Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/39JKIfKrg-FtnGzVEc-4CP0zYyw.roa
File: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (raw, json)
Hash identifier: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=
Subject key identifier: DF:D2:4A:21:F2:AB:83:E1:6D:9C:6C:D5:11:CF:B8:08:FD:33:63:2C
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 019424457A67A24D3DAD9FF2B7D3212E56F0
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/39JKIfKrg-FtnGzVEc-4CP0zYyw.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8798
IP address blocks: 212.69.64.0/21 maxlen: 21
212.69.72.0/22 maxlen: 22
212.69.76.0/24 maxlen: 24
212.69.78.0/23 maxlen: 23
212.69.80.0/23 maxlen: 23
2001:4028::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7a:67:a2:4d:3d:ad:9f:f2:b7:d3:21:2e:56:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfd24a21f2ab83e16d9c6cd511cfb808fd33632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:f2:7d:7b:7b:13:90:48:ce:0b:61:07:2e:
b5:d9:be:09:96:9d:72:c3:7a:2b:2a:27:2d:e6:aa:
1d:58:28:d9:51:8b:a7:37:32:f8:16:f2:cc:97:eb:
45:de:52:1b:01:9e:e5:be:71:43:05:6e:72:af:1c:
6c:a2:66:82:b8:9f:19:5d:12:93:e8:81:a9:d6:ab:
66:8c:fa:a4:02:57:8e:3d:76:08:dd:60:89:30:d7:
d7:82:f9:8b:37:43:4a:a7:18:40:ee:b3:96:3c:ff:
51:97:1c:65:df:49:0c:89:b3:ae:7f:ba:5a:bc:19:
00:79:0a:3b:b2:d7:c8:f1:ac:6e:58:7b:b5:bb:7c:
55:fd:a9:cb:1f:55:2a:40:f1:e5:3d:9a:81:0e:6a:
97:5c:4d:ae:bb:2f:f5:19:5b:18:56:4e:ba:db:26:
20:e0:85:4a:bf:15:5b:8f:31:22:ce:ca:47:1c:59:
ae:7f:26:a6:ea:e4:80:e1:df:5c:bd:0c:e4:b1:55:
77:b5:94:ff:19:bf:d7:9d:7a:d4:80:8a:15:96:64:
14:bc:06:91:f8:03:6c:90:e1:2a:48:d8:46:2a:19:
f1:7c:05:60:29:35:6a:32:f7:ae:5a:e8:f6:6c:74:
cf:dd:f5:32:78:86:9b:1b:02:51:04:7b:f6:99:60:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:4A:21:F2:AB:83:E1:6D:9C:6C:D5:11:CF:B8:08:FD:33:63:2C
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/39JKIfKrg-FtnGzVEc-4CP0zYyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.64.0-212.69.76.255
212.69.78.0-212.69.81.255
IPv6:
2001:4028::/29
Signature Algorithm: sha256WithRSAEncryption
11:a5:8c:70:7a:aa:d8:22:e8:cc:45:36:3b:71:1b:45:9b:59:
35:b7:9e:35:59:c4:b9:9b:54:ca:6d:9e:dc:7d:61:d0:5c:07:
4f:6e:6b:fa:70:e0:e7:a4:de:e6:d0:3f:7c:fe:a6:ca:77:19:
20:6f:aa:41:3c:64:ed:bc:6a:29:8c:de:11:97:5b:db:08:c1:
e7:07:a6:19:35:48:c8:9c:44:f0:84:a4:c8:c5:f9:ee:02:ed:
73:05:b4:4d:91:9c:aa:9e:63:69:51:1e:8c:ac:c5:2c:6a:aa:
34:11:f3:89:ab:c9:e7:1b:65:b6:63:5e:34:79:6c:54:6b:0b:
87:a8:5f:04:23:a8:06:61:45:04:bb:ec:4f:ba:80:2d:c5:47:
27:db:5a:08:aa:ac:ad:94:12:86:75:e2:1a:c6:66:73:ae:ef:
97:ae:28:1e:19:26:62:48:42:4c:14:78:0c:46:c3:a8:37:96:
db:41:9f:94:3e:1e:ba:b2:ab:df:13:82:76:7e:53:64:c3:36:
b0:40:bc:0e:a8:7a:c1:9e:18:b9:66:16:d1:24:ae:87:50:3e:
a1:50:62:b4:c1:33:c6:64:09:57:98:73:fd:43:e3:f8:99:a3:
ec:dc:d3:28:bd:bb:39:94:bd:c7:f3:8a:7d:f6:17:13:3d:da:
5b:72:c4:6c
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQkRXpnok09rZ/yt9MhLlbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz
NjJmZmMwHhcNMjUwMTAxMjM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmQyNGEyMWYyYWI4M2UxNmQ5YzZjZDUxMWNmYjgwOGZkMzM2MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOLyfXt7E5BIzgthBy612b4Jlp1y
w3orKict5qodWCjZUYunNzL4FvLMl+tF3lIbAZ7lvnFDBW5yrxxsomaCuJ8ZXRKT
6IGp1qtmjPqkAleOPXYI3WCJMNfXgvmLN0NKpxhA7rOWPP9Rlxxl30kMibOuf7pa
vBkAeQo7stfI8axuWHu1u3xV/anLH1UqQPHlPZqBDmqXXE2uuy/1GVsYVk662yYg
4IVKvxVbjzEizspHHFmufyam6uSA4d9cvQzksVV3tZT/Gb/XnXrUgIoVlmQUvAaR
+ANskOEqSNhGKhnxfAVgKTVqMveuWuj2bHTP3fUyeIabGwJRBHv2mWAxIQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFN/SSiHyq4PhbZxs1RHPuAj9M2MsMB8GA1UdIwQY
MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3
LTQwYzFhNzI3MDJlZi8xLzM5SktJZktyZy1GdG5HelZFYy00Q1Awell5dy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3LTQwYzFhNzI3MDJl
Zi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwRAYIKwYBBQUHAQcBAf8ENTAzMCIEAgABMBwwDAMEBtRF
QAMEANRFTDAMAwQB1EVOAwQB1EVQMA0EAgACMAcDBQMgAUAoMA0GCSqGSIb3DQEB
CwUAA4IBAQARpYxweqrYIujMRTY7cRtFm1k1t541WcS5m1TKbZ7cfWHQXAdPbmv6
cODnpN7m0D98/qbKdxkgb6pBPGTtvGopjN4Rl1vbCMHnB6YZNUjInETwhKTIxfnu
Au1zBbRNkZyqnmNpUR6MrMUsaqo0EfOJq8nnG2W2Y140eWxUawuHqF8EI6gGYUUE
u+xPuoAtxUcn21oIqqytlBKGdeIaxmZzru+XrigeGSZiSEJMFHgMRsOoN5bbQZ+U
Ph66sqvfE4J2flNkwzawQLwOqHrBnhi5ZhbRJK6HUD6hUGK0wTPGZAlXmHP9Q+P4
maPs3NMovbs5lL3H84p99hcTPdpbcsRs
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:40 2025 by rpki-client