Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/RzO2ITqQ0Sj4K58zqEV0_TbDqjE.roa
File: RzO2ITqQ0Sj4K58zqEV0_TbDqjE.roa (raw, json)
Hash identifier: gMDPOpifHzUoga/nT5+/mx3lPgPtEEB+6KasfhEwnWk=
Subject key identifier: 47:33:B6:21:3A:90:D1:28:F8:2B:9F:33:A8:45:74:FD:36:C3:AA:31
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 087695C9
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/RzO2ITqQ0Sj4K58zqEV0_TbDqjE.roa
Signing time: Sat 01 Jan 2022 11:03:55 +0000
ROA not before: Sat 01 Jan 2022 11:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209975
IP address blocks: 212.60.9.0/24 maxlen: 24
212.60.8.0/24 maxlen: 24
212.60.8.0/22 maxlen: 22
212.60.11.0/24 maxlen: 24
212.60.10.0/24 maxlen: 24
2a09:800::/35 maxlen: 35
2a09:800:2000::/35 maxlen: 35
2a09:800:4000::/35 maxlen: 35
2a09:800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141989321 (0x87695c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jan 1 11:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4733b6213a90d128f82b9f33a84574fd36c3aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:d1:76:dc:d0:e6:75:54:cf:3a:0d:35:bf:
fa:48:74:85:44:a4:0a:a5:43:b2:8c:2d:39:5d:48:
8f:89:6f:81:85:06:eb:d0:4e:dc:3a:12:fb:8b:79:
70:31:5a:e7:bc:73:bd:bf:e9:07:af:7b:df:11:a9:
a6:01:59:d0:08:56:20:32:cd:aa:fa:93:09:91:67:
3c:91:c0:f9:96:5c:d8:47:09:2e:78:cd:c2:23:14:
fb:cf:ea:7b:63:b9:b7:de:ec:b1:20:00:9b:ce:9e:
a4:b2:3a:49:2e:28:6c:4f:0f:29:d6:be:c8:28:30:
e2:21:df:27:14:7e:48:1c:eb:0d:d3:e9:24:a2:85:
c0:00:aa:fd:e3:67:79:f5:e0:b1:49:5c:90:77:9f:
52:61:aa:5b:bb:7e:10:2a:48:d2:08:35:d1:42:c5:
c6:87:83:6d:f4:9b:fd:9c:7c:12:a8:5a:49:9c:b3:
e3:b8:14:b5:56:81:54:7f:02:7f:a4:da:e2:88:68:
44:3c:59:e9:73:ec:7b:b8:2b:ca:48:eb:8e:13:8e:
23:fb:33:20:07:02:42:28:4c:33:5d:16:a8:01:5c:
aa:03:5c:df:12:7a:69:14:18:83:55:51:4e:d9:55:
13:e8:7f:b5:bb:5b:08:30:30:c8:fb:db:66:7b:e2:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:B6:21:3A:90:D1:28:F8:2B:9F:33:A8:45:74:FD:36:C3:AA:31
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/RzO2ITqQ0Sj4K58zqEV0_TbDqjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.8.0/22
IPv6:
2a09:800::/29
Signature Algorithm: sha256WithRSAEncryption
13:87:d9:26:df:6f:c9:fd:18:4c:8a:b9:95:b1:14:73:59:d9:
fe:ec:dd:3f:44:99:06:31:f2:b7:0d:45:9a:e9:d0:7f:58:d8:
56:3a:db:96:ed:56:05:5e:84:80:d6:8c:b2:4a:90:97:bf:36:
39:c0:cb:f2:43:0f:67:f4:29:55:fb:a8:5b:1a:b9:8b:2e:84:
48:b2:8f:96:ef:cc:ec:05:b6:85:06:5f:95:23:75:15:a6:4c:
4d:91:f1:16:2a:8e:9f:49:53:fd:dd:11:ad:4c:7d:24:c6:6b:
b6:51:d0:00:4b:24:6c:d6:c5:24:db:96:0f:b8:79:42:fc:a5:
3f:90:ad:26:4e:78:2d:8a:6a:61:f4:fe:92:b2:1e:84:8f:1f:
b9:81:b1:2e:89:f7:9f:dd:4a:3d:67:36:bc:0e:d1:ef:61:7f:
25:28:26:a9:41:b1:6a:49:30:18:82:3b:c7:22:63:ff:43:f2:
44:0f:fe:ff:d4:62:72:97:f2:1e:75:33:43:95:8a:d3:64:58:
79:08:c9:d2:58:26:18:ae:20:38:5f:2c:6e:67:4a:f4:c7:a7:
82:f6:d2:b4:c3:b0:69:36:31:2f:52:ad:24:cd:04:40:d0:63:
8f:2e:05:be:ba:0a:4c:42:ea:fa:75:1c:9f:25:10:fe:be:69:
8a:f3:9f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:42 2025 by rpki-client