Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/cO2-NOuH2RV4sPciOdoA32su67Q.roa
File: cO2-NOuH2RV4sPciOdoA32su67Q.roa (raw, json)
Hash identifier: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=
Subject key identifier: 70:ED:BE:34:EB:87:D9:15:78:B0:F7:22:39:DA:00:DF:6B:2E:EB:B4
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019425FC3EF580EB73DD14801939C6B357C3
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/cO2-NOuH2RV4sPciOdoA32su67Q.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 212.231.64.0/24 maxlen: 24
212.231.65.0/24 maxlen: 24
212.231.66.0/24 maxlen: 24
212.231.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3e:f5:80:eb:73:dd:14:80:19:39:c6:b3:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70edbe34eb87d91578b0f72239da00df6b2eebb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:52:c5:f5:24:d9:c1:c7:d5:e6:36:be:ba:
c8:9e:2f:a2:04:25:d3:d8:4b:04:ad:0c:28:51:e5:
61:9d:df:e2:64:d4:c9:be:a6:b4:d5:91:ec:e9:ae:
88:09:1f:ed:a8:85:ab:44:81:4a:35:27:d1:e7:bd:
19:2a:b0:39:ac:7a:e1:34:ca:84:14:72:6d:79:e6:
76:c8:58:7f:8b:6b:bd:a3:1b:69:3e:a8:61:2f:cb:
a1:b9:19:49:d7:0d:34:96:63:7d:81:20:b1:5e:01:
86:d8:0d:49:2b:81:aa:6b:a1:ce:20:a6:ab:44:53:
dc:f2:ec:d7:9d:ce:8a:b4:de:e2:6e:e7:92:52:9c:
90:e8:cc:51:f4:87:63:7a:96:c9:6f:0d:b4:0c:ad:
49:4e:e2:ec:52:73:27:81:b2:4b:21:2d:e3:33:85:
67:4c:c2:68:13:47:bc:c1:cb:c9:60:86:95:1e:6f:
fd:e0:6e:75:4b:c8:ef:32:4b:81:17:aa:a3:3d:90:
97:66:f4:10:98:e4:75:f3:58:88:bf:b3:da:0b:79:
3b:6e:07:ea:33:4f:4b:b8:55:73:4a:58:be:9d:0c:
c8:07:a6:d4:8a:f8:c4:93:e8:65:e2:bc:e0:bf:1b:
f4:a3:76:a8:90:94:19:79:f0:5f:ad:f0:de:18:60:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:BE:34:EB:87:D9:15:78:B0:F7:22:39:DA:00:DF:6B:2E:EB:B4
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/cO2-NOuH2RV4sPciOdoA32su67Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.231.64.0-212.231.66.255
212.231.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b9:86:98:9a:c9:56:86:49:59:1f:7c:df:61:c3:5d:c0:29:
54:8a:ff:e0:b7:80:c7:17:47:15:67:87:95:27:81:c2:a0:3b:
25:b8:34:f0:4c:84:88:f9:7a:e3:56:26:c3:e1:5a:b2:94:a6:
5a:92:62:88:db:b0:56:01:88:96:a3:9b:30:a6:5c:2c:a2:cc:
cc:9f:3f:df:5c:73:0d:99:c6:7b:6c:f1:b9:f0:29:a8:c3:02:
a7:c9:55:45:d6:99:c7:f7:26:b5:42:4e:0f:be:86:93:d1:73:
e8:92:79:10:d2:ff:6e:33:08:1e:f9:50:4d:76:9a:f8:a5:dc:
55:e9:e1:6b:5d:b4:66:91:dc:e8:ad:57:21:be:ca:f4:e1:cb:
50:93:97:47:c4:3b:cc:ef:e7:19:d0:e7:7c:bd:fe:cc:d0:ad:
f2:e9:fc:84:49:34:4b:30:c3:e0:77:53:d4:0d:77:d8:dc:58:
d4:2e:7b:46:81:e6:28:d8:54:9d:cf:69:c0:cb:ce:19:1d:e3:
c8:10:0d:ad:29:a2:a4:f7:7a:fe:2d:9d:d7:65:53:c0:82:7b:
a9:b8:90:d7:e3:e6:3c:4d:e4:24:3e:e1:26:25:6b:87:ad:d5:
ef:e2:c3:a4:5d:bc:a0:b0:b1:dd:19:d4:2e:3f:36:88:49:e7:
0f:7c:27:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:34:14 2025 by rpki-client