Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa
File: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (raw, json)
Hash identifier: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=
Subject key identifier: 7B:F4:EB:74:2D:44:7C:E5:52:41:0E:3D:64:0D:05:79:A4:D3:CE:39
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBE9E7EE15A459D64038CD48BAE13A
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 212.81.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e9:e7:ee:15:a4:59:d6:40:38:cd:48:ba:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf4eb742d447ce552410e3d640d0579a4d3ce39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:24:bd:15:9f:ea:a6:53:d0:52:87:ee:cd:
eb:89:50:a7:77:2f:8b:c6:ee:00:5d:cd:60:82:61:
f4:99:4f:89:31:6f:ac:98:d7:fd:c4:a3:30:2b:fc:
f9:18:ef:b0:aa:60:29:76:ac:21:21:0a:8b:a3:c4:
9b:43:5a:d8:af:04:31:a2:9b:05:09:71:ec:8b:6d:
8d:4b:30:9e:e0:db:71:50:54:87:ee:59:ca:8b:fd:
cd:7e:25:b7:82:a0:4c:42:47:79:5b:d0:76:4c:f6:
6b:4c:38:49:8e:03:b2:57:f8:ba:8a:3f:6d:39:93:
34:40:42:06:f6:86:0b:0d:e2:43:ab:c6:e7:ad:10:
56:5c:93:2b:96:93:a4:d4:51:ec:52:3e:e1:63:8e:
8f:b2:81:fd:7c:7c:84:60:b3:76:3a:19:45:a8:43:
78:c8:3f:89:b2:89:f9:26:eb:ad:e8:35:19:73:a2:
90:89:8d:8d:ad:dc:9c:f5:79:f1:8a:80:e9:6c:df:
e3:48:0c:98:62:2b:dd:88:a5:c8:80:a6:a4:fd:48:
10:fc:49:81:81:8e:57:8a:dc:00:d3:6d:69:a5:ac:
fa:7a:0e:69:cd:9a:ee:21:39:5f:15:a5:8d:42:87:
78:c2:a1:72:6a:1f:9a:3a:51:6d:60:29:c7:b8:86:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:EB:74:2D:44:7C:E5:52:41:0E:3D:64:0D:05:79:A4:D3:CE:39
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:42:02:bc:37:65:20:6f:96:e5:9f:ce:38:ff:4d:3a:41:9f:
c8:d1:c4:03:5d:e3:4e:6b:b2:cd:ca:83:2c:39:73:35:11:c4:
f2:e9:67:ab:4d:7c:09:f3:03:97:cc:e5:75:a2:93:95:5d:9e:
bd:5e:ef:5b:e0:3e:21:77:14:a8:5e:6b:a3:1b:e0:22:2a:d7:
fd:58:e2:f8:e5:2c:8f:9d:8e:83:7d:9a:a4:68:a5:67:4d:4e:
d6:e5:b9:a0:f6:57:dc:7a:b6:b9:cb:37:49:70:fb:43:29:f2:
9d:a0:10:30:d3:2a:fb:3f:a5:40:d5:f0:86:48:5b:2b:5f:0f:
8a:f4:8e:ea:da:68:19:41:eb:b1:02:5b:87:a8:f2:c8:03:3b:
24:60:ce:27:6c:a6:a7:9d:22:6e:ca:c0:9b:45:fe:c0:51:7d:
ab:c5:bd:46:4a:af:10:f2:80:7a:1c:50:5a:d2:8e:bd:e9:f4:
f7:95:ba:2b:56:03:b6:40:f7:89:1d:77:08:a6:39:68:02:fb:
14:99:c4:15:6b:65:16:c0:ad:4c:cf:2d:30:d2:fe:c5:18:f8:
15:57:f7:4d:b1:e1:77:af:e1:c2:fb:2b:12:16:51:0e:89:bc:
d9:7c:ad:d2:78:c4:69:e2:f8:b0:5e:0f:84:e6:2f:13:ff:89:
c7:35:0e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:47 2025 by rpki-client