Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/1yx8ZT8Y1d5r_-FpZlprZ5zJuIU.roa
File: 1yx8ZT8Y1d5r_-FpZlprZ5zJuIU.roa (raw, json)
Hash identifier: p25iqv/NH8pOTiePKYso3BpGfEuMvTA3vOU3ceA7nsE=
Subject key identifier: D7:2C:7C:65:3F:18:D5:DE:6B:FF:E1:69:66:5A:6B:67:9C:C9:B8:85
Certificate issuer: /CN=0f5026e94fe0598f7eb6f46236a6397e62f01e7c
Certificate serial: 0194228D8469F0C4BAA87052C3ED3221BF89
Authority key identifier: 0F:50:26:E9:4F:E0:59:8F:7E:B6:F4:62:36:A6:39:7E:62:F0:1E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Am6U_gWY9-tvRiNqY5fmLwHnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/1yx8ZT8Y1d5r_-FpZlprZ5zJuIU.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8264
IP address blocks: 212.197.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:84:69:f0:c4:ba:a8:70:52:c3:ed:32:21:bf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5026e94fe0598f7eb6f46236a6397e62f01e7c
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d72c7c653f18d5de6bffe169665a6b679cc9b885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:bb:90:9c:53:25:b9:fd:55:87:2b:a6:2c:
a1:9c:74:6d:f3:9a:c4:e8:6a:3a:50:86:a5:41:94:
8b:0b:d5:a6:b8:d1:8f:cb:cf:ca:7c:38:7e:ef:9d:
38:ef:6a:cc:a5:f8:0d:9b:71:6d:8e:03:8d:2a:fe:
6a:67:08:13:83:98:52:21:cf:41:63:e0:b3:11:0b:
f7:fc:75:68:66:5f:87:f4:30:1e:84:19:bb:e4:ab:
c0:ae:01:d4:e3:55:5e:c7:8d:52:3b:bd:8d:53:f6:
d4:98:69:d0:a4:3e:6b:dd:4d:7d:ae:f0:70:d9:e2:
7b:d7:51:64:8c:f4:e1:11:2d:39:6f:8b:ac:ed:c7:
11:48:e4:71:72:f9:9b:de:0a:c0:ad:19:dc:7c:fc:
63:a1:d8:ab:fe:95:a4:82:85:c6:8a:c7:e4:df:a8:
97:58:65:b3:c7:03:c2:2e:92:6c:9d:5a:9e:96:b7:
6b:0d:28:36:91:0c:29:1d:f3:9e:b3:dd:c6:05:f3:
14:70:6f:11:4e:7d:d7:2d:3b:bb:87:9b:98:c6:62:
35:2d:91:80:a1:90:b1:72:7b:63:da:7e:a0:0f:58:
75:d8:aa:77:49:70:7b:5c:7f:ac:b5:0a:c6:4c:78:
b6:be:62:17:aa:4b:1b:ea:1c:80:ec:09:ae:25:c1:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:7C:65:3F:18:D5:DE:6B:FF:E1:69:66:5A:6B:67:9C:C9:B8:85
X509v3 Authority Key Identifier:
keyid:0F:50:26:E9:4F:E0:59:8F:7E:B6:F4:62:36:A6:39:7E:62:F0:1E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Am6U_gWY9-tvRiNqY5fmLwHnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/1yx8ZT8Y1d5r_-FpZlprZ5zJuIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/D1Am6U_gWY9-tvRiNqY5fmLwHnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.197.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5c:70:fb:07:ae:f6:06:65:b4:d7:d2:7d:f1:53:5d:b1:ef:28:
ff:1f:8e:7a:a7:0b:bd:c9:0a:11:75:62:19:53:a3:aa:1b:bd:
84:4a:18:0f:60:d2:52:97:ed:f8:88:eb:af:16:c4:d5:d3:fb:
5d:76:28:9a:34:1a:06:fe:28:33:66:ac:e7:58:31:66:16:6b:
59:b6:fd:74:86:a9:c4:95:6f:57:4e:3c:7a:ef:62:19:2d:e7:
7c:b9:67:65:43:a1:6f:89:62:fb:8a:c5:d4:1f:98:b0:dc:24:
ad:0b:c2:b1:f8:19:07:7d:82:59:61:d0:10:9c:31:a1:24:bf:
e3:04:a7:5d:f5:52:ce:ba:24:4f:8d:f8:fe:cb:6a:82:a0:9a:
80:a1:da:3b:cb:3e:07:07:47:6e:d3:39:9d:36:1f:10:b5:7e:
d8:9d:81:37:bb:95:54:84:d3:97:84:21:d8:8f:26:19:c6:f1:
4a:de:25:be:62:66:17:64:b0:11:43:d9:ce:ea:9d:ce:b6:46:
3c:76:44:1e:9e:13:80:e5:5d:c9:d3:02:48:d8:ea:73:f1:73:
60:93:a5:92:bc:a4:5c:aa:cc:33:32:89:fd:8a:f9:12:7c:a9:
e2:65:3c:bb:44:eb:78:a2:6c:09:ec:3f:c0:2d:25:c8:a3:34:
ce:56:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:31 2025 by rpki-client