Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/f-wF0yIlDOHaFqLViWnFWeP4B9o.roa
File: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (raw, json)
Hash identifier: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=
Subject key identifier: 7F:EC:05:D3:22:25:0C:E1:DA:16:A2:D5:89:69:C5:59:E3:F8:07:DA
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019423699A3FB423D1A8B2175D5CFDCE0521
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/f-wF0yIlDOHaFqLViWnFWeP4B9o.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8913
IP address blocks: 212.20.64.0/19 maxlen: 19
2a01:8fc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9a:3f:b4:23:d1:a8:b2:17:5d:5c:fd:ce:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fec05d322250ce1da16a2d58969c559e3f807da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:a7:3d:e4:b9:61:79:71:84:66:cc:6c:7f:ad:
82:f1:6f:b3:fd:7f:66:e3:f0:b3:6a:af:9f:82:33:
72:9b:74:fb:da:e4:56:51:82:ac:83:a9:05:9a:bd:
84:f4:4b:15:e5:d8:92:2f:bf:9f:dc:20:6a:bc:73:
70:26:91:3b:3d:63:ff:92:a2:68:be:1d:66:d1:03:
1c:e2:83:ed:d2:85:00:2c:5e:74:28:fa:e5:10:07:
88:ee:54:5b:44:f9:40:24:43:ac:b6:07:f8:e4:b9:
37:e3:80:e1:cf:57:0d:6a:f7:7c:86:98:88:15:d2:
02:25:0e:69:f0:5f:b6:a0:83:98:8e:3b:ec:1a:f4:
fc:3c:37:03:89:25:3f:26:d4:28:fb:b4:e5:7f:08:
5f:11:83:d8:a0:35:ba:90:e5:b9:50:26:2f:07:3d:
f6:a0:ca:9d:87:f5:d6:7f:ba:8a:26:40:15:64:2e:
e6:0f:3a:a6:1b:b3:6f:c8:8d:ca:2b:79:b0:35:54:
0f:c5:0a:80:dc:f2:3c:e4:df:ba:a0:90:c2:7d:fc:
49:c5:66:29:17:f4:05:49:69:8f:d9:77:ce:a0:78:
0f:c2:61:15:84:cb:ec:e6:f6:56:05:39:a5:2d:37:
3c:ca:93:e3:32:5f:48:43:fe:08:38:e6:ea:59:f3:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:05:D3:22:25:0C:E1:DA:16:A2:D5:89:69:C5:59:E3:F8:07:DA
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/f-wF0yIlDOHaFqLViWnFWeP4B9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.20.64.0/19
IPv6:
2a01:8fc0::/32
Signature Algorithm: sha256WithRSAEncryption
84:90:38:f2:43:ad:d4:36:ba:96:a7:80:f0:ea:d6:c5:1e:22:
4d:a8:b3:cc:68:f7:57:06:cb:5c:6c:90:84:54:a2:45:46:1f:
79:b2:06:b1:41:29:ea:8d:4a:74:94:be:11:7d:ec:08:a9:e0:
96:6a:2f:bd:80:3b:d5:4d:fe:c6:7a:e2:ba:44:ad:7c:0d:6f:
e2:80:d5:e0:8c:a2:97:c0:a1:08:84:82:44:be:c7:41:30:98:
12:32:93:4d:8d:d5:74:59:8d:c3:68:05:e4:af:92:65:d4:29:
9c:13:77:ea:83:d5:a4:91:e3:4b:e1:a5:71:db:40:32:8e:32:
04:85:f2:bb:50:c7:0c:8e:7d:9b:62:f6:33:89:30:2c:f7:d8:
a2:92:78:42:16:33:12:4c:5a:be:c8:40:df:93:e4:0b:ee:6a:
54:21:ef:35:cf:a4:6c:fc:c4:e0:6f:dc:8a:bd:49:a5:f0:52:
4e:b1:60:58:99:f5:f6:fc:7f:ab:05:16:00:e4:d1:02:0b:94:
6c:83:b7:5a:e5:e0:6d:c1:be:de:e3:cb:58:c7:9b:5b:91:c3:
01:77:b1:6c:2a:f4:63:59:98:5c:c7:db:6b:d1:46:cd:41:bc:
9a:86:ae:21:d4:97:81:bb:bc:53:70:0d:fe:1f:ac:b8:37:82:
57:93:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:19 2025 by rpki-client