Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/arsEMbCDi2wvIB9pruDthcas_84.roa
File: arsEMbCDi2wvIB9pruDthcas_84.roa (raw, json)
Hash identifier: ilM4++SMMDRks/dY7/gazwzm3WAh1QbyvXCjkzciULs=
Subject key identifier: 6A:BB:04:31:B0:83:8B:6C:2F:20:1F:69:AE:E0:ED:85:C6:AC:FF:CE
Certificate issuer: /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial: 019421B191994B291CE762153D722061C979
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/arsEMbCDi2wvIB9pruDthcas_84.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12762
IP address blocks: 185.210.12.0/22 maxlen: 22
212.51.224.0/19 maxlen: 19
2a00:40c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:91:99:4b:29:1c:e7:62:15:3d:72:20:61:c9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6abb0431b0838b6c2f201f69aee0ed85c6acffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:41:7d:d0:9e:09:32:e4:c8:6b:93:e2:a5:
2d:02:0e:0a:23:e4:4c:19:a6:80:43:c4:a9:0d:67:
10:ff:8d:7b:6b:5c:7b:fe:89:9a:58:57:1c:6e:a8:
f0:1d:a2:da:dc:22:55:75:3e:be:95:e6:5b:12:0b:
f3:00:ea:16:2c:9b:e3:90:21:3a:80:c0:28:fd:4e:
00:f0:bd:53:a3:2f:f9:c8:c5:16:13:dc:2b:a1:5f:
b6:bc:e5:44:a4:33:9c:32:a8:3e:58:46:43:21:e6:
d4:26:bc:c1:7d:29:cc:ea:ba:01:11:d6:fb:0a:d6:
11:fb:c1:22:13:02:f1:58:02:7d:70:af:ef:f6:5c:
b6:b1:df:7a:4e:0a:16:29:5e:c4:33:85:26:50:86:
5e:1c:38:ad:68:45:bd:a5:ef:a1:1f:1e:39:d6:7c:
20:38:af:aa:6d:b2:ec:ec:84:bb:cf:8d:93:44:56:
82:1f:73:d4:77:5c:d7:17:aa:57:f6:45:c9:c8:6a:
ce:1a:c5:3b:a3:11:41:92:e2:8f:00:f7:44:2e:cd:
69:61:8f:b3:f1:88:aa:2c:2e:a1:8e:64:34:3d:67:
40:d6:83:83:a0:09:1f:76:40:b1:23:a3:d0:9e:10:
04:63:1b:fa:55:f9:43:40:03:06:15:0e:fc:29:9d:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:04:31:B0:83:8B:6C:2F:20:1F:69:AE:E0:ED:85:C6:AC:FF:CE
X509v3 Authority Key Identifier:
keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/arsEMbCDi2wvIB9pruDthcas_84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.12.0/22
212.51.224.0/19
IPv6:
2a00:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:a0:83:8a:95:3c:47:49:34:19:17:9d:e1:66:44:0e:f4:77:
6a:62:65:bd:d2:46:65:2d:63:ae:2a:fd:e1:76:2d:10:91:2a:
8c:5a:ee:fb:26:46:53:fe:ff:35:9b:71:34:d6:4c:90:17:43:
d5:f0:0e:61:43:b9:df:53:06:08:51:6d:7d:5c:9f:89:8c:9f:
d1:68:fd:84:8b:27:2c:2c:c6:f4:71:a7:aa:b1:ed:85:58:27:
2d:33:3d:7b:9e:69:bd:cd:d7:bb:ab:31:1c:bd:60:2c:43:74:
1e:b1:9a:37:27:ed:32:37:6c:2c:2a:96:45:ca:87:81:c6:65:
7a:a1:22:96:41:22:3a:9a:29:0e:b7:75:14:71:20:85:7a:f6:
37:26:37:61:8e:86:46:b3:85:2c:49:84:1e:1b:35:f9:47:d5:
ba:63:88:91:69:cf:f3:2d:2e:4a:82:42:f0:42:e3:00:fb:7d:
2b:2d:19:61:41:2f:0e:55:01:dc:63:b1:71:85:ce:46:5b:90:
09:37:41:9e:71:38:df:af:a6:7e:e2:a9:1b:68:5a:34:a7:5b:
21:0d:a8:83:8f:ca:d3:be:eb:24:4c:b0:08:21:10:cd:c9:74:
8b:14:53:5d:81:f4:06:19:50:13:c9:ff:33:83:3a:f6:d4:07:
8c:5a:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:41 2025 by rpki-client