Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa
File: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (raw, json)
Hash identifier: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=
Subject key identifier: 33:93:ED:01:40:7A:0B:46:10:67:EB:77:66:49:5A:A4:79:04:7F:F9
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 01941F8C452EEDC16B362FE2408BB18D7605
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51586
IP address blocks: 212.18.101.0/24 maxlen: 24
2a12:5c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:45:2e:ed:c1:6b:36:2f:e2:40:8b:b1:8d:76:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3393ed01407a0b461067eb7766495aa479047ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:16:b0:a3:fa:a6:12:23:04:24:dc:fe:3c:
43:77:27:6b:79:63:1a:d2:0e:a9:83:b0:2d:80:8a:
8a:89:8e:98:c2:81:09:b4:d0:90:57:61:4f:1b:6c:
db:7f:38:b5:6d:5b:a4:1e:ae:ea:bf:7a:e1:87:92:
d3:f6:3f:74:31:66:8c:72:35:56:e7:d7:b1:57:36:
aa:87:8a:b8:de:11:f4:60:89:66:08:ab:ab:f4:9b:
33:0f:8c:7c:c3:56:2d:ee:31:fb:65:9b:fe:c1:c9:
26:9d:9b:03:3b:2f:45:d4:03:3c:d7:6a:51:ed:a7:
e2:25:04:14:4f:f3:6d:56:e3:5b:e8:3a:e6:b4:e7:
9d:18:3b:e1:62:c1:81:9e:17:33:62:94:1f:e8:49:
fb:77:c1:f1:e3:88:bf:37:51:39:97:0b:e3:9f:f9:
4d:ea:04:6c:77:e8:33:4c:d2:c3:ee:a8:5b:20:0c:
f9:49:cd:2b:9f:a8:65:73:78:2e:cc:e5:b2:02:e5:
ee:0d:1c:88:bc:b4:d1:7e:3c:d5:2c:34:f2:1d:1a:
d2:84:23:de:b3:92:c1:d7:58:5a:8e:97:72:1b:83:
a6:e6:80:4c:b1:c0:a0:74:9d:e0:58:bc:ef:16:3e:
90:71:5c:45:f6:2a:18:bb:3f:46:c3:97:25:67:ba:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:ED:01:40:7A:0B:46:10:67:EB:77:66:49:5A:A4:79:04:7F:F9
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.101.0/24
IPv6:
2a12:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
4e:a5:d4:eb:76:6e:51:2b:cc:10:84:37:fa:0e:52:d0:01:c6:
a9:75:b4:0d:ba:e4:7e:1b:f9:7b:ee:15:49:5c:37:38:85:2d:
42:d9:f6:d1:fe:81:b8:e5:57:c5:71:9f:3b:b5:3a:cf:71:4d:
82:ad:82:56:cd:3a:8e:19:ad:74:9a:19:7c:36:88:a3:e5:40:
5e:01:02:31:53:52:ea:11:79:21:98:d9:bd:9b:33:c5:e5:05:
6c:86:88:88:68:a6:cc:c3:c3:e8:f1:c7:cb:f3:83:6a:f6:44:
25:ca:8c:1a:52:f2:b2:b1:78:de:c4:d6:5a:5b:fb:35:c8:2d:
88:89:4e:79:96:5c:50:22:77:94:18:6d:2b:d1:fe:5b:90:93:
43:f7:2a:69:08:a3:fa:ae:fb:da:e8:b3:ae:1c:2e:f7:4f:ac:
7a:10:11:65:1e:a7:2a:ce:85:03:ef:18:fe:c6:bf:ee:f1:21:
0d:78:0f:76:e5:de:ee:99:fe:30:c5:c0:c9:4d:81:5b:9f:cc:
d6:64:8d:1e:36:a9:e0:da:8e:74:69:b7:48:c4:70:66:37:c1:
a9:a3:41:21:0c:8e:09:99:ad:2c:81:03:7b:bd:63:65:5e:eb:
b9:17:26:d3:f1:ea:a2:2b:bb:4a:be:16:44:ad:38:1f:fe:91:
1d:da:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:01 2025 by rpki-client