:f4:95:c6:39:aa:4a:cc:55:a5:0e:b5:b0:21:
e6:6b:f4:98:e8:e0:5e:01:13:f6:c3:dc:dc:ad:10:db:e4:f2:
41:58:02:a6:a2:30:e7:ea:67:82:21:66:96:43:cf:43:fa:0b:
59:3f:5c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:10 2025 by rpki-client