Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/iYMgW4EcYcU5AKm4CceLlPmJSsA.roa
File: iYMgW4EcYcU5AKm4CceLlPmJSsA.roa (raw, json)
Hash identifier: 7zWW49XDo1LsXGWIP2om4UTMjsubF7Ml4DbV3OJ7N00=
Subject key identifier: 89:83:20:5B:81:1C:61:C5:39:00:A9:B8:09:C7:8B:94:F9:89:4A:C0
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01942747868DE766B0E814436A103726C8E9
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/iYMgW4EcYcU5AKm4CceLlPmJSsA.roa
Signing time: Thu 02 Jan 2025 13:49:46 +0000
ROA not before: Thu 02 Jan 2025 13:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 212.124.80.0/22 maxlen: 24
212.124.84.0/24 maxlen: 24
212.124.85.0/24 maxlen: 24
212.124.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:86:8d:e7:66:b0:e8:14:43:6a:10:37:26:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 2 13:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8983205b811c61c53900a9b809c78b94f9894ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:fd:e7:66:31:07:5d:1e:84:70:ef:da:69:
0f:94:42:29:70:bf:05:69:65:cd:62:8a:14:2b:af:
d9:69:16:7b:aa:11:b4:1d:7e:32:ca:d8:cf:12:ca:
33:46:33:c9:89:54:23:82:1d:46:cf:23:fa:c1:e1:
29:76:b6:e7:54:be:8d:a4:dc:2a:18:c8:75:32:59:
23:b6:99:a7:1e:ec:82:85:a0:bc:32:d8:fe:68:e4:
3a:7c:93:6c:93:ae:77:45:1d:c6:46:56:5d:31:ba:
7f:43:8b:d9:8f:8b:16:c6:56:74:6e:0e:6a:ef:dc:
df:bb:06:78:2a:39:a1:bf:63:7e:25:0c:ad:9e:62:
31:80:b3:4f:06:ea:0d:83:c4:af:a2:3c:75:87:06:
34:8c:2f:ae:08:0b:b3:4f:7c:12:4a:59:38:8f:be:
53:1f:26:c8:9d:5e:90:e4:0e:a3:ad:4d:55:e7:f5:
96:fd:7d:d1:3e:1f:05:2f:1b:9f:75:80:98:7e:33:
3b:92:35:54:1d:6c:d1:76:59:33:82:6d:ee:a3:65:
91:ca:00:c5:b0:37:86:a7:2b:d2:ea:52:25:e3:77:
35:3c:10:89:9c:1c:8f:e0:1c:ba:58:a6:65:29:c4:
28:7e:da:da:1d:33:8a:4b:f5:3b:31:18:9c:18:e9:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:20:5B:81:1C:61:C5:39:00:A9:B8:09:C7:8B:94:F9:89:4A:C0
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/iYMgW4EcYcU5AKm4CceLlPmJSsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.80.0-212.124.85.255
212.124.87.0/24
Signature Algorithm: sha256WithRSAEncryption
48:43:50:83:e9:16:1d:49:e9:3f:6a:55:fd:5c:14:b4:c8:15:
e0:94:03:2f:0f:0b:b7:f3:cd:95:2c:27:fb:e9:9e:70:be:44:
1f:05:bb:a0:4f:15:28:bc:5b:ea:10:e5:71:db:47:b0:ed:7e:
e4:05:e7:08:59:3b:ba:7b:f3:a4:78:9a:e2:35:ce:ef:03:b1:
2a:49:5f:0e:d1:90:c7:8f:f2:25:c7:60:59:11:93:9d:1f:f4:
28:52:67:de:b6:04:dc:94:db:82:d1:b7:7d:60:73:3d:14:eb:
53:cc:75:71:c4:18:7b:da:51:38:21:1b:d1:b1:9d:f7:2c:73:
03:13:df:e9:b2:25:57:5d:60:75:a0:3f:7b:2b:80:2e:3c:5b:
99:72:25:14:fd:f0:de:5f:6b:2c:5b:3b:16:4d:c9:32:5b:e0:
c9:b3:c9:09:3b:34:14:12:2f:0f:9e:a5:97:1c:13:43:a5:88:
a8:ad:e4:0d:6f:30:05:8b:ca:e3:93:8a:3a:1b:13:84:75:30:
32:83:f2:5c:54:99:84:b8:0a:90:61:74:4d:8c:cb:1f:c8:e7:
36:43:c4:e2:b6:24:b0:6d:14:2e:db:6b:22:4b:0e:e6:2f:6b:
a0:ef:ed:89:12:19:88:b5:62:d8:60:0b:4d:b5:27:44:63:a9:
9a:82:d6:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net