Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/eIluNbW1Lh7F9iIJxb6GVbd5mxQ.roa
File: eIluNbW1Lh7F9iIJxb6GVbd5mxQ.roa (raw, json)
Hash identifier: d+Tkp5gG5B2wX0ED2hhsWjApqTUL3iqth+z1QSZwDac=
Subject key identifier: 78:89:6E:35:B5:B5:2E:1E:C5:F6:22:09:C5:BE:86:55:B7:79:9B:14
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 0194274787BE4658BC30C57F6B42773F6F38
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/eIluNbW1Lh7F9iIJxb6GVbd5mxQ.roa
Signing time: Thu 02 Jan 2025 13:49:46 +0000
ROA not before: Thu 02 Jan 2025 13:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50517
IP address blocks: 212.57.192.0/19 maxlen: 19
212.57.192.0/24 maxlen: 24
212.57.193.0/24 maxlen: 24
212.57.194.0/24 maxlen: 24
212.57.195.0/24 maxlen: 24
212.57.196.0/24 maxlen: 24
212.57.197.0/24 maxlen: 24
212.57.211.0/24 maxlen: 24
212.57.212.0/24 maxlen: 24
212.57.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:87:be:46:58:bc:30:c5:7f:6b:42:77:3f:6f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Jan 2 13:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78896e35b5b52e1ec5f62209c5be8655b7799b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:5a:84:97:53:42:ec:4d:d2:9d:8f:83:d8:
7a:cd:56:80:1e:d2:91:78:1e:09:01:45:a4:2b:d3:
e2:92:3d:45:45:9d:fc:e6:6d:b4:b4:3b:5f:ec:ea:
ee:c0:dd:99:a4:91:aa:31:31:1e:4b:1a:7b:24:7c:
53:87:ee:0e:a7:de:ac:b2:fa:94:63:54:b2:99:2b:
3b:66:9d:e7:f9:c8:6c:c8:fe:f2:fb:85:86:aa:2e:
e6:9f:99:56:e4:66:df:9e:86:36:b6:0e:31:d3:e1:
1b:7d:a8:39:4c:45:0d:3f:a1:97:dc:d0:7d:3c:8c:
61:7d:96:fb:f1:4e:d4:db:66:0c:d5:46:ff:19:79:
77:04:13:31:9a:ba:f4:f7:bc:6c:27:62:0b:3f:d9:
ff:96:1c:57:10:4e:19:66:c5:97:b9:0c:ab:9a:89:
ee:08:39:6f:2c:9f:35:41:2b:02:65:e4:38:9c:cb:
0b:98:ff:61:f3:85:8b:7a:8a:fc:7f:9b:2b:76:ba:
fb:6a:9b:cc:78:8e:0b:e2:a1:16:c7:10:e9:33:19:
4a:38:73:b3:2b:c6:dc:1d:2b:28:5c:02:4c:3e:e1:
63:b4:17:e9:75:63:e2:c3:38:b4:1e:f2:bd:55:95:
8e:40:92:70:08:ce:79:17:34:5c:f2:9c:fc:47:58:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:6E:35:B5:B5:2E:1E:C5:F6:22:09:C5:BE:86:55:B7:79:9B:14
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/eIluNbW1Lh7F9iIJxb6GVbd5mxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
12:c3:4b:06:f7:91:ac:74:8b:0f:f4:c6:cd:36:5d:89:b8:b0:
7e:44:1d:2a:07:3e:38:0e:c8:66:2d:9f:02:2c:3b:fd:23:e7:
f5:88:e5:1e:81:75:ec:0b:d5:1a:96:c8:55:92:68:05:ae:1c:
83:21:c9:15:e1:fc:89:e4:66:e6:5b:16:5e:99:3a:84:2d:fc:
da:e0:39:95:a1:d4:72:4d:e4:23:c5:ea:13:00:5c:ab:3e:c0:
cd:42:32:c8:c5:58:ef:6e:3c:48:73:d3:3f:f9:30:71:58:da:
ac:0e:89:74:06:ef:f3:1d:cf:26:78:37:95:52:17:fd:75:cb:
06:54:3d:21:ca:d6:84:a3:20:66:c9:b0:45:83:3a:00:f6:a5:
50:20:42:bd:e9:80:b0:73:c6:02:70:fb:09:ea:10:fb:70:91:
b2:a0:90:d0:c7:45:b6:23:1a:64:54:66:2b:d4:f9:fe:6c:50:
9c:42:8e:a3:a3:cc:e3:72:75:d7:a7:94:f8:2d:fb:77:9f:8f:
b0:8c:bc:c5:d7:45:80:ce:8c:b7:ee:f1:12:f8:7a:1d:8b:4a:
d6:66:54:64:02:d4:50:9d:d4:32:9e:ff:ef:f5:1f:0e:19:b1:
32:c0:6a:fa:c9:48:32:2c:f5:db:24:58:f4:05:b0:e7:89:a7:
1b:f6:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:21 2025 by rpki-client