Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/udQIyLLEg9QQXb-UkTqLHg_TlmY.roa
File: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (raw, json)
Hash identifier: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=
Subject key identifier: B9:D4:08:C8:B2:C4:83:D4:10:5D:BF:94:91:3A:8B:1E:0F:D3:96:66
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 01942747D800ACAAB3051FF6E27955FEBF9A
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/udQIyLLEg9QQXb-UkTqLHg_TlmY.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212616
IP address blocks: 212.46.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d8:00:ac:aa:b3:05:1f:f6:e2:79:55:fe:bf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9d408c8b2c483d4105dbf94913a8b1e0fd39666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:5a:ef:4c:1a:28:de:5d:00:13:c7:d7:73:
40:c0:c8:9e:41:1d:eb:4b:3f:b4:fd:77:3a:21:82:
31:0c:58:20:17:7b:0b:7c:fc:2b:98:5c:16:6a:5d:
14:20:d2:ae:d4:f6:ec:46:c8:e0:71:7e:5b:d9:31:
68:16:56:6d:09:c7:ce:92:15:24:7b:96:19:35:b1:
ab:e0:56:06:c7:b4:32:30:e4:07:29:4a:6c:eb:1d:
2b:a6:fb:1b:56:d4:a5:e0:c9:07:92:3e:7c:c7:db:
13:73:0c:87:1b:67:d4:fc:aa:9d:c6:62:42:9a:e5:
53:da:b3:57:ed:a6:62:44:0a:1a:69:ac:88:76:46:
9c:9a:d9:60:9a:29:16:04:d5:20:df:05:b7:3b:dc:
99:a6:5c:48:b2:46:1c:48:ea:88:8d:0b:af:12:d7:
8c:89:95:a3:83:a2:68:6f:e0:09:7d:98:89:cd:a8:
11:0b:21:5f:c0:03:b2:4e:c8:64:3c:fc:f8:89:b8:
cd:64:4c:40:42:d3:e6:06:f1:d4:15:a7:ba:0d:af:
5b:12:af:8c:18:1c:a1:26:2b:3d:da:86:8c:eb:7d:
1d:68:08:63:ba:49:32:20:20:08:65:d3:99:eb:10:
6c:89:74:ba:8f:83:7f:b9:41:49:fe:60:c9:66:c8:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:08:C8:B2:C4:83:D4:10:5D:BF:94:91:3A:8B:1E:0F:D3:96:66
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/udQIyLLEg9QQXb-UkTqLHg_TlmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.40.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a7:59:e8:1f:f5:51:33:60:61:fe:64:2a:49:2d:9a:82:2a:
37:be:72:bb:81:4a:e8:95:89:f7:e4:3a:81:56:d3:aa:97:2f:
9e:76:83:63:c8:1a:1c:23:c9:e6:8e:9f:4f:28:f4:13:8c:94:
0d:69:b1:c5:2f:66:69:de:52:90:22:f8:12:ef:90:37:49:61:
49:45:64:05:1f:1b:5f:be:3c:d4:de:b2:ba:11:ec:78:73:6c:
32:16:1a:d6:64:73:48:41:15:8e:65:8c:ef:1d:dc:0c:6b:1c:
23:f4:45:81:cc:7c:a1:00:55:08:9f:a9:fa:56:ed:4d:bc:69:
ca:0d:f1:a8:32:ea:89:4f:46:16:5b:ca:fb:84:8e:f6:db:a4:
fa:b0:8e:97:6c:b5:a1:f7:6b:8d:c3:cc:fc:e5:60:4b:57:74:
f0:1a:fc:7f:22:58:08:62:b0:62:67:5e:5a:15:ae:fa:c8:db:
54:22:23:d5:28:a2:33:51:0d:be:b8:8a:1f:6e:4f:bc:83:25:
4f:7a:5d:e6:a0:89:ce:2b:f9:3f:72:a2:31:fa:3c:a3:9e:6c:
87:e7:f1:a5:18:d3:86:b1:2f:9f:3c:f4:f4:27:fb:0b:5c:1f:
21:33:ab:87:02:de:1c:5b:c7:67:6a:60:9f:44:73:ff:c4:fd:
1c:94:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:04:47 2025 by rpki-client