Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/8RT2sdfV0cf1-ZxP9XOmDfw3VFk.roa
File: 8RT2sdfV0cf1-ZxP9XOmDfw3VFk.roa (raw, json)
Hash identifier: 7nhdYn1yyYtJ/waKEbhcZzln2LIYRgGACqaAkjx65lk=
Subject key identifier: F1:14:F6:B1:D7:D5:D1:C7:F5:F9:9C:4F:F5:73:A6:0D:FC:37:54:59
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 0194B79ADA8A32392F67736635AFEB7EA389
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/8RT2sdfV0cf1-ZxP9XOmDfw3VFk.roa
Signing time: Thu 30 Jan 2025 14:26:06 +0000
ROA not before: Thu 30 Jan 2025 14:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210928
IP address blocks: 212.15.50.0/24 maxlen: 24
212.15.54.0/24 maxlen: 24
212.15.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:9a:da:8a:32:39:2f:67:73:66:35:af:eb:7e:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jan 30 14:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f114f6b1d7d5d1c7f5f99c4ff573a60dfc375459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:64:a3:36:c2:33:b3:3c:b9:57:77:38:91:
ab:0c:e9:31:57:0f:e9:de:fb:4d:e1:40:72:99:0e:
0e:00:2d:27:c4:60:e2:b9:e9:dd:c3:35:99:01:b6:
37:25:0e:2f:9b:8f:c0:79:81:34:13:49:53:07:92:
42:df:c0:75:9e:3e:d7:2a:21:24:f3:5e:3d:ab:64:
ac:6d:96:1b:6f:16:bf:75:cc:6c:d4:e6:5d:ce:3c:
54:21:75:92:f1:2d:ea:0c:5c:9a:b3:e7:14:0f:4b:
c8:52:0a:c4:59:02:30:47:88:e5:73:9a:80:b4:6e:
9b:c6:69:db:ec:49:5a:82:dc:f2:ae:03:be:27:fc:
da:a8:f1:d7:78:67:3e:fb:a9:52:26:b5:93:eb:af:
bf:e9:72:09:f1:f4:36:3d:e9:21:52:44:2e:21:5f:
2a:0f:e8:7e:49:83:73:30:4f:1f:98:45:dc:b4:59:
06:b8:39:29:7d:1f:40:e9:c7:d7:30:e0:84:d3:60:
42:34:80:07:ca:71:3b:57:b5:e5:7a:3d:cb:00:05:
d4:39:cb:95:a0:17:f1:ff:cb:b1:41:a0:f5:f3:29:
14:71:a4:e8:4c:64:ed:9f:df:1e:aa:cd:bf:51:6d:
4f:3c:69:8d:59:97:04:df:c2:6f:ec:52:24:e8:9b:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:F6:B1:D7:D5:D1:C7:F5:F9:9C:4F:F5:73:A6:0D:FC:37:54:59
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/8RT2sdfV0cf1-ZxP9XOmDfw3VFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.50.0/24
212.15.54.0/23
Signature Algorithm: sha256WithRSAEncryption
20:60:28:3e:62:58:00:78:f1:60:7b:a0:3a:47:30:6b:45:cc:
e3:27:fb:a1:12:19:47:90:05:a7:e7:e2:1c:aa:d5:47:5f:72:
60:3c:e4:35:15:79:6f:ea:30:1d:77:07:be:cd:b8:bd:56:a0:
f9:a0:5f:d6:5b:70:1a:dd:d4:c1:4a:64:2d:19:35:29:bd:b5:
41:a8:fa:9e:60:be:30:1b:5e:ff:45:f6:b6:89:a4:c8:fb:36:
76:17:6e:4a:14:87:c5:20:7b:52:97:fc:24:34:27:76:69:fa:
90:a7:bf:ad:31:36:d7:96:dc:ad:af:27:d5:4d:32:77:96:24:
bb:36:e4:ed:7a:42:20:cd:47:24:35:be:01:50:4a:57:cc:fd:
cf:06:52:55:46:b2:9a:b9:9d:f7:2f:d2:cd:28:be:dc:61:95:
65:26:52:8e:8e:b8:3e:da:09:87:97:5c:e5:37:78:ba:fd:01:
22:71:0b:51:71:c8:03:07:c3:29:2e:76:29:da:56:f8:7c:07:
5e:9a:a7:09:b0:80:86:76:d1:d5:ff:14:f8:6f:93:e3:9f:2f:
54:76:91:ab:4d:04:c3:1b:c9:1f:4b:5f:fa:98:f4:b5:25:57:
0b:4c:a9:c2:4a:e4:56:a3:86:8a:15:f9:64:35:9c:a0:85:8c:
d4:ed:da:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZS3mtqKMjkvZ3NmNa/rfqOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjUwMTMwMTQyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE0ZjZiMWQ3ZDVkMWM3ZjVmOTljNGZmNTczYTYwZGZjMzc1NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RJkozbCM7M8uVd3OJGrDOkxVw/p
3vtN4UBymQ4OAC0nxGDiuendwzWZAbY3JQ4vm4/AeYE0E0lTB5JC38B1nj7XKiEk
8149q2SsbZYbbxa/dcxs1OZdzjxUIXWS8S3qDFyas+cUD0vIUgrEWQIwR4jlc5qA
tG6bxmnb7ElagtzyrgO+J/zaqPHXeGc++6lSJrWT66+/6XIJ8fQ2PekhUkQuIV8q
D+h+SYNzME8fmEXctFkGuDkpfR9A6cfXMOCE02BCNIAHynE7V7Xlej3LAAXUOcuV
oBfx/8uxQaD18ykUcaToTGTtn98eqs2/UW1PPGmNWZcE38Jv7FIk6Jvs/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPEU9rHX1dHH9fmcT/Vzpg38N1RZMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvOFJUMnNkZlYwY2YxLVp4UDlYT21EZnczVkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1A8yAwQB
1A82MA0GCSqGSIb3DQEBCwUAA4IBAQAgYCg+YlgAePFge6A6RzBrRczjJ/uhEhlH
kAWn5+IcqtVHX3JgPOQ1FXlv6jAddwe+zbi9VqD5oF/WW3Aa3dTBSmQtGTUpvbVB
qPqeYL4wG17/Rfa2iaTI+zZ2F25KFIfFIHtSl/wkNCd2afqQp7+tMTbXltytryfV
TTJ3liS7NuTtekIgzUckNb4BUEpXzP3PBlJVRrKauZ33L9LNKL7cYZVlJlKOjrg+
2gmHl1zlN3i6/QEicQtRccgDB8MpLnYp2lb4fAdemqcJsICGdtHV/xT4b5Pjny9U
dpGrTQTDG8kfS1/6mPS1JVcLTKnCSuRWo4aKFflkNZyghYzU7dov
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:35 2025 by rpki-client