Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa
File: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (raw, json)
Hash identifier: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=
Subject key identifier: 8E:72:C6:58:A6:FC:8A:08:10:97:E5:5B:D0:2C:CD:9C:91:B7:0B:2E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01942826476912194655882B25151D7A9BCB
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa
Signing time: Thu 02 Jan 2025 17:53:04 +0000
ROA not before: Thu 02 Jan 2025 17:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:47:69:12:19:46:55:88:2b:25:15:1d:7a:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e72c658a6fc8a081097e55bd02ccd9c91b70b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:9a:02:c8:84:35:a0:9a:96:92:ac:fb:1c:
dc:9b:a3:e4:ad:24:0b:d9:be:0f:41:37:53:22:f0:
d1:3b:ae:93:b1:af:55:9d:d1:1e:4d:2d:72:f5:8e:
0e:04:bb:71:ca:d7:bc:7b:d9:f6:30:00:92:3e:2f:
23:e5:5a:f4:14:a1:a5:88:39:36:41:37:4d:31:3b:
2b:df:11:3a:45:86:1a:38:a4:54:0b:a3:26:43:33:
79:a6:c8:94:6b:62:68:80:90:51:c4:69:32:e7:e5:
1b:5a:a3:ce:4a:af:4c:8c:f9:3a:ba:5d:f9:2a:cb:
5f:a2:71:64:e8:af:73:96:6b:c1:18:e9:b1:6e:2e:
6c:99:2c:30:6a:3a:5d:c7:ab:b3:2b:ef:11:91:dd:
5f:26:5c:83:31:ee:1d:fc:65:0e:52:d7:c3:53:80:
f1:3e:55:5c:42:0c:b2:d7:c3:64:46:be:d0:9d:58:
ff:92:55:6d:fe:79:62:6b:8b:2a:2f:9c:86:16:81:
41:f4:99:2d:2a:b7:d5:43:0f:ec:5a:65:dd:ec:1a:
15:20:89:84:1b:5b:4b:ce:23:b5:dd:85:97:d0:0f:
79:bb:8f:15:90:80:55:05:ae:37:8a:44:1a:43:3a:
9b:cf:8b:33:88:47:a1:29:4b:ca:9d:3f:fe:9a:5b:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:C6:58:A6:FC:8A:08:10:97:E5:5B:D0:2C:CD:9C:91:B7:0B:2E
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8c:84:0b:00:7e:19:38:2e:fa:25:20:d1:5a:85:09:62:3c:
8a:cf:ee:36:0e:11:27:9d:a4:84:45:c3:f9:ce:e9:96:c6:16:
8f:54:2d:2e:1c:0f:66:81:44:6d:94:2c:c0:f5:df:4b:56:cd:
f4:5a:6f:1c:25:12:ea:ea:c1:c5:a2:be:cc:0e:cf:c6:7a:ac:
83:61:19:30:33:1d:1f:8d:df:9e:64:6a:4d:09:70:b5:fd:a2:
4b:e6:e5:db:d2:93:13:16:43:0f:b9:dc:e9:c3:a7:4b:33:08:
6c:c6:7f:5e:8c:9a:54:ff:f2:0d:cc:8c:c0:9a:46:04:3b:32:
3b:2e:21:60:38:a8:70:4f:9b:ea:89:23:42:ea:4e:2f:1e:7e:
e5:70:04:5e:e5:41:f9:e4:0d:e8:f0:d8:23:be:65:aa:67:89:
21:d8:eb:93:10:09:cd:e6:71:8c:ad:e3:88:c5:25:ad:71:43:
09:58:d7:12:1b:cc:33:6a:55:a3:f0:cb:98:78:bf:83:a8:36:
4d:f2:b7:60:7e:d5:23:d4:6d:bb:09:5c:d4:08:37:32:21:e0:
7b:b5:48:a7:d0:57:9b:59:b3:d2:91:48:c4:f8:97:67:f2:68:
91:14:e6:0e:2f:0a:a7:53:6e:c3:05:fe:40:ae:43:40:04:ab:
14:3c:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:03 2025 by rpki-client