Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa
File: zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa (raw, json)
Hash identifier: gNyfXx018kULloOwGFLfmzefXCbqCOiY4gpRitRdbz8=
Subject key identifier: CC:C8:B9:29:CF:AD:A4:E3:17:73:F6:53:CE:B9:EE:75:82:37:57:5C
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 0194228DC7A7563E2A5CE479FAE7749DE6B9
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa
Signing time: Wed 01 Jan 2025 15:48:24 +0000
ROA not before: Wed 01 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205975
IP address blocks: 80.79.48.0/20 maxlen: 24
147.189.155.0/24 maxlen: 24
176.10.0.0/20 maxlen: 24
212.46.58.0/24 maxlen: 24
2a12:f40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c7:a7:56:3e:2a:5c:e4:79:fa:e7:74:9d:e6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc8b929cfada4e31773f653ceb9ee758237575c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:44:c3:e9:5a:fa:9f:1f:fa:71:e2:fe:77:
8e:bc:0d:33:b0:eb:5a:b4:11:3a:f5:8c:f7:b0:a5:
41:de:00:95:fa:0b:bf:26:6e:a4:95:6b:06:68:a7:
8f:07:5e:0a:b9:eb:6b:b5:bb:5c:0b:30:c9:8d:c9:
87:02:1d:7f:c6:fb:05:b8:35:d3:6e:94:f2:ce:a4:
25:27:e8:27:c6:49:40:39:76:41:8f:f2:80:fc:92:
bf:dd:90:76:32:d9:38:ae:06:e5:3f:5e:ce:5c:97:
c4:f2:95:cb:68:9b:75:be:42:94:b8:da:fd:2d:ca:
67:21:64:3c:3b:f5:0e:fd:d9:83:11:3d:31:96:9a:
45:fe:6e:26:d0:24:05:04:06:8d:e9:3f:5d:79:9f:
d8:2b:1e:1c:8d:0f:f8:78:cc:ce:45:fe:ba:13:d3:
fd:b4:3a:cd:c6:87:20:13:1c:4e:84:59:75:f1:fe:
ad:57:27:2b:91:33:82:f5:45:71:d4:b2:dc:81:2e:
07:c5:15:dd:f6:2b:48:da:66:e4:25:b3:1d:bf:76:
a2:e0:d3:97:0d:b6:ed:e8:dc:c4:2a:a1:87:12:94:
94:c8:1a:46:43:93:ca:c2:1e:e6:a5:53:93:7a:eb:
f8:64:73:8a:cc:9a:52:2a:5a:62:44:67:a8:e1:49:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:B9:29:CF:AD:A4:E3:17:73:F6:53:CE:B9:EE:75:82:37:57:5C
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.48.0/20
147.189.155.0/24
176.10.0.0/20
212.46.58.0/24
IPv6:
2a12:f40::/29
Signature Algorithm: sha256WithRSAEncryption
9e:0a:08:81:48:4d:57:db:5d:89:cd:23:4a:bf:81:0c:f5:a2:
bd:7a:24:fb:60:a0:63:12:6b:8d:b4:82:c0:31:de:75:fd:5e:
40:19:c4:66:6b:6e:81:28:e1:d2:09:2e:4b:43:24:0d:df:e7:
1a:3e:1a:50:b7:5e:0a:ca:83:8d:11:b3:d2:ed:5d:bf:d9:fd:
78:1c:20:0d:a3:69:3a:0c:d9:eb:a4:af:0b:af:b4:5e:0b:d2:
f0:45:3e:04:67:24:3e:02:cb:6f:3f:40:cf:4c:c2:a4:25:95:
33:3e:34:e8:15:8e:bc:49:ef:ec:04:99:bb:f9:4c:a0:1b:ab:
24:34:c8:df:2c:d7:84:8c:f0:7d:ab:37:33:7a:56:28:1e:7b:
e2:d1:42:91:91:69:67:e6:4f:83:ef:aa:2c:a6:6b:a4:bf:1b:
58:91:1a:a6:4d:bb:9c:f4:3f:c4:2b:e6:f5:04:4e:2c:f5:ea:
b7:86:97:94:49:8a:17:5e:06:2b:e0:57:ac:8c:fe:39:df:39:
c2:dd:5b:78:00:14:b5:2a:ab:a3:4d:15:dc:6b:7e:72:4b:bc:
21:88:ee:2c:93:23:2a:06:30:78:6f:f7:73:ba:ae:cc:b7:30:
07:1a:49:d6:35:39:90:c3:91:ef:fa:12:ce:1f:ae:88:3d:f4:
2f:56:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:50 2025 by rpki-client