Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wCPuFGnL4hZcHBcy13BYRytWNnw.roa
File: wCPuFGnL4hZcHBcy13BYRytWNnw.roa (raw, json)
Hash identifier: hcCrtgpFJTpw70gCeyDScmWOQ8qHMIKsbsL8JZ9I6gU=
Subject key identifier: C0:23:EE:14:69:CB:E2:16:5C:1C:17:32:D7:70:58:47:2B:56:36:7C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747FE729BC4479245C0D8BE7DDBA27E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wCPuFGnL4hZcHBcy13BYRytWNnw.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202690
IP address blocks: 212.5.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fe:72:9b:c4:47:92:45:c0:d8:be:7d:db:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c023ee1469cbe2165c1c1732d77058472b56367c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:b1:53:12:d7:7e:7c:ce:fd:96:e1:ac:91:
0f:83:44:7e:ee:b8:83:d0:81:1e:b8:12:1a:ba:73:
80:35:0a:1c:91:9b:b4:5a:36:03:9f:32:b8:2b:60:
be:e3:82:45:55:05:1b:1c:af:7c:d8:2f:40:59:10:
67:3d:93:b9:5a:96:72:2b:b6:fa:bd:b0:4a:e4:92:
cb:da:c8:32:74:07:fe:9c:46:70:cb:b9:e7:7d:2c:
ba:aa:7a:ee:73:87:07:fa:8f:1d:b6:ea:0e:03:72:
67:d4:0f:9c:fc:5d:fb:42:2a:b0:a5:6b:45:0f:12:
c6:59:8b:4e:0b:41:5a:14:50:18:1d:62:b7:ac:b0:
18:07:aa:a8:c1:19:81:81:13:21:b9:29:5c:ce:89:
8d:24:87:59:53:f5:81:3e:1e:47:c4:d9:57:c4:f6:
7c:89:fa:e5:51:02:8a:79:fb:bc:04:7f:59:45:b9:
47:05:8b:12:81:52:b3:ac:29:0e:d3:59:6f:93:71:
73:ba:5c:8b:a6:66:b9:4a:40:97:e7:50:82:43:26:
5c:e8:ad:b6:2a:4d:df:2c:30:99:dd:c3:65:72:dc:
a4:ce:3e:62:cf:a4:b2:10:d6:c0:51:a1:5d:ac:e0:
65:1e:0a:b9:7a:d2:16:5b:ec:9d:57:08:6a:e5:58:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:23:EE:14:69:CB:E2:16:5C:1C:17:32:D7:70:58:47:2B:56:36:7C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wCPuFGnL4hZcHBcy13BYRytWNnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c4:3d:74:08:1a:82:82:94:bb:d8:55:14:00:b5:a5:4e:9f:
60:cc:da:55:34:57:f2:c4:d1:17:33:63:19:e9:cb:c6:cc:37:
3e:7e:71:2b:34:ba:18:24:1b:8a:60:03:51:a9:3d:a2:1f:56:
ae:75:56:07:b7:bd:d8:59:f1:5c:c6:5d:0c:6b:7f:54:ec:ce:
fa:4e:52:05:9a:d8:86:4f:63:6c:d8:ac:99:b4:e4:cf:f9:d1:
3b:b3:d5:76:02:f2:89:47:a0:67:7f:28:72:a9:04:71:94:6d:
0e:40:46:fd:fc:7b:d2:9f:d3:b5:d1:ae:5a:da:0e:82:91:38:
1b:c7:25:95:cc:97:e2:ad:c0:21:03:75:28:0f:c0:4b:4d:64:
32:97:78:05:ec:56:2e:09:46:d2:fe:4b:c9:d0:2d:9f:ea:2c:
f4:fd:94:c9:24:c2:c7:48:6a:2b:41:49:77:29:64:84:0c:77:
14:cb:f2:1a:f3:51:04:68:50:8b:a9:56:b3:26:f0:c5:41:e9:
81:32:0c:a7:d3:b5:53:11:06:4d:68:18:90:72:2c:f9:d9:03:
e8:d4:b6:ec:51:b9:58:12:8c:ba:4a:cb:c5:79:c0:06:4f:08:
61:c4:13:6f:56:b3:13:91:4b:b9:21:f2:1c:27:e8:7c:c2:7b:
8d:83:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:12 2025 by rpki-client