Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/PmUQGIgLz8QIpP_lpOReSK54Clg.roa
File: PmUQGIgLz8QIpP_lpOReSK54Clg.roa (raw, json)
Hash identifier: Se5e2cwGwp5UjA/KSKu5YaznbQl9QedXbnS92uqoCrI=
Subject key identifier: 3E:65:10:18:88:0B:CF:C4:08:A4:FF:E5:A4:E4:5E:48:AE:78:0A:58
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 0194236A1C0CF60ABD5859CDA8059FFD1ECF
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/PmUQGIgLz8QIpP_lpOReSK54Clg.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51679
IP address blocks: 212.46.50.0/24 maxlen: 24
2a12:c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1c:0c:f6:0a:bd:58:59:cd:a8:05:9f:fd:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e651018880bcfc408a4ffe5a4e45e48ae780a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:98:42:2f:7a:6d:f6:c7:9e:dc:61:9a:e6:
e7:04:de:d4:52:9a:8d:be:da:18:6b:89:25:4c:99:
d1:36:e8:11:28:91:3c:78:ff:3a:5f:e4:9c:0a:93:
74:a3:a2:7f:15:f2:4c:50:59:97:41:c6:9f:0e:b6:
69:38:69:9f:1a:ef:b4:cc:f9:34:36:bd:61:a8:7b:
6a:b8:5f:7f:af:02:f0:d9:67:17:cb:28:e3:f1:a6:
b0:8e:d8:d1:8c:0c:a7:2f:77:74:8a:c2:89:33:9a:
d7:9c:ef:88:b7:22:f1:3e:fb:f9:1b:3d:ab:4a:c9:
21:15:2b:1e:d1:d7:7d:ce:9b:5b:f9:c9:ea:53:6a:
9d:9e:98:a2:7f:5b:8e:ca:ae:22:44:6a:03:85:c6:
74:0c:e1:e6:2b:a6:62:7c:32:e2:c1:2e:ba:94:06:
6a:b9:79:ea:12:dd:09:fc:a0:81:6c:49:5e:a1:99:
48:50:6e:c8:8d:8e:3d:b4:18:96:16:18:73:87:bb:
61:a2:54:cc:8e:b5:26:81:89:ad:f9:60:eb:6d:58:
38:4d:d5:f4:40:3a:a7:d9:d3:a1:6d:5c:cd:e8:a3:
73:c8:33:af:33:b3:cd:f2:b0:91:d5:e1:d2:1f:da:
ee:f8:c5:c0:02:93:70:b4:fe:b2:38:7b:dd:e6:d5:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:10:18:88:0B:CF:C4:08:A4:FF:E5:A4:E4:5E:48:AE:78:0A:58
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/PmUQGIgLz8QIpP_lpOReSK54Clg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.50.0/24
IPv6:
2a12:c40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:9d:a7:8f:68:3d:d0:7b:b8:93:42:88:38:f3:36:7d:a1:ba:
d9:aa:1e:0a:2e:b3:c8:61:bc:c9:ef:a7:b1:f0:8c:e1:6b:af:
b7:f6:10:fc:21:64:f6:93:db:85:3c:13:03:c2:d5:55:f0:eb:
47:c0:dd:9a:d2:4b:e9:f9:09:65:8f:cf:c6:f9:98:7a:60:94:
51:81:e7:ae:33:8b:a5:b1:87:53:23:0e:a7:20:d2:85:d7:e3:
0e:af:c7:e5:c2:b5:1f:f0:47:bd:05:cb:88:5e:d8:db:3a:dc:
83:95:d8:b8:28:41:fe:62:74:bf:96:da:64:57:1d:52:20:f7:
53:b8:46:71:74:d3:04:11:d7:56:06:62:c3:5e:f6:fb:ac:e8:
d3:2b:c4:81:aa:07:83:f3:5f:06:6b:29:f2:56:fd:17:e8:89:
26:5a:f2:b3:70:26:43:d9:de:a4:15:b7:24:2d:49:e5:6a:17:
6c:76:11:78:8c:7b:28:d3:13:23:3e:76:5d:ff:75:3b:bd:d6:
b6:38:32:ce:69:94:fe:3c:f9:87:2e:e2:f0:8a:84:54:9e:04:
ae:64:cf:d1:8a:16:a8:46:4c:b8:fa:32:b7:5c:2a:e8:aa:03:
86:1f:2d:ce:0d:a7:be:c2:95:2e:c7:5f:63:7c:18:9d:79:90:
9f:9b:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:08 2025 by rpki-client