Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/r-iiR7RQmKHSq0H2fyvQgYJoewc.roa
File: r-iiR7RQmKHSq0H2fyvQgYJoewc.roa (raw, json)
Hash identifier: /RqydRhUmz8unLbMoognTTz0KLfLlfUsh/2D5rZJAUw=
Subject key identifier: AF:E8:A2:47:B4:50:98:A1:D2:AB:41:F6:7F:2B:D0:81:82:68:7B:07
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01941F8C0B070D6BA40A10D7C3ED25D93FDE
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/r-iiR7RQmKHSq0H2fyvQgYJoewc.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 212.23.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:07:0d:6b:a4:0a:10:d7:c3:ed:25:d9:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afe8a247b45098a1d2ab41f67f2bd08182687b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:7b:b6:b9:93:e3:ef:26:dd:44:f0:ca:9c:
0d:5e:14:d9:dd:08:c7:07:97:a0:9f:55:4f:95:c7:
9a:f1:39:47:5e:ca:09:e0:90:b0:08:a4:38:27:21:
2a:d3:c7:e3:29:8a:96:59:f2:97:a4:4d:c9:08:3f:
b8:0f:03:bf:e9:33:62:ac:14:af:19:31:25:49:50:
3a:5b:c7:0c:04:67:dd:cc:fe:9b:9e:e7:fe:46:c5:
cd:35:35:b2:71:c7:64:5a:7b:ce:8f:7c:1a:24:6d:
d7:19:8c:13:d6:f2:bb:4e:d8:6e:1e:a9:3a:5a:b3:
62:05:38:59:51:8f:ae:70:a4:1d:cd:2f:80:40:82:
81:77:52:fa:9a:23:9e:01:d5:93:a4:5a:ac:0d:dd:
4c:6a:c8:86:58:27:84:65:71:42:e1:6a:e9:d1:f5:
a3:e6:89:a3:ae:c5:b6:cc:42:a0:09:2b:6f:9f:20:
41:65:5e:d0:25:db:18:6d:e4:3d:be:2f:33:ba:3d:
8d:c6:fb:0b:58:b9:91:1a:cf:36:f9:f7:a5:43:b8:
56:f8:4a:01:96:e0:5a:75:4a:f3:58:7a:dd:e4:e5:
fb:ab:ac:b6:af:fc:ab:f6:08:cd:2f:2c:50:60:92:
9c:83:3d:f3:e3:48:63:5e:90:7e:d3:bc:f9:aa:c3:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:A2:47:B4:50:98:A1:D2:AB:41:F6:7F:2B:D0:81:82:68:7B:07
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/r-iiR7RQmKHSq0H2fyvQgYJoewc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f9:f9:e3:a3:7e:c5:93:38:f1:2c:2f:b7:33:09:89:65:71:
4b:f2:3f:e3:bf:bf:40:2c:20:21:8a:68:36:5f:bc:c6:a6:86:
a1:ea:2b:33:3e:71:ad:eb:94:ad:5a:e2:89:5c:2b:7f:64:7f:
30:5c:c6:de:bc:56:55:9e:52:c9:65:18:6c:28:cf:13:8c:95:
42:06:01:48:04:c1:f6:c7:96:64:f2:3a:44:36:b8:a3:01:4c:
eb:01:a0:2f:f3:52:86:7d:95:ae:ac:88:be:82:72:48:78:fc:
fd:62:f4:91:d1:21:8e:ae:f1:31:41:c6:93:f1:39:89:c9:da:
45:52:cf:82:ed:49:d4:5a:13:d7:f4:57:60:b3:1e:3c:d5:ef:
3f:f3:ad:84:9c:bc:7c:ae:b8:2e:ad:6e:3d:64:24:61:29:c5:
f5:f9:af:c7:0b:a3:79:4d:a8:c6:07:65:29:e6:3a:83:71:97:
98:c7:bc:9a:71:7a:d8:d7:ee:3c:ce:b1:1a:c5:c3:69:b5:dc:
6d:42:16:e7:72:c4:a4:70:ab:d0:6e:24:c7:6f:8e:62:36:36:
b8:92:dd:a0:05:e3:04:6c:65:cb:b4:92:fc:02:97:33:8b:c4:
82:54:60:b0:79:5f:be:8a:88:6d:2d:8a:93:e6:60:ad:14:c4:
2e:27:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:09 2025 by rpki-client