Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/rCKHmsfaJ-N_UttX96v5NH8qDLw.roa
File: rCKHmsfaJ-N_UttX96v5NH8qDLw.roa (raw, json)
Hash identifier: 9WYNXEYTHRaFHJWYWZEkKi2lmqfnZqGRx1wnqQdweYk=
Subject key identifier: AC:22:87:9A:C7:DA:27:E3:7F:52:DB:57:F7:AB:F9:34:7F:2A:0C:BC
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 019427B562F14E3EC9D2E90572C5FA1F335F
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/rCKHmsfaJ-N_UttX96v5NH8qDLw.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 212.64.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:62:f1:4e:3e:c9:d2:e9:05:72:c5:fa:1f:33:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac22879ac7da27e37f52db57f7abf9347f2a0cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:4d:02:30:bb:b9:ce:c7:7e:0b:01:a7:7b:
4e:bb:50:53:c8:78:09:82:a2:c8:13:02:b9:0a:6e:
0e:76:5f:f3:dd:d6:73:9a:a9:27:fc:8b:b8:a7:e4:
3e:83:a4:63:0e:f8:c8:6b:ea:3c:ba:00:d2:cd:90:
00:37:c4:af:ec:57:f6:10:f7:cf:1a:e0:66:ff:ae:
70:b1:6c:72:e9:13:3d:30:82:dd:c0:9a:24:d5:a0:
1a:cc:d9:d4:e7:8f:a8:ac:a0:37:0e:a2:30:4a:b7:
f6:df:f3:4e:de:72:5c:a8:95:c0:a5:a1:ad:a3:23:
df:a8:93:2d:f6:d6:9e:50:94:19:46:cf:26:8d:ca:
fb:dc:bb:00:e5:ef:f4:1a:7f:81:dc:c1:24:b8:f2:
e0:21:1f:4b:80:e4:35:ba:c4:b2:41:14:9b:8a:a5:
04:a2:67:77:eb:78:80:a7:a5:ec:bd:96:8c:c6:13:
b3:8d:16:f7:da:3c:70:ed:03:68:c5:6f:15:ce:6c:
57:7e:31:67:9f:09:10:a6:29:f9:4f:fb:38:9e:32:
31:67:02:02:7e:dc:25:92:d4:83:ef:6d:ad:a3:d0:
75:4a:74:24:17:cc:58:30:0f:40:29:43:3b:9d:62:
ce:1e:7d:df:17:7e:98:e2:90:33:a4:f3:6a:69:d4:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:87:9A:C7:DA:27:E3:7F:52:DB:57:F7:AB:F9:34:7F:2A:0C:BC
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/rCKHmsfaJ-N_UttX96v5NH8qDLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.195.0/24
Signature Algorithm: sha256WithRSAEncryption
27:df:d7:36:0d:e4:e8:26:5b:c3:b7:c1:c8:38:3e:59:59:46:
c9:3f:ee:58:80:5f:de:7a:18:39:a6:63:1e:af:45:f4:74:d4:
4e:07:8c:9c:c9:7d:54:d0:d3:a5:df:35:d3:15:4a:e4:8c:3f:
53:cb:e1:73:dd:68:57:1c:68:d9:83:e3:2c:f6:31:d4:40:a7:
83:95:5a:33:45:6d:38:35:a9:4f:ef:8d:fa:75:bf:8c:fc:1a:
29:4f:bc:33:41:4c:fb:6e:43:77:90:74:9d:32:b6:9c:4c:0d:
da:1a:28:78:83:9b:d8:e6:8a:27:41:87:a4:58:39:a1:0e:69:
f0:a6:14:b1:c2:9d:aa:22:aa:2c:4f:a8:88:64:c1:80:49:d3:
60:b1:fd:d0:6c:f6:6d:b4:65:06:8a:36:ef:7f:91:55:86:76:
26:52:0c:71:54:2a:ce:07:8d:46:9a:bb:d6:9f:92:6a:d7:ff:
98:c0:3b:cc:39:3c:42:92:f5:df:bb:f8:4e:80:6a:25:dc:7d:
11:58:60:5d:e2:7c:df:64:0a:5f:7d:ac:e9:df:cc:f3:2c:c2:
1b:93:fc:92:71:8e:25:d8:59:e5:ca:7d:55:bd:5b:38:ce:e8:
57:d1:e4:d8:b8:32:3b:83:54:57:49:28:48:af:2e:94:ae:1a:
3b:ca:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:36 2025 by rpki-client