Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/264J_wu759gsvNLm9Ahcvv5rx8o.roa
File: 264J_wu759gsvNLm9Ahcvv5rx8o.roa (raw, json)
Hash identifier: no2KfaL2zTw55QJDAbD4P+3ZGUzSP+IcwZAc68qbb4Q=
Subject key identifier: DB:AE:09:FF:0B:BB:E7:D8:2C:BC:D2:E6:F4:08:5C:BE:FE:6B:C7:CA
Certificate issuer: /CN=25c7a52cd556294d174d3873bdf2924364ebc91b
Certificate serial: 7C0F88
Authority key identifier: 25:C7:A5:2C:D5:56:29:4D:17:4D:38:73:BD:F2:92:43:64:EB:C9:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcelLNVWKU0XTThzvfKSQ2TryRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/264J_wu759gsvNLm9Ahcvv5rx8o.roa
Signing time: Sat 01 Jan 2022 03:59:27 +0000
ROA not before: Sat 01 Jan 2022 03:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47787
IP address blocks: 212.52.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8130440 (0x7c0f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c7a52cd556294d174d3873bdf2924364ebc91b
Validity
Not Before: Jan 1 03:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbae09ff0bbbe7d82cbcd2e6f4085cbefe6bc7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:3e:52:c3:02:21:77:49:1d:6e:b5:66:93:
f3:2e:36:ad:1c:ab:fb:94:11:e2:58:b2:66:fe:15:
7b:88:cc:32:88:e0:ad:da:e0:26:e7:f7:c5:6b:d7:
39:ed:32:68:9d:f2:f5:35:12:3a:d1:30:30:97:3f:
d5:97:6b:c5:53:2f:08:80:e9:3d:57:08:cb:d8:24:
77:c9:da:e5:3c:cd:9a:49:e0:67:70:61:9f:40:ec:
b3:d3:1b:e8:f2:ab:ef:72:f7:96:cb:8e:3c:e4:60:
4d:6e:d8:e9:77:43:21:42:26:22:36:db:51:f1:ec:
0c:5a:91:2d:12:9f:e8:12:51:c2:4b:c2:ef:03:7a:
52:33:75:a9:ea:b3:9a:49:c4:d7:12:ce:7b:9d:3e:
26:3b:38:ba:b1:67:be:dc:ed:90:cd:b4:6b:0f:14:
f4:95:30:3b:d4:5a:ba:98:3c:0c:63:be:03:a0:48:
8e:93:10:48:85:42:66:bc:29:89:ff:05:82:eb:dc:
8e:e4:d1:f7:ca:e8:0a:8c:db:16:25:67:d6:1d:af:
78:b9:94:7f:57:c0:00:a9:c3:f4:b7:13:d0:67:95:
bf:ba:8f:9a:a4:fb:0b:c6:bb:dc:6c:38:f7:31:23:
57:0a:13:ec:82:f3:ce:42:7c:b4:8f:5d:ee:00:80:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AE:09:FF:0B:BB:E7:D8:2C:BC:D2:E6:F4:08:5C:BE:FE:6B:C7:CA
X509v3 Authority Key Identifier:
keyid:25:C7:A5:2C:D5:56:29:4D:17:4D:38:73:BD:F2:92:43:64:EB:C9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcelLNVWKU0XTThzvfKSQ2TryRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/264J_wu759gsvNLm9Ahcvv5rx8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/JcelLNVWKU0XTThzvfKSQ2TryRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1f:a3:a7:b0:48:ab:fb:f3:21:4e:ec:a2:60:64:4e:9f:c3:
