Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/o8Doa2izGBu3NhtTdoqgTSo6eFg.roa
File: o8Doa2izGBu3NhtTdoqgTSo6eFg.roa (raw, json)
Hash identifier: MpBcUgHdTsCyU2OtmXlWpVkafd8Smc2+LDToJRh8YAQ=
Subject key identifier: A3:C0:E8:6B:68:B3:18:1B:B7:36:1B:53:76:8A:A0:4D:2A:3A:78:58
Certificate issuer: /CN=eb78a51f95e5a2bdca00792bff49323d1783a595
Certificate serial: 016CC322
Authority key identifier: EB:78:A5:1F:95:E5:A2:BD:CA:00:79:2B:FF:49:32:3D:17:83:A5:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ilH5Xlor3KAHkr_0kyPReDpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/o8Doa2izGBu3NhtTdoqgTSo6eFg.roa
Signing time: Sat 01 Jan 2022 09:55:09 +0000
ROA not before: Sat 01 Jan 2022 09:55:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6876
IP address blocks: 212.24.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23905058 (0x16cc322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb78a51f95e5a2bdca00792bff49323d1783a595
Validity
Not Before: Jan 1 09:55:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3c0e86b68b3181bb7361b53768aa04d2a3a7858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:b1:8c:f3:c4:b3:42:3d:90:6d:51:57:1a:
dd:57:46:dc:a6:cf:a2:10:09:be:d6:eb:47:82:40:
fa:12:e1:aa:e8:36:37:2f:3d:84:e7:2d:6f:8f:93:
8f:49:35:53:95:d9:95:ce:5d:97:e9:07:39:98:96:
95:32:5d:72:ee:f6:a9:66:da:85:05:5d:8a:62:4c:
be:40:a1:31:1e:2e:9b:5c:93:ef:7e:c2:d5:1a:fb:
ea:cc:97:58:9a:47:cb:01:b5:17:06:6d:44:81:58:
81:d0:5c:4d:42:d9:d3:8f:46:36:13:1a:46:4f:64:
f4:b1:28:87:0a:5e:11:55:50:cf:5c:44:82:53:88:
b7:3e:81:e2:18:bd:88:21:d7:3e:92:e6:87:eb:7d:
80:42:6f:fe:d5:ec:9b:ef:9c:20:e5:86:58:c1:6f:
63:dc:f3:cd:88:b6:7d:50:8e:87:ae:12:b1:32:32:
a0:29:fc:ba:b5:f8:51:8e:b5:3d:8a:99:47:81:5d:
9a:a5:89:f4:8e:3c:14:0f:ec:d2:7d:02:0f:58:5f:
60:04:1f:de:51:bb:7d:57:f2:7c:18:b2:ab:d7:af:
63:57:86:df:ca:85:bc:b2:b0:12:96:ac:57:fa:a4:
2b:3c:17:48:dd:36:88:00:86:2c:06:62:9a:99:13:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:E8:6B:68:B3:18:1B:B7:36:1B:53:76:8A:A0:4D:2A:3A:78:58
X509v3 Authority Key Identifier:
keyid:EB:78:A5:1F:95:E5:A2:BD:CA:00:79:2B:FF:49:32:3D:17:83:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ilH5Xlor3KAHkr_0kyPReDpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/o8Doa2izGBu3NhtTdoqgTSo6eFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/63ilH5Xlor3KAHkr_0kyPReDpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:25:37:1d:20:19:2b:08:d9:11:56:3c:7b:2b:2f:ea:62:20:
