Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/Rk7QwHAja0f6pEkjRA9ksHl29iY.roa
File: Rk7QwHAja0f6pEkjRA9ksHl29iY.roa (raw, json)
Hash identifier: Q+iJAT3KxbHHx6XdiiDIURqLWc0lcR/4pqoyP4R3b5I=
Subject key identifier: 46:4E:D0:C0:70:23:6B:47:FA:A4:49:23:44:0F:64:B0:79:76:F6:26
Certificate issuer: /CN=2cac38240bfa5ddafe861328d174c9fd7a4ec761
Certificate serial: EE9045
Authority key identifier: 2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/Rk7QwHAja0f6pEkjRA9ksHl29iY.roa
Signing time: Thu 24 Feb 2022 22:09:28 +0000
ROA not before: Thu 24 Feb 2022 22:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 212.52.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15634501 (0xee9045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac38240bfa5ddafe861328d174c9fd7a4ec761
Validity
Not Before: Feb 24 22:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=464ed0c070236b47faa44923440f64b07976f626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:76:8b:30:2a:72:92:55:af:d9:f9:a3:80:
b0:54:1a:b0:cf:ce:53:1e:36:75:a2:32:7b:ed:ad:
2a:6a:da:0e:58:41:a6:04:24:34:f2:d5:b2:51:46:
61:9c:4f:df:0e:55:af:d3:62:59:fe:49:76:db:55:
40:9f:c9:64:13:e3:1e:2e:fc:f4:54:01:f6:55:8c:
d8:b2:c3:ec:13:21:b5:da:e2:ae:d3:d0:03:94:50:
f4:8c:e5:25:70:28:95:d9:de:fa:24:79:75:c6:5c:
d8:d8:8d:6d:8e:14:80:75:78:8f:19:e4:1a:a0:86:
71:93:20:b4:24:14:29:76:e8:bb:55:7c:6c:01:d8:
3c:2f:5d:f0:b8:ac:95:55:ca:48:f9:f4:d2:a6:15:
3e:45:ca:23:a6:c7:ba:0b:c4:0b:2f:a6:c1:fe:7f:
5d:8b:65:8f:1c:54:b0:0e:c5:fd:d4:dd:9a:1d:ad:
01:6b:b1:23:fc:a3:8d:cd:a1:bc:46:9f:ce:58:55:
61:94:0d:2e:95:32:7b:21:c3:a6:b0:88:35:84:1c:
2d:b4:7e:4e:c6:c9:fa:5f:b7:44:e3:63:ac:42:65:
22:ee:41:8c:f4:75:49:aa:55:07:cb:89:2e:a9:e3:
83:11:48:7d:d1:42:4a:b4:7b:61:b4:f9:0f:ac:a1:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:D0:C0:70:23:6B:47:FA:A4:49:23:44:0F:64:B0:79:76:F6:26
X509v3 Authority Key Identifier:
keyid:2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/Rk7QwHAja0f6pEkjRA9ksHl29iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:33:ab:eb:04:2a:a9:37:cc:eb:ed:fc:44:a7:00:ce:a0:25:
fc:24:5e:0f:46:b5:10:42:8a:f3:c4:71:27:0e:61:18:e0:17:
e0:f8:9b:49:fa:b0:ed:d8:93:ec:85:23:41:48:83:ca:b2:3a:
7b:24:83:0f:63:f7:c1:e7:7e:b1:17:7f:fc:e7:6b:31:a4:8c:
7b:49:d8:67:02:10:b9:22:1c:ba:23:58:78:8e:52:6f:a6:9b:
a1:73:5a:95:81:2a:4f:cc:b9:9f:41:6e:a8:83:13:7d:b0:da:
ec:20:df:d7:e8:40:be:83:9b:b9:fa:68:c0:61:42:27:0c:53:
ca:8b:bd:55:3c:b6:7b:87:b9:94:5a:20:8f:51:39:73:92:75:
8a:20:f8:97:b9:3b:e1:39:62:87:40:a6:5a:7a:4f:84:79:78:
96:51:b5:53:bd:0d:26:5f:08:40:ce:35:9b:51:ad:4b:5a:33:
a2:38:88:5b:af:b2:26:80:65:24:2b:e9:61:99:2a:5e:0c:0f:
d4:b9:b7:91:1d:07:67:32:a2:41:bb:bf:0a:57:2d:6d:6d:cf:
f9:ec:4f:f7:8a:6a:8e:2a:d5:dd:eb:4e:54:e4:89:c1:a8:24:
22:dd:82:a7:0d:2a:b5:91:82:f7:06:7a:e5:ed:7a:7d:a8:0b:
81:67:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:00 2025 by rpki-client