Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/GFllu8yCEzYxH4Ih5x02DmBd6d8.roa
File: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (raw, json)
Hash identifier: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=
Subject key identifier: 18:59:65:BB:CC:82:13:36:31:1F:82:21:E7:1D:36:0E:60:5D:E9:DF
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 019427B564F9261A8C7C369ED6C393BB2034
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/GFllu8yCEzYxH4Ih5x02DmBd6d8.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207617
IP address blocks: 212.64.213.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:64:f9:26:1a:8c:7c:36:9e:d6:c3:93:bb:20:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=185965bbcc821336311f8221e71d360e605de9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:85:73:5a:56:43:31:22:75:fe:60:73:ce:
80:34:b4:b6:42:57:7e:3d:6e:f9:d0:88:b2:fb:3f:
9b:4a:72:cf:41:dd:a3:94:eb:b5:2d:66:c7:bc:a4:
3c:fc:56:e5:83:44:d7:46:e2:4b:90:b7:4b:7a:5a:
dd:da:a2:a3:c8:b2:c0:42:ab:54:ed:75:ed:6b:33:
b4:f2:f9:ab:2b:bf:82:40:60:9b:42:e4:3b:59:4a:
e0:5a:a0:fa:33:fb:00:47:73:2c:9d:c3:5f:28:d5:
06:f9:c2:a3:70:47:81:7a:e0:2d:a1:91:8d:00:0c:
af:5b:51:e5:40:b0:bf:cd:a8:13:56:9c:77:69:86:
d0:22:11:0c:e4:8d:78:32:49:66:cf:c6:13:66:3a:
53:9d:66:52:65:0e:2b:82:1f:8e:2b:ac:26:24:29:
89:63:31:e4:82:15:60:66:4c:35:63:5c:3e:d4:ce:
27:30:7a:87:58:45:bb:66:84:8c:fc:a3:0d:3b:49:
f0:f3:0f:79:b2:a6:30:ab:96:c6:54:3d:46:00:a6:
35:c5:82:97:25:ac:ea:d5:1a:63:0f:a4:cc:20:ca:
31:95:da:2c:64:a9:06:4e:e5:9a:9f:e1:f4:b9:38:
39:6c:f1:af:f6:4a:f2:0e:f8:c8:ba:cf:f5:a8:95:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:65:BB:CC:82:13:36:31:1F:82:21:E7:1D:36:0E:60:5D:E9:DF
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/GFllu8yCEzYxH4Ih5x02DmBd6d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.213.0/24
Signature Algorithm: sha256WithRSAEncryption
39:62:9d:4d:f4:7b:7f:f1:8a:c5:ad:c9:b2:7d:91:9b:f1:ee:
a1:a5:15:c8:68:c9:6c:00:d3:1f:1a:4c:11:24:fb:bd:2e:83:
c5:e2:ee:d6:51:78:f3:6b:c3:25:a4:a9:b6:09:51:0f:b8:b6:
6d:7e:25:ee:7f:54:d9:61:07:ee:d2:ee:6d:bf:ad:34:be:c8:
5e:3d:6d:e4:1b:12:20:bb:5d:9e:08:94:ad:17:6c:11:c0:47:
d9:c4:87:fa:da:5d:1f:9b:21:87:fa:26:93:a9:02:c3:7c:42:
14:90:2d:30:8e:09:45:48:a9:d6:da:1f:1f:26:49:d6:de:20:
8a:47:45:34:7a:26:c7:56:eb:3e:06:10:a3:8e:15:99:71:b0:
9f:f1:9e:92:d6:b5:39:70:05:b7:d5:42:70:df:09:26:3d:31:
9f:32:1f:47:37:ff:78:19:e4:dd:19:3e:a5:a3:7d:18:d8:cf:
76:37:70:55:18:9a:c1:41:3a:ca:e5:ef:3b:2b:ec:b3:8e:9c:
50:bd:e7:4a:61:8f:cc:dc:8b:34:5b:95:11:53:a3:a4:2c:ee:
0c:c4:00:85:85:c7:eb:83:2e:a3:f0:56:d2:3e:2e:13:1e:ce:
24:dd:03:20:f9:d9:05:fc:34:55:c4:38:76:ad:58:19:da:45:
67:e5:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:16 2025 by rpki-client