Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa
File: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (raw, json)
Hash identifier: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=
Subject key identifier: 1F:C4:15:12:25:61:5A:91:28:75:AF:42:18:4E:8E:73:7A:5D:AC:BE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 01942747DDF2C822812C6DF773C1B6B91AC5
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57793
IP address blocks: 212.18.110.0/24 maxlen: 24
2a12:8400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:dd:f2:c8:22:81:2c:6d:f7:73:c1:b6:b9:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fc4151225615a912875af42184e8e737a5dacbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:13:64:95:21:f2:c7:f1:cb:7f:3a:b3:44:
d5:bd:9e:4d:c6:43:f6:0f:d3:05:c6:ce:c6:e4:ac:
25:48:19:5e:4d:31:9a:05:64:4f:8b:53:52:40:d4:
79:5d:26:dc:5f:c2:f6:ab:c6:74:0f:3e:c7:d5:78:
30:db:93:08:51:ea:79:27:b9:69:54:2a:3c:af:02:
f8:7d:aa:15:e2:dd:e0:fa:9a:18:01:e8:4a:42:45:
71:51:26:8f:fe:a2:cc:8a:cf:f5:5e:d8:c3:7d:d5:
90:89:dd:18:4e:a6:6f:91:47:88:6e:76:61:dd:0d:
8d:4b:2d:94:f1:f0:f2:f8:25:ee:b3:a3:1f:9c:4c:
69:ca:16:74:be:2f:db:6e:a7:ca:ac:7f:60:a9:e7:
dd:35:b0:59:5d:96:0f:ed:a5:ff:a1:6a:94:2b:d0:
f1:34:42:40:32:28:09:5c:cb:20:4b:56:85:e1:57:
22:71:71:80:78:d5:97:6d:75:97:45:12:68:94:e9:
da:c1:e0:09:6f:b7:29:5d:43:66:2a:96:04:9d:bf:
4f:2b:6d:38:c7:f6:8e:7d:68:58:74:fe:f2:5d:66:
a7:2d:a7:f8:34:d1:5f:e0:ce:86:45:58:27:61:58:
42:88:14:82:60:a7:58:d5:60:af:f8:64:51:32:72:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:15:12:25:61:5A:91:28:75:AF:42:18:4E:8E:73:7A:5D:AC:BE
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.110.0/24
IPv6:
2a12:8400::/32
Signature Algorithm: sha256WithRSAEncryption
6f:10:a3:d7:e6:ce:72:1c:21:86:19:a7:3e:b0:7e:f2:cf:ba:
7d:4e:71:e3:87:0d:e6:7a:4a:cc:34:a7:6a:dc:0c:bf:2b:0a:
30:e7:e4:af:fa:13:f4:dd:3b:32:2e:17:b6:cf:94:29:b2:f4:
8f:44:1f:12:19:be:8e:2e:79:86:10:ec:6d:9c:85:4d:dc:51:
7f:28:98:15:dd:06:fa:e3:fc:41:13:e6:2e:4c:6e:5b:17:b3:
aa:27:4b:95:9c:fa:c1:42:4d:88:0b:b8:ce:b0:0a:ad:cd:cf:
5f:33:1e:ec:a6:b2:fd:78:b7:11:0a:32:ec:0a:ba:b2:9a:14:
fa:16:e0:2b:dd:c9:6b:72:41:b1:fd:52:dd:ad:3b:30:de:fc:
db:e6:1d:43:6e:1a:27:05:8b:a9:f9:4b:62:4d:6f:88:61:d1:
c4:d7:98:43:b5:38:5c:1d:47:2f:77:1d:7a:17:f8:6b:2b:18:
9e:0f:e2:4e:a3:73:61:c4:10:0f:3c:61:38:bd:e7:f5:3e:fa:
3b:85:d0:cd:77:c3:e1:cd:f0:e4:cd:73:1e:55:48:18:17:6a:
9e:0e:e5:47:33:ca:94:14:81:79:4b:5a:7b:e9:a2:45:22:76:
dc:ba:02:8e:e4:1a:18:c2:16:81:81:95:bc:7b:f3:73:83:d6:
a7:ad:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:49 2025 by rpki-client