Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/_ct2jrxg6RKH3wrlYOdA7gv_y28.roa
File: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (raw, json)
Hash identifier: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=
Subject key identifier: FD:CB:76:8E:BC:60:E9:12:87:DF:0A:E5:60:E7:40:EE:0B:FF:CB:6F
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 01942747DE3654026FD855E66EC8F092D8A2
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/_ct2jrxg6RKH3wrlYOdA7gv_y28.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198722
IP address blocks: 212.18.110.0/24 maxlen: 24
2a12:8400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:de:36:54:02:6f:d8:55:e6:6e:c8:f0:92:d8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdcb768ebc60e91287df0ae560e740ee0bffcb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:34:30:f8:13:74:4e:b4:ac:3d:ff:96:1c:
5a:90:76:87:b2:4d:4c:b6:0a:66:8f:8e:86:be:29:
c3:87:a2:f7:72:45:c0:9b:80:af:f6:a3:c4:8e:c5:
4c:0b:15:12:aa:50:38:ca:62:e7:4e:22:02:e1:9c:
b4:2b:1b:31:84:fc:8c:74:24:fb:ef:80:58:c8:a6:
ba:bf:f1:e5:db:bf:67:46:b9:44:ad:55:d4:94:08:
ea:48:94:cf:77:88:66:10:e6:cb:c9:dc:99:b7:39:
c4:a3:08:1f:55:7b:46:7a:da:db:41:35:e2:24:a6:
35:08:d9:f7:e8:4c:5d:3c:48:f1:62:f6:43:3f:ab:
18:e0:fb:9c:c1:c7:47:94:b6:d8:d1:79:6c:fd:5e:
42:cf:7e:98:57:39:a5:be:bf:2e:3e:3b:01:86:6e:
af:1f:77:db:ad:02:3f:81:27:0d:45:d4:58:f9:a8:
2d:31:92:6b:02:d2:cf:b0:64:a6:55:ed:aa:89:ca:
8e:82:dc:f1:a9:7c:7f:80:70:70:10:83:10:41:23:
4c:c0:2b:af:39:bc:2a:22:ae:5a:2c:db:50:a7:9a:
62:16:0b:20:5d:9a:f1:14:39:3e:ce:24:8b:ed:48:
44:16:b1:b5:f0:6b:b0:46:07:b3:26:a9:62:09:65:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CB:76:8E:BC:60:E9:12:87:DF:0A:E5:60:E7:40:EE:0B:FF:CB:6F
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/_ct2jrxg6RKH3wrlYOdA7gv_y28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.110.0/24
IPv6:
2a12:8400::/32
Signature Algorithm: sha256WithRSAEncryption
9f:d1:ba:de:22:52:56:f8:eb:ad:6c:73:ea:1d:13:b8:24:26:
f8:dc:73:91:ee:f1:dd:2c:a3:42:3a:36:64:a9:41:14:9c:bb:
a4:b2:3c:92:cc:54:9b:1f:f6:eb:1d:43:c9:85:cf:53:dc:bd:
53:c4:95:eb:ce:9f:7e:af:1d:b7:6a:67:80:49:bb:a0:b6:2b:
8a:a7:ad:6c:87:59:34:6b:6f:21:96:e0:31:da:ec:a2:31:77:
9e:ae:40:57:f6:fb:32:ed:6f:d0:24:99:66:de:7a:8d:01:e0:
63:22:ab:dc:8c:ea:49:b5:21:ce:2d:83:0f:00:8d:09:ee:e5:
4a:44:dd:41:15:11:d5:c7:62:e9:7e:35:25:85:0b:e1:49:89:
f6:69:85:36:77:21:d4:3f:9a:88:a4:2d:d7:63:04:e2:a9:c5:
e0:72:6d:c7:c8:8e:58:9a:a6:28:a4:95:70:ff:65:db:43:7f:
c4:91:74:79:33:93:96:8f:ad:42:cb:a3:90:b1:15:cc:cc:25:
e4:35:c3:79:1a:f9:b4:16:ad:19:c6:7b:3f:f5:48:e8:49:46:
39:a1:62:bf:ee:92:2d:08:a3:7b:59:25:59:24:bb:db:e1:2e:
77:4f:98:99:5e:88:c2:f1:00:c0:de:c8:94:0f:31:72:b8:aa:
e5:17:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:11 2025 by rpki-client