a3:07:a6:9f:11:23:47:fd:11:d1:94:4c:28:b2:1f:c7:14:a8:
69:58:32:57:f8:96:5d:97:af:91:86:5b:f1:40:87:84:6c:c9:
19:e0:f0:aa:8e:ae:82:ec:be:03:35:4e:3d:41:60:86:11:a4:
cb:a3:d8:77:08:77:46:5d:90:67:30:53:67:f3:d4:a2:85:33:
88:50:08:ba:6f:da:0b:53:d4:92:75:66:a3:70:57:e8:c8:97:
ce:bc:38:a9:30:5d:3a:ae:0d:29:f1:ee:5c:98:c5:16:56:88:
8c:ba:6f:72:66:e3:48:ca:ff:65:74:ff:61:80:a8:b3:85:94:
5d:4e:8d:ac:cb:d2:ce:ea:de:fb:5f:29:5e:6b:13:75:4a:06:
1b:d5:65:95:c1:bd:3c:4b:f1:7b:e6:61:9e:e3:da:79:32:49:
89:76:aa:56:db:35:d0:5b:89:a3:1f:7b:83:33:c7:2d:3b:91:
8f:0b:63:19:bc:0d:42:3e:44:a2:4f:f4:24:3a:e6:5e:75:da:
53:40:2d:37:37:ac:59:2d:29:57:b3:11:31:ea:3c:68:b9:59:
aa:aa:64:dd:d3:44:17:5d:a3:df:7f:d9:bd:95:31:dd:57:f5:
85:99:b1:e8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWzDIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Yjc4YTUxZjk1ZTVhMmJkY2EwMDc5MmJmZjQ5MzIzZDE3ODNhNTk1MB4XDTIyMDEw
MTA5NTUwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTNjMGU4NmI2OGIz
MTgxYmI3MzYxYjUzNzY4YWEwNGQyYTNhNzg1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANpssYzzxLNCPZBtUVca3VdG3KbPohAJvtbrR4JA+hLhqug2
Ny89hOctb4+Tj0k1U5XZlc5dl+kHOZiWlTJdcu72qWbahQVdimJMvkChMR4um1yT
737C1Rr76syXWJpHywG1FwZtRIFYgdBcTULZ049GNhMaRk9k9LEohwpeEVVQz1xE
glOItz6B4hi9iCHXPpLmh+t9gEJv/tXsm++cIOWGWMFvY9zzzYi2fVCOh64SsTIy
oCn8urX4UY61PYqZR4FdmqWJ9I48FA/s0n0CD1hfYAQf3lG7fVfyfBiyq9evY1eG
38qFvLKwEpasV/qkKzwXSN02iACGLAZimpkTScMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSjwOhraLMYG7c2G1N2iqBNKjp4WDAfBgNVHSMEGDAWgBTreKUfleWivcoA
eSv/STI9F4OllTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYzaWxINVhsb3IzS0FIa3JfMGt5UFJlRHBaVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvNzQ2MzdhLWNmNzUtNGYwOC04ZmM3LTAzYTQ1MDBlMTA0MC8x
L284RG9hMml6R0J1M05odFRkb3FnVFNvNmVGZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
NzQ2MzdhLWNmNzUtNGYwOC04ZmM3LTAzYTQ1MDBlMTA0MC8xLzYzaWxINVhsb3Iz
S0FIa3JfMGt5UFJlRHBaVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQYcDANBgkqhkiG9w0BAQsFAAOC
AQEAnyU3HSAZKwjZEVY8eysv6mIgowemnxEjR/0R0ZRMKLIfxxSoaVgyV/iWXZev
kYZb8UCHhGzJGeDwqo6uguy+AzVOPUFghhGky6PYdwh3Rl2QZzBTZ/PUooUziFAI
um/aC1PUknVmo3BX6MiXzrw4qTBdOq4NKfHuXJjFFlaIjLpvcmbjSMr/ZXT/YYCo
s4WUXU6NrMvSzure+18pXmsTdUoGG9VllcG9PEvxe+ZhnuPaeTJJiXaqVts10FuJ
ox97gzPHLTuRjwtjGbwNQj5Eok/0JDrmXnXaU0AtNzesWS0pV7MRMeo8aLlZqqpk
3dNEF12j33/ZvZUx3Vf1hZmx6A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:55 2025 by rpki-client