Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/jPCSs252qSvjravA2rP7Fj-S9Zs.roa
File: jPCSs252qSvjravA2rP7Fj-S9Zs.roa (raw, json)
Hash identifier: //ThOz/rV49yhyAvmYRL7xe2CEkY0N8ebr3gAVphPE4=
Subject key identifier: 8C:F0:92:B3:6E:76:A9:2B:E3:AD:AB:C0:DA:B3:FB:16:3F:92:F5:9B
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 019267F5662B82705069D09D731CF6FB115B
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/jPCSs252qSvjravA2rP7Fj-S9Zs.roa
Signing time: Mon 07 Oct 2024 17:09:48 +0000
ROA not before: Mon 07 Oct 2024 17:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
2a12:bc0:2::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
2a12:bc0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:f5:66:2b:82:70:50:69:d0:9d:73:1c:f6:fb:11:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Oct 7 17:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cf092b36e76a92be3adabc0dab3fb163f92f59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:f3:69:25:5e:f0:37:e9:94:0c:c3:9c:e7:
a0:15:7a:25:74:51:b0:e4:d1:14:ff:6e:ca:65:41:
38:46:e4:28:50:5c:b5:aa:3a:f0:2d:d9:0b:5f:fc:
e6:9b:7e:4b:02:e7:02:98:1e:3a:ef:2f:42:49:bb:
73:7a:bf:19:da:6c:e8:4d:e8:e6:ac:9e:ff:1f:54:
5b:c4:29:c0:87:4f:1b:02:7a:a1:35:ab:31:86:53:
b6:7f:42:62:d3:b9:89:b9:52:8c:30:74:df:a2:8d:
cc:43:81:d1:ba:59:29:59:50:3d:4d:e9:94:b7:66:
9d:8f:e9:0d:aa:fe:3b:d3:de:4f:53:e0:85:2a:48:
7f:e0:c3:08:07:13:23:42:07:dc:37:24:f3:19:70:
a8:cd:6f:99:4f:27:36:d1:00:f0:7a:5e:e2:a0:33:
6a:a9:24:a9:85:a2:bb:cf:39:8f:ab:f1:71:14:f3:
e0:a3:eb:d2:50:03:23:a3:9a:30:f5:74:46:c8:45:
98:1e:91:02:e5:54:85:48:6c:8c:30:3f:aa:44:04:
e4:8a:eb:fa:12:5c:84:44:e3:3b:28:76:14:a6:5b:
3c:c6:26:a6:8d:52:ac:82:14:40:b8:a6:7e:80:04:
e8:1b:cc:66:9b:69:26:bf:14:ca:7d:ad:9d:08:17:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:92:B3:6E:76:A9:2B:E3:AD:AB:C0:DA:B3:FB:16:3F:92:F5:9B
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/jPCSs252qSvjravA2rP7Fj-S9Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:38:1a:0f:5c:06:a1:e1:1d:ca:c3:e0:c9:35:88:d5:5a:72:
be:f6:ba:cb:16:c8:08:04:38:82:36:c3:28:01:7a:74:7a:28:
a4:8b:07:24:d2:eb:33:4f:6a:76:a0:e6:7f:b7:67:cb:86:0b:
72:49:e0:85:37:0f:ee:bb:fc:77:1a:62:eb:11:4a:b4:10:f2:
64:4b:96:32:b4:2f:d4:dd:3d:c3:43:41:4d:76:aa:ea:5b:81:
91:d0:48:4a:3d:44:0c:07:eb:da:dc:1b:16:a5:d4:ff:07:3d:
71:c3:f6:27:8a:78:f8:32:e6:09:2f:b5:27:29:7e:09:25:16:
ef:ae:15:f2:6f:39:33:5e:f6:1f:96:df:ad:2f:39:b8:96:8d:
3d:e2:47:45:60:eb:e2:3f:66:9d:ab:ba:72:4c:65:0f:f2:63:
f2:a3:96:59:44:8a:ef:ac:a3:e9:fa:48:a3:3f:f8:05:0d:63:
fa:c5:b4:07:23:f2:8f:97:41:f1:b6:fa:09:0b:90:6c:89:ad:
55:6a:0b:90:00:ed:06:e7:f9:75:ad:25:0b:55:19:cb:7f:f0:
12:0b:ab:52:db:77:a0:d5:35:fc:e1:09:ac:8e:45:a4:1f:c6:
22:98:0c:07:07:6b:42:fe:51:f7:09:c7:ef:f8:06:e7:85:46:
d9:5b:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:34 2025 by rpki-client