Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa
File: Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa (raw, json)
Hash identifier: JIMzy59RHLraK6rhor2VUFRVzGxoje0mc5nW26VOt9E=
Subject key identifier: 13:3F:2C:F6:A1:14:52:1B:76:24:30:C4:9C:3C:DD:70:B8:4F:82:D2
Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial: 019421446DB5224A6CC5F80441AAA1526212
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209948
IP address blocks: 212.81.52.0/24 maxlen: 24
212.81.53.0/24 maxlen: 24
212.81.54.0/24 maxlen: 24
212.81.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6d:b5:22:4a:6c:c5:f8:04:41:aa:a1:52:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=133f2cf6a114521b762430c49c3cdd70b84f82d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:d7:75:46:4d:db:63:eb:76:60:19:31:1d:
5c:ce:52:71:ec:52:10:6c:24:6a:8c:8d:99:67:8b:
63:b0:f7:2c:93:0e:0a:9e:b7:c5:52:a3:2a:3f:e2:
99:f4:c1:e2:bd:82:95:e3:9b:d0:14:63:f9:32:70:
c8:9c:20:f9:aa:74:f2:eb:48:31:b9:45:ff:63:ce:
cb:a9:75:97:08:c7:9b:38:9f:d8:8b:d2:08:53:1d:
84:5d:c6:86:61:b9:ac:c8:2d:f8:de:53:9a:d0:ca:
cd:d8:31:01:7a:91:ba:66:e1:3e:d7:15:67:17:5a:
b0:0a:33:65:bd:ac:5d:0c:ab:ad:b5:12:46:a1:ca:
e4:86:af:22:ee:42:2b:85:7b:94:a2:9d:95:ea:e1:
2f:a0:d6:31:b5:c3:ff:4d:03:44:2f:b6:6e:fa:88:
f3:77:f6:31:02:3c:47:82:8f:06:e4:ab:36:2e:49:
49:b3:98:3e:5f:67:64:31:dc:74:f7:17:8d:73:42:
5f:93:ab:3b:9c:55:6b:dd:1f:32:5b:d6:b5:5c:73:
3e:12:6e:5c:05:5b:e9:a3:3b:f6:9b:74:1f:bc:34:
ad:5e:cd:c6:c5:9f:0b:16:f7:f8:52:9f:d8:57:5a:
b2:27:32:be:3a:4e:f9:7b:7f:05:fa:43:68:13:b7:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:2C:F6:A1:14:52:1B:76:24:30:C4:9C:3C:DD:70:B8:4F:82:D2
X509v3 Authority Key Identifier:
keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
25:7c:b7:98:f3:a5:65:09:d7:92:e3:46:10:15:e5:27:39:f5:
e0:50:d5:da:24:d0:43:af:39:56:c0:95:7b:33:7d:6a:ab:6e:
b3:88:dd:62:cc:88:9b:70:06:1b:49:2f:f3:f6:ef:02:e1:64:
0f:41:46:3f:17:6c:35:63:2a:60:f2:4b:f1:c9:00:fe:2f:2f:
e6:a8:76:e9:71:e2:8f:08:f5:fa:5c:df:f2:61:ea:a6:9a:c1:
29:56:50:1c:dc:b1:98:cd:94:4b:85:fe:2c:d9:7c:3f:9f:fb:
f3:0c:5a:90:05:de:69:cb:ce:69:1f:a2:7f:66:ab:43:c2:29:
54:c6:7f:86:db:06:83:16:2c:bf:8d:ef:ba:b4:71:5b:35:e5:
15:ce:e1:0b:2e:0e:47:f1:d4:c6:2a:59:a2:b4:d2:40:a0:db:
95:a6:63:35:55:ac:8d:11:95:80:50:64:2a:a1:53:75:ea:52:
c2:0f:93:95:a3:35:8a:8f:38:bf:53:a8:47:e4:3a:e2:38:86:
7a:bb:32:10:08:07:32:aa:a9:e8:de:77:13:b9:49:31:b8:6a:
c8:dc:18:4a:34:89:77:31:77:a0:76:fc:d2:36:50:ad:e1:e3:
60:fa:14:8c:b2:53:a6:5c:4d:52:fc:f8:fc:ca:21:cb:ba:2b:
e7:92:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net