Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/eg_qmfRP6Wc4g2j2GGUguFElzKs.roa
File: eg_qmfRP6Wc4g2j2GGUguFElzKs.roa (raw, json)
Hash identifier: x4mrNd8wfTkGW2WJ/JzWtWsRCpA6FC+AdC5gEeahqf8=
Subject key identifier: 7A:0F:EA:99:F4:4F:E9:67:38:83:68:F6:18:65:20:B8:51:25:CC:AB
Certificate issuer: /CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Certificate serial: B2272E
Authority key identifier: 3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/eg_qmfRP6Wc4g2j2GGUguFElzKs.roa
Signing time: Sat 01 Jan 2022 13:01:56 +0000
ROA not before: Sat 01 Jan 2022 13:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 212.12.160.0/24 maxlen: 24
212.12.178.0/24 maxlen: 24
212.12.182.0/24 maxlen: 24
88.85.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11675438 (0xb2272e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Validity
Not Before: Jan 1 13:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a0fea99f44fe967388368f6186520b85125ccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:87:81:0a:d9:d1:fc:e2:e5:66:e5:69:bb:
ea:04:10:e6:d1:66:28:07:95:3f:31:e8:22:73:b3:
ad:85:f0:16:99:bb:ad:c9:a1:c4:83:f8:f6:90:f4:
ef:8e:79:81:20:d1:7b:43:95:bb:78:8b:4c:3c:8c:
50:4b:4a:e3:c4:91:21:d9:01:1c:c2:0f:b9:26:2a:
99:5f:5f:75:27:16:62:85:2e:5f:38:6a:6e:be:10:
4c:a7:9c:11:18:ca:cd:65:84:19:77:a5:c0:43:37:
d4:9b:4a:b6:d2:41:c4:88:31:df:65:07:e3:d5:d8:
6c:9e:9e:a4:54:d3:6d:a3:d1:01:53:f7:ba:22:8c:
19:3f:54:f7:71:4e:bc:84:7f:15:30:bf:bc:4d:0e:
cc:eb:15:f3:f1:c4:62:b5:51:2e:dd:60:5c:7e:6c:
22:00:0f:70:30:37:1c:0f:47:c2:c9:8a:01:78:78:
05:e5:bb:20:5a:e2:a0:9d:d9:82:e7:cf:66:2c:be:
62:2b:62:68:45:92:68:c5:58:c2:48:6c:38:26:55:
09:8b:3d:30:b2:0e:1a:bf:fa:f1:40:7a:8b:8f:8b:
ad:93:f0:7b:6f:02:11:d4:d8:30:54:3d:c4:60:6f:
0d:2d:50:47:3c:78:0f:be:89:6d:ec:6a:75:53:09:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:EA:99:F4:4F:E9:67:38:83:68:F6:18:65:20:B8:51:25:CC:AB
X509v3 Authority Key Identifier:
keyid:3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/eg_qmfRP6Wc4g2j2GGUguFElzKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.85.252.0/24
212.12.160.0/24
212.12.178.0/24
212.12.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:03:b1:e7:f0:4d:ae:ba:f7:23:87:54:53:f7:57:28:4e:ff:
0e:e6:28:bb:0d:f4:a6:3b:ef:42:ff:95:29:72:89:1d:51:dc:
e5:3e:6d:46:87:50:42:7a:d6:9d:f0:7c:ea:bf:9c:34:2f:4a:
53:51:2a:e5:84:a4:6a:ae:16:08:38:ca:82:89:0f:1b:7a:51:
e7:a8:f7:4e:6b:40:fe:38:2f:a2:9c:f1:47:18:09:60:bf:28:
8f:b2:bc:39:4b:75:4e:8b:16:7e:7c:3c:61:e2:e6:6c:92:a7:
ab:76:db:14:52:29:a6:ae:e7:8a:04:66:af:33:35:13:bd:76:
04:9b:11:80:96:54:ff:02:63:84:2c:f1:e9:f1:08:4c:32:7d:
11:89:b8:59:c3:c0:7f:c8:35:a7:9b:0c:93:4d:b7:b2:27:01:
14:23:48:bd:f7:47:d4:03:37:18:98:46:2f:09:bf:53:8d:35:
5b:15:3d:1d:dc:13:08:fa:fb:57:df:bf:20:4a:af:c1:17:79:
df:26:82:e4:cf:9d:45:e3:56:62:f5:73:0e:44:31:53:3d:15:
41:cc:a1:8f:7d:3f:64:52:69:13:4b:8c:d6:c0:01:e4:ea:dd:
1e:cf:48:00:cd:b9:81:32:6b:00:17:d2:70:d0:f4:f2:e5:c2:
ee:e4:8f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:25 2025 by rpki-client