Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa
File: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (raw, json)
Hash identifier: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=
Subject key identifier: AE:E2:30:A8:B9:27:6E:A9:78:8C:11:00:E7:5B:BC:3A:FE:90:D5:39
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 01941FFA4395C8100836BA6A66A7F0C41828
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209975
IP address blocks: 212.60.8.0/22 maxlen: 22
212.60.8.0/24 maxlen: 24
212.60.9.0/24 maxlen: 24
212.60.10.0/24 maxlen: 24
212.60.11.0/24 maxlen: 24
2a09:800::/29 maxlen: 29
2a09:800::/35 maxlen: 35
2a09:800::/36 maxlen: 36
2a09:800:1000::/48 maxlen: 48
2a09:800:1001::/48 maxlen: 48
2a09:800:1002::/48 maxlen: 48
2a09:800:2000::/35 maxlen: 35
2a09:800:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:95:c8:10:08:36:ba:6a:66:a7:f0:c4:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aee230a8b9276ea9788c1100e75bbc3afe90d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:55:65:3c:7d:2c:39:bf:e3:ce:7c:7a:bc:
52:6d:01:a6:56:b7:8d:46:13:1b:ed:3f:79:5f:ac:
81:41:fe:db:b2:62:46:69:bd:85:73:65:f0:92:a6:
5c:d1:ba:d1:44:84:e9:fc:02:e5:9d:9a:6e:38:a4:
78:4d:c6:30:4b:5e:ab:40:3a:8a:bc:a4:ba:5d:1a:
bb:21:3d:0d:e5:2d:9a:d1:ec:25:4b:f2:03:68:be:
44:ca:11:cb:d1:b8:3f:e0:85:14:66:3e:43:04:3d:
0a:3f:b0:d5:c4:dc:f6:2d:cd:07:35:10:b1:2b:36:
ad:13:92:d0:41:21:f2:2b:18:00:14:52:75:eb:2d:
55:79:ba:f9:44:4e:28:12:7c:2a:84:b7:db:ca:c9:
6e:95:15:6d:cb:43:66:a4:c5:2e:0e:55:45:2a:75:
1f:0c:46:8e:93:21:46:0c:6b:27:d9:ad:c6:85:cc:
61:fc:d2:f7:ae:3a:97:a0:52:ce:05:21:be:3a:a8:
ec:2c:99:a5:84:41:96:5c:9c:f5:aa:61:ec:5b:c0:
1d:54:5a:e4:f8:4b:80:a3:15:2b:f8:de:db:0c:9e:
1e:0c:b4:64:81:cc:1b:01:99:da:24:d3:7b:0b:2d:
2f:e2:89:d8:46:6d:e4:c4:64:d2:2a:f1:c7:d1:d9:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E2:30:A8:B9:27:6E:A9:78:8C:11:00:E7:5B:BC:3A:FE:90:D5:39
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.8.0/22
IPv6:
2a09:800::/29
Signature Algorithm: sha256WithRSAEncryption
6c:7d:a2:6f:2d:e2:91:a3:56:b0:f0:48:4f:5f:46:62:e4:e5:
49:49:2a:5f:a2:7f:f3:b9:f1:b1:fa:f7:cf:bd:4e:46:aa:9a:
53:d7:f4:5b:42:ef:ca:b3:e0:c5:8d:21:ff:4b:2b:9d:2b:f4:
10:76:f6:d3:71:0f:65:5e:71:ce:a3:d9:5c:86:bc:47:2b:37:
a1:ae:ad:34:be:c3:e9:3e:45:21:d0:82:c9:94:77:9f:10:69:
fb:44:e7:73:47:b7:35:2c:5b:a7:7b:b9:c7:96:68:4e:c5:46:
f5:20:6f:cc:73:02:03:39:be:a4:0e:b7:2e:48:59:1e:54:cb:
95:a2:0e:ae:8c:5a:f6:ba:ff:9f:f5:a7:6a:0e:e4:81:13:b2:
70:0e:59:7f:39:4f:8e:54:8f:1e:d1:22:79:c7:dd:3f:c6:82:
85:bc:f0:1f:e8:d4:ec:47:f9:d5:22:96:83:e0:cc:41:96:5f:
8b:4f:f4:7b:3d:e8:c6:9e:68:8f:0b:9d:ec:1c:31:41:87:ff:
76:c7:8f:4e:7f:14:bb:31:6f:70:cd:c6:b8:78:73:16:7c:46:
7d:35:8c:ec:19:bb:39:51:a7:7d:88:e9:a9:c4:1f:73:74:c7:
b1:74:4b:29:d7:cc:07:0b:bf:d4:e8:1a:8f:e2:e8:98:33:fe:
7f:20:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:06 2025 by rpki-client