48:2e:84:f3:0c:dd:30:69:33:ed:1f:15:4b:11:ee:22:a9:a0:
70:74:00:c6:c0:a8:3b:89:fb:88:b1:47:f6:bc:cd:e8:dc:a2:
63:1f:59:49:0c:83:41:cb:0c:5e:40:76:75:f9:c9:9b:2e:fc:
73:32:1b:a7:cb:a5:69:d9:7b:ed:f3:78:f0:91:e6:c2:a9:c9:
a9:23:2c:ca:fd:e2:55:9c:7c:ff:22:ee:7c:34:41:16:92:eb:
4c:dd:f4:2a:01:b2:50:c1:46:ef:56:a8:a0:53:e7:f4:67:15:
ff:2a:82:ca:d4:2a:b2:a9:82:97:b6:53:de:b0:46:b9:5b:fd:
b9:b8:04:47:3e:9e:f0:2d:d1:dc:b0:1e:13:9d:d7:0c:74:97:
a2:b1:ad:7b:ea:96:94:28:8c:30:10:5b:16:8f:46:4c:b3:ba:
90:e0:38:ac:81:26:65:6a:40:2d:1c:e1:af:d8:cf:ce:69:8b:
ec:2b:c2:b1:7d:59:2e:0e:3c:d8:7f:3f:5e:15:d8:5f:17:ef:
21:2e:bc:87:df:1b:62:b8:e9:8e:b4:7e:c9:eb:2c:9f:3d:db:
d0:db:be:a1:2d:83:30:ce:69:48:2a:f4:46:d6:cc:7b:0c:31:
0f:37:00:31
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDfA+IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1
YzdhNTJjZDU1NjI5NGQxNzRkMzg3M2JkZjI5MjQzNjRlYmM5MWIwHhcNMjIwMTAx
MDM1OTI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkYmFlMDlmZjBiYmJl
N2Q4MmNiY2QyZTZmNDA4NWNiZWZlNmJjN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3WY+UsMCIXdJHW61ZpPzLjatHKv7lBHiWLJm/hV7iMwyiOCt
2uAm5/fFa9c57TJonfL1NRI60TAwlz/Vl2vFUy8IgOk9VwjL2CR3ydrlPM2aSeBn
cGGfQOyz0xvo8qvvcveWy4485GBNbtjpd0MhQiYiNttR8ewMWpEtEp/oElHCS8Lv
A3pSM3Wp6rOaScTXEs57nT4mOzi6sWe+3O2QzbRrDxT0lTA71Fq6mDwMY74DoEiO
kxBIhUJmvCmJ/wWC69yO5NH3yugKjNsWJWfWHa94uZR/V8AAqcP0txPQZ5W/uo+a
pPsLxrvcbDj3MSNXChPsgvPOQny0j13uAIAJYwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNuuCf8Lu+fYLLzS5vQIXL7+a8fKMB8GA1UdIwQYMBaAFCXHpSzVVilNF004
c73ykkNk68kbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SmNlbExOVldLVTBYVFRoenZmS1NRMlRyeVJzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iMi9mNDQ5ZmQtZDc3NS00MDc3LTgyNTUtMmE3OGMyZmViZjNkLzEv
MjY0Sl93dTc1OWdzdk5MbTlBaGN2djVyeDhvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9m
NDQ5ZmQtZDc3NS00MDc3LTgyNTUtMmE3OGMyZmViZjNkLzEvSmNlbExOVldLVTBY
VFRoenZmS1NRMlRyeVJzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQXMA0GCSqGSIb3DQEBCwUAA4IB
AQCbH6OnsEir+/MhTuyiYGROn8NILoTzDN0waTPtHxVLEe4iqaBwdADGwKg7ifuI
sUf2vM3o3KJjH1lJDINBywxeQHZ1+cmbLvxzMhuny6Vp2Xvt83jwkebCqcmpIyzK
/eJVnHz/Iu58NEEWkutM3fQqAbJQwUbvVqigU+f0ZxX/KoLK1CqyqYKXtlPesEa5
W/25uARHPp7wLdHcsB4TndcMdJeisa176paUKIwwEFsWj0ZMs7qQ4DisgSZlakAt
HOGv2M/OaYvsK8KxfVkuDjzYfz9eFdhfF+8hLryH3xtiuOmOtH7J6yyfPdvQ276h
LYMwzmlIKvRG1sx7DDEPNwAx
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:39 2025 by rpki-client