Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/EGAuphPvCzbEYZzt_JGqAEsms6Q.roa
File: EGAuphPvCzbEYZzt_JGqAEsms6Q.roa (raw, json)
Hash identifier: Ck1aIlHHIQbhy5DIlVBOqu/3Z0wyyE8hA346jYqMZOA=
Subject key identifier: 10:60:2E:A6:13:EF:0B:36:C4:61:9C:ED:FC:91:AA:00:4B:26:B3:A4
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 01856E820373359FD6CDEC0994B2908B0D04
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/EGAuphPvCzbEYZzt_JGqAEsms6Q.roa
Signing time: Sun 01 Jan 2023 18:04:52 +0000
ROA not before: Sun 01 Jan 2023 18:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0:2::/48 maxlen: 48
2a12:bc0::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:03:73:35:9f:d6:cd:ec:09:94:b2:90:8b:0d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Jan 1 18:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10602ea613ef0b36c4619cedfc91aa004b26b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:4e:ef:99:98:c5:00:73:9f:8b:25:af:9a:
85:a2:46:85:1f:21:d8:5c:1a:10:4e:7c:72:3a:f1:
b9:6d:45:9a:3c:0b:b7:05:b5:e1:26:6b:6c:34:de:
6e:b5:9f:d9:da:64:f9:0f:5d:91:5a:1b:c5:9d:aa:
e4:ad:30:13:a3:1e:fe:7a:95:b3:76:4b:4a:34:b4:
15:8d:0c:b2:5f:0b:a2:ef:cb:55:ab:93:bf:6f:60:
4e:43:e0:21:38:04:38:09:80:b7:7f:d8:c5:9c:0c:
61:d0:72:6e:16:78:73:a1:1a:50:32:76:7d:b9:74:
68:88:ba:a8:c9:13:02:cc:f3:45:ae:4e:43:19:1a:
a9:fd:44:60:d1:eb:ef:26:fe:e5:6f:e8:f1:cb:8a:
23:49:30:3a:c3:4d:ce:b5:c1:20:c5:95:1c:9e:46:
b3:dc:64:71:1f:a8:1a:67:56:32:9b:c2:9c:2f:0c:
78:ac:58:71:ba:e6:c4:32:48:b8:0a:48:bb:79:1b:
96:2c:63:90:03:49:5a:3d:24:df:fa:29:05:82:f6:
19:90:be:27:60:e0:e3:52:7a:90:d3:9f:5f:0e:09:
ce:3e:72:90:27:96:dc:64:d9:08:84:c3:53:b0:71:
d8:66:e7:3e:6d:8f:e7:c0:ee:42:d9:e2:44:45:fa:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:2E:A6:13:EF:0B:36:C4:61:9C:ED:FC:91:AA:00:4B:26:B3:A4
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/EGAuphPvCzbEYZzt_JGqAEsms6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:71:a5:9d:3e:42:e4:32:05:a1:8c:0a:a1:31:15:cc:98:8f:
5f:0f:86:12:63:27:9b:12:c5:6e:8b:7e:18:bb:88:97:6c:f2:
38:76:bf:da:1d:3a:60:bd:2e:03:9e:11:e3:c6:e6:a8:03:01:
0a:be:9b:af:1b:4f:70:05:71:cd:f6:29:1b:4f:5d:1e:aa:d4:
21:9f:95:b1:ef:d6:dd:70:aa:51:9f:3d:f4:fa:b7:14:30:69:
42:ad:33:be:7b:18:7a:a7:e6:9c:88:c5:44:df:ed:34:3e:4d:
49:28:76:9c:66:64:13:6b:6a:0a:ee:d2:df:cb:21:c9:de:67:
b4:72:1c:4b:3f:f2:fb:32:a9:f5:87:90:7f:52:f7:21:2b:7f:
6e:60:14:fa:65:5e:e0:41:25:8a:f8:2c:78:ce:77:a3:9d:ae:
fe:51:5e:70:59:21:32:bf:55:7e:74:af:3a:12:46:ae:14:46:
8d:e2:49:1c:5a:63:de:16:fb:a6:70:5a:19:4f:90:25:55:db:
a3:57:e5:08:7d:0c:52:49:52:57:9a:e8:a6:ad:73:8b:51:96:
76:bf:a8:fa:d5:cf:89:6a:e9:a0:3c:70:cd:9b:50:da:00:c2:
f3:f5:2b:29:65:09:df:7a:67:ee:a1:75:25:97:b8:7f:d6:6a:
b5:d5:b9:27
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVuggNzNZ/WzewJlLKQiw0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YjVmZmQyNGQyZWI1ZDVjMWUxY2ZlNzhiMDAzYzRiYWI1
YTJmMTMwHhcNMjMwMTAxMTgwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDYwMmVhNjEzZWYwYjM2YzQ2MTljZWRmYzkxYWEwMDRiMjZiM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQJO75mYxQBzn4slr5qFokaFHyHY
XBoQTnxyOvG5bUWaPAu3BbXhJmtsNN5utZ/Z2mT5D12RWhvFnarkrTATox7+epWz
dktKNLQVjQyyXwui78tVq5O/b2BOQ+AhOAQ4CYC3f9jFnAxh0HJuFnhzoRpQMnZ9
uXRoiLqoyRMCzPNFrk5DGRqp/URg0evvJv7lb+jxy4ojSTA6w03OtcEgxZUcnkaz
3GRxH6gaZ1Yym8KcLwx4rFhxuubEMki4Cki7eRuWLGOQA0laPSTf+ikFgvYZkL4n
YODjUnqQ059fDgnOPnKQJ5bcZNkIhMNTsHHYZuc+bY/nwO5C2eJERfpX0wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBBgLqYT7ws2xGGc7fyRqgBLJrOkMB8GA1UdIwQY
MBaAFKm1/9JNLrXVweHP54sAPEurWi8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wMzAxZDQtNDgwNS00MDVjLWE2ZTAt
YTQyZTFmMWY0Nzk4LzEvRUdBdXBoUHZDemJFWVp6dF9KR3FBRXNtczZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wMzAxZDQtNDgwNS00MDVjLWE2ZTAtYTQyZTFmMWY0Nzk4
LzEvcWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA1C43MBgE
AgACMBIwEAMFBioSC8ADBwAqEgvAAAIwDQYJKoZIhvcNAQELBQADggEBAEFxpZ0+
QuQyBaGMCqExFcyYj18PhhJjJ5sSxW6Lfhi7iJds8jh2v9odOmC9LgOeEePG5qgD
AQq+m68bT3AFcc32KRtPXR6q1CGflbHv1t1wqlGfPfT6txQwaUKtM757GHqn5pyI
xUTf7TQ+TUkodpxmZBNragru0t/LIcneZ7RyHEs/8vsyqfWHkH9S9yErf25gFPpl
XuBBJYr4LHjOd6Odrv5RXnBZITK/VX50rzoSRq4URo3iSRxaY94W+6ZwWhlPkCVV
26NX5Qh9DFJJUlea6Katc4tRlna/qPrVz4lq6aA8cM2bUNoAwvP1KyllCd96Z+6h
dSWXuH/WarXVuSc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:29 2025 by rpki-client