Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4qLU7z4WKhDamvGgGu3FYecZcUk.roa
File: 4qLU7z4WKhDamvGgGu3FYecZcUk.roa (raw, json)
Hash identifier: 9qwkIu/qIJXyrkkz5BO3j8+teV1VtOtIs2m6qOT2uI4=
Subject key identifier: E2:A2:D4:EF:3E:16:2A:10:DA:9A:F1:A0:1A:ED:C5:61:E7:19:71:49
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 019425FD79E705498C6B07D8240A4CC25071
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4qLU7z4WKhDamvGgGu3FYecZcUk.roa
Signing time: Thu 02 Jan 2025 07:49:16 +0000
ROA not before: Thu 02 Jan 2025 07:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8536
IP address blocks: 212.52.160.0/22 maxlen: 22
212.52.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:79:e7:05:49:8c:6b:07:d8:24:0a:4c:c2:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2a2d4ef3e162a10da9af1a01aedc561e7197149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:90:3a:17:1d:07:54:57:f5:e7:a3:db:c3:44:
1a:48:1e:ce:28:e5:ec:a2:5f:3b:25:e0:32:d3:01:
42:84:83:5f:19:15:aa:e4:41:17:47:a5:04:5c:07:
aa:88:36:a9:8d:d7:09:e3:7e:da:f5:d7:6a:56:40:
38:3e:7a:46:bc:85:99:8c:18:b2:79:b4:2d:bd:1a:
8d:05:19:99:df:b5:f3:c5:75:b1:fc:3a:e9:4d:c9:
9b:9c:01:0a:77:92:1d:e6:9d:eb:69:1c:c5:0e:07:
b6:1f:5b:d0:e6:ed:2a:03:23:8f:8e:67:4f:75:fc:
ba:19:9c:9c:6f:17:a6:2d:c0:99:d6:0f:a5:99:63:
e0:55:7f:04:16:e5:c4:45:fe:93:95:ac:2b:c4:3a:
72:98:0b:d7:6d:46:a2:2c:7c:93:d0:cb:df:e8:b6:
21:77:f7:b1:ec:8e:44:6d:a1:a1:43:1f:b6:eb:03:
52:33:bb:92:76:ef:e9:50:93:a1:80:fd:30:0e:19:
2d:19:c7:8c:76:04:80:80:66:4a:43:cd:79:40:e4:
87:0f:c3:fb:7f:69:ba:f4:de:a9:bf:21:b1:67:21:
1a:8c:bc:1c:2e:18:2f:0c:53:e2:3e:75:d9:3b:f1:
8d:02:65:03:df:37:d8:e0:3c:d3:b7:42:56:fb:fd:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:D4:EF:3E:16:2A:10:DA:9A:F1:A0:1A:ED:C5:61:E7:19:71:49
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4qLU7z4WKhDamvGgGu3FYecZcUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.160.0/22
212.52.168.0/22
Signature Algorithm: sha256WithRSAEncryption
86:a6:87:a7:54:a4:0e:bb:b0:4e:aa:6f:e4:92:61:6c:6c:1a:
eb:fe:31:8c:13:93:1e:fa:00:63:e2:2a:0e:cc:0e:d6:49:e5:
56:97:34:d3:9a:90:a2:a1:03:09:cf:d4:fb:f5:3f:7e:e2:f6:
6d:21:8f:15:73:e1:f0:60:2d:da:a5:f5:46:18:ba:40:32:e7:
cd:0c:4b:d2:3b:a5:03:87:24:6f:67:1c:66:e1:d4:54:6e:e5:
5f:e9:87:2a:79:f9:eb:5c:50:8d:b6:c5:1c:c7:e1:fc:8e:d7:
73:79:6d:44:7a:d9:93:94:5d:3d:d3:1a:58:0d:15:23:a1:10:
0a:6d:b0:11:3e:ab:91:eb:92:d4:f8:b6:c1:34:62:f5:92:ee:
98:32:a4:e5:a9:e4:3b:be:16:6a:a5:e2:6a:81:55:82:87:87:
3e:81:4e:1c:5d:0c:56:d9:db:85:8a:bc:0f:63:b3:db:48:4d:
12:3e:ed:fb:96:50:2c:87:87:de:f2:3d:2d:e7:ae:87:0d:74:
16:d0:1f:00:27:40:5b:94:e3:be:bf:55:1e:09:92:6b:f4:c8:
f2:b7:de:43:fa:4c:db:09:80:14:56:c7:59:c4:ba:f9:88:64:
02:2d:e3:f0:82:22:a7:1d:d1:72:00:84:a5:ff:f3:e7:12:e4:
52:2a:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:46 2025 by rpki-client