Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/4VXryZNlGszOvVCrHsnCqJ1trsE.roa
File: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (raw, json)
Hash identifier: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=
Subject key identifier: E1:55:EB:C9:93:65:1A:CC:CE:BD:50:AB:1E:C9:C2:A8:9D:6D:AE:C1
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 01941FFA433F5396752FF410936083466558
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/4VXryZNlGszOvVCrHsnCqJ1trsE.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 212.60.8.0/24 maxlen: 24
212.60.9.0/24 maxlen: 24
212.60.10.0/24 maxlen: 24
212.60.11.0/24 maxlen: 24
2a09:800:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:3f:53:96:75:2f:f4:10:93:60:83:46:65:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e155ebc993651acccebd50ab1ec9c2a89d6daec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:47:dd:cd:48:f4:2c:63:3d:e5:8f:16:5e:
2a:25:39:84:60:9f:9b:43:84:15:e8:eb:18:a4:3a:
52:1c:88:b1:17:fd:44:b8:3f:92:07:fd:f6:2d:a1:
b7:e8:8c:c8:1c:8c:1d:3b:70:4b:c7:3c:8d:5c:5f:
97:33:8d:11:16:46:27:6e:a6:60:33:eb:3d:1c:d8:
e4:2a:e5:6f:54:59:36:d8:4e:18:4f:10:b8:e4:5a:
5b:63:78:2a:70:40:cf:90:26:31:14:3f:07:8a:44:
c3:2a:1c:29:69:e4:55:0a:30:83:a0:eb:7e:33:75:
88:73:4e:75:c4:8a:36:5b:2f:dc:8c:87:6f:41:1c:
3e:37:1c:54:90:2a:54:a9:9c:d9:36:e6:36:14:60:
eb:5b:85:b5:d5:b1:d8:af:a4:ff:8f:8a:6f:c9:82:
7c:86:09:f2:0b:7e:fd:4c:08:ee:d3:7a:43:cf:88:
51:e8:c7:8b:80:a2:7e:64:29:05:3b:cf:3e:37:7c:
aa:78:0b:82:fb:1f:a4:42:2d:d0:2a:f8:60:9d:1a:
5c:29:b5:4d:1d:55:e5:7e:7d:5e:b7:b2:91:28:52:
40:47:7a:9a:6f:c7:20:fb:96:47:b8:75:59:c0:cc:
45:0f:1d:de:cd:50:3f:22:6d:23:90:f0:d9:d4:a0:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:EB:C9:93:65:1A:CC:CE:BD:50:AB:1E:C9:C2:A8:9D:6D:AE:C1
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/4VXryZNlGszOvVCrHsnCqJ1trsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.8.0/22
IPv6:
2a09:800:2000::/35
Signature Algorithm: sha256WithRSAEncryption
96:18:eb:a7:48:5a:f3:ce:1d:ed:13:44:0c:ff:f5:eb:e5:a3:
9c:e4:32:71:65:42:51:81:f6:43:20:8e:d7:19:9f:02:7e:04:
79:64:c6:76:3f:38:f0:b8:e0:b8:f0:b9:bd:fb:29:ca:ca:d8:
8c:1c:01:7b:24:9a:73:80:57:71:ba:d0:0e:1e:5c:34:21:1f:
40:0f:3b:9e:eb:f2:b4:f8:fa:25:68:91:4e:3d:cb:3b:a5:34:
e4:23:5c:51:12:b2:a1:b9:4f:3f:23:27:65:12:bb:9e:2a:e5:
49:03:9d:04:0d:5b:50:38:06:95:ad:59:18:07:59:78:c6:67:
ba:ff:ca:db:68:9f:1b:6e:cc:b0:a4:30:ef:02:60:40:51:4a:
9f:e7:d7:e4:0c:c4:e7:06:b6:06:f7:6b:f7:4e:4e:47:f3:e5:
42:e7:85:74:bf:b1:4a:4f:10:a6:21:8c:a8:61:3a:e1:e5:26:
30:23:9e:b9:72:62:d7:89:39:e0:78:23:29:07:fe:d1:19:18:
0e:14:f9:09:43:59:39:5d:23:91:3c:07:82:8d:21:43:a4:11:
08:38:0b:27:0f:44:28:c1:f6:c6:70:d0:a5:3b:b9:1b:e9:39:
6f:6b:8e:78:91:00:c2:15:10:58:6a:b7:cd:44:ab:97:a5:bc:
cf:53:d7:f9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQf+kM/U5Z1L/QQk2CDRmVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk
ZGQyNmEwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTU1ZWJjOTkzNjUxYWNjY2ViZDUwYWIxZWM5YzJhODlkNmRhZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2JH3c1I9CxjPeWPFl4qJTmEYJ+b
Q4QV6OsYpDpSHIixF/1EuD+SB/32LaG36IzIHIwdO3BLxzyNXF+XM40RFkYnbqZg
M+s9HNjkKuVvVFk22E4YTxC45FpbY3gqcEDPkCYxFD8HikTDKhwpaeRVCjCDoOt+
M3WIc051xIo2Wy/cjIdvQRw+NxxUkCpUqZzZNuY2FGDrW4W11bHYr6T/j4pvyYJ8
hgnyC379TAju03pDz4hR6MeLgKJ+ZCkFO88+N3yqeAuC+x+kQi3QKvhgnRpcKbVN
HVXlfn1et7KRKFJAR3qab8cg+5ZHuHVZwMxFDx3ezVA/Im0jkPDZ1KAaGQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFOFV68mTZRrMzr1Qqx7Jwqidba7BMB8GA1UdIwQY
MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt
ZTIxOTc0YTI5NGJhLzEvNFZYcnlaTmxHc3pPdlZDckhzbkNxSjF0cnNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh
LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC1DwIMA4E
AgACMAgDBgUqCQgAIDANBgkqhkiG9w0BAQsFAAOCAQEAlhjrp0ha884d7RNEDP/1
6+WjnOQycWVCUYH2QyCO1xmfAn4EeWTGdj848LjguPC5vfspysrYjBwBeySac4BX
cbrQDh5cNCEfQA87nuvytPj6JWiRTj3LO6U05CNcURKyoblPPyMnZRK7nirlSQOd
BA1bUDgGla1ZGAdZeMZnuv/K22ifG27MsKQw7wJgQFFKn+fX5AzE5wa2Bvdr905O
R/PlQueFdL+xSk8QpiGMqGE64eUmMCOeuXJi14k54HgjKQf+0RkYDhT5CUNZOV0j
kTwHgo0hQ6QRCDgLJw9EKMH2xnDQpTu5G+k5b2uOeJEAwhUQWGq3zUSrl6W8z1PX
+Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:58 2025 by rpki-client