Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa
File: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (raw, json)
Hash identifier: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=
Subject key identifier: 41:D6:08:C1:B8:60:5D:91:59:0C:6A:EC:0F:56:C2:7D:69:C9:7C:D3
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019425FC3C68EA6AF806D89BC193D3A1B13E
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 212.231.178.0/23 maxlen: 23
212.231.180.0/23 maxlen: 23
212.231.182.0/23 maxlen: 23
212.231.208.0/22 maxlen: 22
212.231.212.0/22 maxlen: 22
212.231.216.0/22 maxlen: 22
212.231.220.0/22 maxlen: 22
212.231.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3c:68:ea:6a:f8:06:d8:9b:c1:93:d3:a1:b1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41d608c1b8605d91590c6aec0f56c27d69c97cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:09:76:5b:9b:13:12:01:d3:f0:bf:70:da:
f2:5a:98:ab:28:27:1d:74:30:ae:d6:42:15:81:65:
98:18:15:2f:e9:be:fc:b2:2e:ca:3f:6d:11:6d:0b:
bc:23:d1:b2:8c:a5:27:67:95:0d:80:33:88:d4:26:
07:37:ab:f8:a0:d4:17:fa:e6:bb:17:55:03:5e:a4:
12:5a:db:e0:1d:78:7f:02:ad:19:74:d6:2f:11:0c:
b5:c7:96:4f:3b:3e:25:74:a5:a6:61:6d:5e:38:90:
ee:d3:c2:07:e1:fd:c2:7d:01:27:e4:32:f4:09:96:
95:42:7e:52:ce:3d:7b:15:8f:11:89:98:5c:d7:1e:
e3:e0:16:fe:2e:ed:f6:b9:a4:07:c6:cc:dd:e0:b7:
71:38:74:4a:23:d5:af:03:48:1b:6d:82:ff:e8:7b:
c0:40:88:99:f9:29:19:5c:f8:3d:c1:d8:90:a6:c7:
29:22:3a:7b:41:14:0e:02:8a:c1:23:16:ea:54:19:
b2:24:6b:3c:30:8b:71:a2:75:94:0d:68:ab:f9:ef:
ef:d0:c1:ec:26:12:4a:52:c9:28:6e:75:f8:62:a9:
2d:76:db:ce:04:25:13:67:cc:9b:3f:f7:b0:77:5b:
d8:95:e7:0d:3d:37:ea:fc:43:0c:e9:f3:3d:b0:56:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D6:08:C1:B8:60:5D:91:59:0C:6A:EC:0F:56:C2:7D:69:C9:7C:D3
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.231.178.0-212.231.183.255
212.231.208.0/20
212.231.232.0/21
Signature Algorithm: sha256WithRSAEncryption
19:49:fd:ed:ab:ee:6a:6c:6f:22:30:23:1a:3d:03:61:48:4c:
55:a3:c1:6d:e9:3e:fa:46:e2:88:0b:c2:61:12:d4:75:0d:00:
a5:57:bc:94:b7:25:9b:21:d0:d1:50:17:c7:f1:f5:be:b5:c7:
62:72:2b:cf:ce:4d:17:d1:cf:e5:6d:75:1f:97:45:e4:9c:bb:
cc:d6:97:3f:c5:f4:3c:6e:8b:1c:e2:e8:e7:b8:12:0d:98:7a:
56:5b:bb:a5:5b:46:5f:3e:62:c9:a4:f9:28:28:7a:43:02:52:
3c:c2:2a:53:93:10:bc:a8:60:2a:19:5c:0b:45:0a:72:06:b8:
f0:b9:50:f9:01:a0:74:db:0e:c6:94:10:b0:fe:de:88:3b:d3:
fd:06:8a:83:fd:3d:17:81:2a:03:fc:d0:4b:53:f2:31:12:5a:
4b:36:24:c9:84:ec:03:93:f8:62:cc:e3:14:61:00:9e:91:b0:
9f:be:9a:be:ff:59:72:10:ba:b9:80:1f:96:e1:bb:b1:0b:55:
9e:49:bd:be:b0:65:68:78:55:91:91:37:1a:54:d0:74:0f:ac:
1e:2e:8e:0b:ba:4c:12:da:59:14:01:5a:fe:1b:db:94:43:26:
11:72:1d:b8:60:53:02:d3:17:f2:0c:f7:3c:3b:6c:91:ef:54:
0a:f4:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:04 2025 by rpki-client