Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SIHYNikgSSrdj9EMpv2MZ7o_quU.roa
File: SIHYNikgSSrdj9EMpv2MZ7o_quU.roa (raw, json)
Hash identifier: cagP1fqE6bLj5k8XEr+1K6xk+sA8peeB97fO8458IRY=
Subject key identifier: 48:81:D8:36:29:20:49:2A:DD:8F:D1:0C:A6:FD:8C:67:BA:3F:AA:E5
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F7DAE693B50DCA306350325909E5
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SIHYNikgSSrdj9EMpv2MZ7o_quU.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197929
IP address blocks: 212.5.152.0/23 maxlen: 24
212.5.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f7:da:e6:93:b5:0d:ca:30:63:50:32:59:09:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4881d8362920492add8fd10ca6fd8c67ba3faae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:4b:e5:8c:6e:06:fa:13:e0:19:47:99:ac:
89:d9:35:5d:5c:73:89:36:bd:6f:cb:83:65:d7:16:
80:fe:b7:8e:55:56:36:09:7e:44:7d:37:08:d5:6a:
c4:5e:53:1e:29:34:a6:5a:bf:c9:f1:d7:1b:90:31:
1e:58:b8:c8:e3:f7:92:03:aa:6a:bc:8a:f6:79:38:
41:e1:a9:9b:9d:dd:f2:5f:f4:59:32:4d:01:e3:39:
6d:a3:db:7f:d1:38:80:5b:c7:4c:94:87:74:11:5c:
ec:0b:37:ae:f2:2d:05:f6:c3:55:b9:58:81:6f:9c:
33:b9:76:fc:eb:a1:f0:5c:f5:47:7f:ec:89:2a:61:
c9:71:0f:40:74:dd:9c:17:5e:39:f2:fa:e6:a9:b4:
1b:bd:64:43:3a:62:bd:a9:e9:07:e9:e4:fe:29:bb:
e3:e6:12:72:5a:37:a5:f5:ae:38:ed:f3:26:e9:3d:
1a:6c:bc:4f:70:ef:56:fe:5b:ae:c7:56:14:da:fe:
db:58:98:e8:1a:41:7e:8b:40:1d:5e:f7:f5:76:5d:
d4:6b:68:39:4e:8a:75:48:3f:fd:31:5d:b9:bb:6e:
42:f0:24:38:1c:c4:66:c2:41:80:0d:c4:70:1c:3f:
9a:83:54:f5:5e:83:a7:16:ac:54:64:3c:ae:42:d5:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:D8:36:29:20:49:2A:DD:8F:D1:0C:A6:FD:8C:67:BA:3F:AA:E5
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SIHYNikgSSrdj9EMpv2MZ7o_quU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:1d:66:f7:16:2c:78:c8:6f:9e:68:7b:94:dc:cf:a0:42:1a:
b9:a5:e3:73:e0:9a:29:8a:1d:b0:a2:61:c3:7a:b8:7b:63:72:
5b:ef:6c:4b:0b:98:dc:dc:4e:1b:65:36:47:db:cf:b5:29:c7:
b0:0c:4b:6a:54:70:46:e2:6e:2e:44:a3:a7:03:54:e1:8b:eb:
9b:53:3d:70:38:c7:fd:71:e3:fd:ba:41:bb:70:69:51:5e:3b:
9c:43:ad:bd:43:c5:1c:eb:82:a8:6b:51:25:72:53:70:d7:de:
01:61:2d:26:e0:e7:6b:3d:d4:e2:01:2a:0c:49:5d:8e:9a:61:
95:97:0b:b9:07:94:84:9c:48:36:8c:2e:56:83:ab:96:14:af:
4d:a8:c9:7e:1f:39:35:05:61:87:ca:9d:c3:33:d4:12:83:8e:
b1:54:35:3a:ca:1e:8d:a3:e8:ab:d5:90:43:4a:75:0c:54:47:
73:25:c2:4d:2f:ee:77:35:5e:d5:47:87:f6:f4:97:bb:01:35:
ad:2b:96:7e:f0:73:14:96:2d:42:ec:d6:63:e1:8c:14:3d:98:
88:b7:bd:4f:f5:b8:7c:5e:4a:06:91:37:b8:7d:62:88:70:9b:
96:17:08:db:ba:ae:a1:68:df:19:2e:84:17:35:1d:1e:2f:bb:
42:18:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:58 2025 by rpki-client