Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/8PRkryl0uhFtlnLekZM-hi64gDw.roa
File: 8PRkryl0uhFtlnLekZM-hi64gDw.roa (raw, json)
Hash identifier: V9MOq5IColqS/hiTR+G474Lyui/9HhIpq/giGB86OgY=
Subject key identifier: F0:F4:64:AF:29:74:BA:11:6D:96:72:DE:91:93:3E:86:2E:B8:80:3C
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 01906120CFBA59C42CD2FC73FEEC4D9CAEC6
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/8PRkryl0uhFtlnLekZM-hi64gDw.roa
Signing time: Fri 28 Jun 2024 23:14:18 +0000
ROA not before: Fri 28 Jun 2024 23:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 212.60.10.0/24 maxlen: 24
212.60.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:61:20:cf:ba:59:c4:2c:d2:fc:73:fe:ec:4d:9c:ae:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jun 28 23:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0f464af2974ba116d9672de91933e862eb8803c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:34:1c:26:8f:38:98:57:f0:2a:67:a8:d6:
33:12:11:a5:1f:c8:40:c8:71:c7:c1:bd:1b:51:ba:
bc:d9:98:5e:e5:ca:5e:29:d3:e1:79:3a:03:49:29:
54:1d:47:97:f1:cb:b7:59:23:8c:29:81:9c:c0:0e:
92:60:ea:68:63:56:07:de:39:47:92:b5:ef:e3:bc:
2a:21:29:ec:10:3b:c3:0c:a8:7f:48:c8:ad:26:18:
85:ad:56:30:98:68:4a:a9:91:4a:cf:57:62:ae:fc:
41:f3:bb:15:a5:97:e0:3d:61:96:0d:b5:ce:47:9a:
ef:c0:08:a7:7f:cc:2d:db:ff:e8:c6:14:a5:42:6d:
9a:a1:a7:fd:b8:29:5f:b6:c6:57:1d:20:f1:8f:3b:
29:67:22:48:bf:11:be:88:a4:72:88:c7:e4:79:ef:
48:3c:ff:64:45:5d:af:9f:bb:0c:cf:93:08:3c:5a:
ac:98:3c:82:85:2c:51:65:70:b8:15:2f:47:3e:f2:
d9:2f:50:1a:49:51:2f:30:f4:b4:86:ee:69:65:75:
a1:92:b3:1c:3f:d9:92:ce:fa:30:cd:2a:24:ed:ef:
35:50:91:e9:a9:f4:b0:ed:ea:ec:79:60:c3:d7:01:
5f:eb:10:37:7b:62:48:fb:1a:59:b2:1a:be:a3:9f:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:64:AF:29:74:BA:11:6D:96:72:DE:91:93:3E:86:2E:B8:80:3C
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/8PRkryl0uhFtlnLekZM-hi64gDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.10.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c7:e9:89:5f:74:d9:8c:8a:ff:b2:5f:46:80:5a:a0:ad:cc:
86:76:6c:e4:5a:83:56:1c:43:7e:57:24:43:a4:5a:9d:e4:a7:
3e:d5:3f:25:14:85:ac:cc:76:5a:81:87:9b:cc:81:4c:75:07:
ad:c5:2e:53:7f:2a:97:6e:f9:18:31:0f:03:cc:75:13:58:20:
4e:e5:2b:f0:f3:62:ab:f1:91:b1:16:25:dc:99:aa:7b:b8:f2:
41:93:70:cd:8d:e6:eb:1d:01:90:6c:b6:bb:c0:66:7f:e0:b0:
5e:f4:4d:29:2d:67:e0:26:01:18:8f:76:9b:77:58:3b:ac:7b:
d1:10:bc:b9:61:ed:1d:56:ec:4b:99:fa:21:57:2d:b6:6e:34:
06:9d:e4:1c:fd:8c:31:ce:e1:52:f5:bc:85:3e:1d:be:22:3e:
fe:be:10:68:eb:f7:76:97:d3:24:50:a3:26:43:91:40:bf:fd:
23:23:15:fc:71:40:4b:f8:c1:35:85:14:4c:83:71:d2:af:83:
3c:62:f5:64:b5:d2:38:b6:68:a9:dd:d0:5d:73:49:ce:74:d4:
66:8c:7e:33:67:15:ed:09:b7:1c:26:d1:5a:08:a7:42:0f:32:
f3:d3:3a:8d:af:dd:5d:13:56:76:d2:18:95:f6:fb:06:de:17:
f4:f9:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:54 2025 by rpki-client