Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/baI3T-QVvPK6b76nYUCZm85ZrSs.roa
File: baI3T-QVvPK6b76nYUCZm85ZrSs.roa (raw, json)
Hash identifier: JldtWM10Ffd/1qvivADvuf6lNYl9UTodEd29bMMwfcg=
Subject key identifier: 6D:A2:37:4F:E4:15:BC:F2:BA:6F:BE:A7:61:40:99:9B:CE:59:AD:2B
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 01942826FF5DCE83F10420B6DD79062CF0CE
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/baI3T-QVvPK6b76nYUCZm85ZrSs.roa
Signing time: Thu 02 Jan 2025 17:53:51 +0000
ROA not before: Thu 02 Jan 2025 17:53:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49762
IP address blocks: 212.226.148.0/24 maxlen: 24
212.226.151.0/24 maxlen: 24
2001:998:82::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:ff:5d:ce:83:f1:04:20:b6:dd:79:06:2c:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 2 17:53:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6da2374fe415bcf2ba6fbea76140999bce59ad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:09:4f:cc:ce:ce:08:a1:8d:7d:52:86:2e:
fd:75:e0:9d:7e:02:05:31:d4:30:dd:f8:a9:05:10:
cf:a3:ba:3d:91:a9:26:e3:e4:f5:78:48:a7:73:40:
d6:f7:b9:6b:3b:30:c7:99:4e:2e:99:81:10:5b:55:
e3:43:6e:48:82:65:8c:c9:f0:12:ed:1d:ae:c4:11:
ac:be:79:59:f9:ee:7c:f7:20:bd:2b:03:eb:e8:11:
1b:c2:a7:e6:8f:92:fe:88:e5:e7:bc:93:c0:c3:38:
c9:c9:c2:9d:6e:05:a5:eb:09:f4:f7:51:d6:42:69:
7a:b1:a2:03:3f:77:ae:18:1a:ba:fd:e2:6b:22:5f:
2f:a6:c2:c2:9b:a9:7a:3d:75:17:81:fd:8f:2e:3c:
2b:06:dd:eb:9c:fb:06:5c:43:eb:3a:f0:c1:7b:35:
7f:80:d0:50:71:97:5f:80:8f:9b:7b:01:67:dc:9b:
9c:f8:cc:e7:ba:b1:34:9e:d1:f3:b5:2e:b6:36:4b:
e3:c1:e9:2d:e8:d0:af:d3:3b:b6:d1:71:c1:b0:9b:
94:81:74:60:c1:ab:77:7b:ce:9f:26:3a:6b:36:5a:
18:c0:ba:84:d0:95:59:e4:d7:e4:2a:13:8c:02:40:
58:88:98:e5:ba:38:9c:ac:58:49:bb:29:bc:9f:f2:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:37:4F:E4:15:BC:F2:BA:6F:BE:A7:61:40:99:9B:CE:59:AD:2B
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/baI3T-QVvPK6b76nYUCZm85ZrSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.226.148.0/24
212.226.151.0/24
IPv6:
2001:998:82::/48
Signature Algorithm: sha256WithRSAEncryption
66:9c:2f:2b:14:f3:38:14:31:67:3f:73:84:80:dc:bf:69:44:
79:0e:1e:6a:71:93:24:a7:ef:8c:c2:e6:81:29:bd:c5:c5:96:
c3:f6:70:29:e4:10:81:cf:5f:ac:95:08:fb:5e:ad:e1:20:bd:
7d:8d:82:ff:14:af:d2:30:56:d4:3e:9a:1d:38:92:a9:34:5b:
72:85:60:3c:87:e1:ff:6e:75:f1:b6:4b:a6:00:d7:7d:b9:56:
51:70:7a:13:6c:9d:f7:56:72:d4:8e:c7:58:ae:cf:d3:c0:d6:
ea:4c:3a:64:16:f4:4a:ab:df:c5:db:72:7c:be:8d:51:7e:bb:
84:21:ab:48:dd:22:07:a7:43:bb:c2:78:33:51:3a:10:33:c0:
ad:c5:6f:a3:3b:8d:8f:9c:ef:36:0a:45:33:de:88:88:97:35:
2c:26:98:9c:72:cd:29:32:47:c4:68:ed:10:16:8f:c2:ef:a2:
c8:7c:f2:9d:21:d0:6b:6d:a8:c4:0b:54:ea:87:2c:7a:5d:6a:
63:74:a6:dd:c6:e5:a2:01:58:1e:96:5f:19:d1:58:2b:62:b8:
0d:0d:c2:04:54:58:d8:45:c2:d2:08:cf:72:08:62:83:c7:4c:
5b:0a:bf:94:c1:6e:90:5e:6a:2b:82:f5:f7:6d:36:11:3a:57:
dd:10:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net