Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa
File: 9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa (raw, json)
Hash identifier: b6ycNMYfYTSq+8wwlth6XhXq2jeSDZcud5rVJF56Fyg=
Subject key identifier: F6:A8:BD:87:47:FD:46:C0:16:A5:9B:85:73:FB:38:0A:69:36:33:40
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019427B5CF92EAFEE732661ED01894B3D8C5
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12732
IP address blocks: 212.21.71.0/24 maxlen: 24
212.21.92.0/22 maxlen: 24
212.42.236.0/23 maxlen: 24
212.42.242.0/23 maxlen: 24
2001:bf0::/29 maxlen: 32
2001:bf0::/32 maxlen: 32
2001:bf0:40::/48 maxlen: 48
2001:bf0:69::/48 maxlen: 48
2001:bf1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cf:92:ea:fe:e7:32:66:1e:d0:18:94:b3:d8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6a8bd8747fd46c016a59b8573fb380a69363340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:94:b8:3d:f0:00:b4:73:6e:95:b2:ef:ac:
6b:4c:94:4c:7d:cc:58:94:10:a0:72:26:57:e2:2c:
33:07:b2:9f:56:94:a2:39:8f:57:33:1a:97:d8:b4:
7d:23:02:7e:34:af:52:b3:f9:af:16:13:32:f0:20:
36:7a:fc:31:3b:1b:31:8a:33:1a:8b:79:a1:39:b5:
f0:7b:ee:64:45:8a:43:bd:6a:03:a5:80:d0:92:d1:
76:a6:e8:51:5d:12:e1:9f:94:2d:21:6c:78:24:f0:
69:e7:ad:ba:22:80:31:46:76:d3:ff:02:74:40:06:
35:15:2e:8a:4a:b2:85:1a:dd:0d:8e:6c:c7:6a:13:
87:4b:2b:20:89:fa:ab:6e:63:72:bf:96:2e:56:d2:
3a:cc:85:87:35:3e:0e:eb:66:df:40:aa:55:e4:5d:
65:54:3a:76:66:4c:51:92:9c:ba:f9:d1:2f:a0:f9:
a3:e3:24:22:da:25:e8:b6:79:7b:ea:2a:42:b2:65:
65:d0:e9:ec:d2:e9:15:cf:ce:da:d3:bc:5d:39:c3:
df:3a:96:bd:60:8f:86:2b:43:9c:50:a5:bf:8c:ea:
be:8a:25:ba:26:dd:94:2f:75:94:0f:e0:d9:1b:6b:
b0:a0:63:b8:6f:2c:72:8f:83:77:51:b3:7e:76:f0:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:BD:87:47:FD:46:C0:16:A5:9B:85:73:FB:38:0A:69:36:33:40
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.71.0/24
212.21.92.0/22
212.42.236.0/23
212.42.242.0/23
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:7f:a7:fa:09:c0:ce:c5:2b:40:43:ec:ff:b3:ee:70:de:80:
aa:65:ca:4d:9f:ed:00:48:51:ea:cc:0f:6b:31:4b:e8:75:21:
c2:7f:3c:9b:67:8f:2b:50:ec:b7:51:33:c6:40:75:5b:55:0e:
2f:d8:65:e6:93:19:f1:e2:c9:ce:dd:96:9d:d5:ab:77:92:4e:
27:6c:bc:cc:16:a9:28:ef:95:ac:15:cc:e1:b8:b0:f4:09:b0:
c5:db:cb:4b:1a:6a:3d:bf:8b:92:96:b2:4d:f3:54:b9:a9:f4:
25:9e:b0:36:06:06:99:82:47:f6:e9:7a:49:c2:85:f5:57:09:
45:2d:8f:b0:29:5b:6c:c8:50:b6:44:be:93:d3:5e:53:d6:a7:
59:f3:e1:db:38:4d:3a:e6:bb:8f:c9:41:bb:74:be:2c:0a:bf:
ea:bf:0b:14:79:ac:7c:5f:08:9b:be:6d:bc:d1:fe:57:f7:6a:
6d:e8:b0:6b:bb:0d:b7:82:84:db:4e:50:60:71:2d:02:a9:be:
61:96:a6:cc:65:05:d6:5f:39:8f:d4:94:c2:ab:9c:d6:97:a0:
aa:43:28:3e:dd:47:96:de:95:f0:7f:9f:dd:19:7b:69:e5:28:
14:c0:00:82:90:96:0f:48:f3:30:5c:6b:80:f8:b7:77:06:d5:
c8:30:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:52 2025 by rpki-client