Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/1nXVRcnIskxFsV_CAlyd3on4d2k.roa
File: 1nXVRcnIskxFsV_CAlyd3on4d2k.roa (raw, json)
Hash identifier: bIsTyhGF2av+BPXlOvpedTccGLBYoFpAAGDDIIWifm4=
Subject key identifier: D6:75:D5:45:C9:C8:B2:4C:45:B1:5F:C2:02:5C:9D:DE:89:F8:77:69
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 019427487E98C6E3323C5B3186749806F49D
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/1nXVRcnIskxFsV_CAlyd3on4d2k.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12650
IP address blocks: 212.45.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7e:98:c6:e3:32:3c:5b:31:86:74:98:06:f4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d675d545c9c8b24c45b15fc2025c9dde89f87769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:25:f6:db:83:70:a0:94:55:07:3c:d6:84:
8d:1c:f5:2f:49:22:b9:97:50:08:46:5a:97:10:be:
27:f8:b9:07:01:fa:79:8b:1a:68:a6:09:07:f2:79:
e5:d1:65:ef:65:bf:b8:ac:73:77:0e:01:fb:56:22:
ae:46:40:c8:27:8a:c6:6a:b0:c7:d9:4d:68:ea:90:
a8:b0:7e:d7:3e:1f:c3:65:10:94:89:2e:49:02:db:
55:19:a1:62:38:0f:cb:48:41:c0:ac:f8:bb:65:6e:
53:ef:3a:a6:21:74:94:db:e4:77:75:62:73:3b:91:
4a:71:c0:d2:57:17:33:54:68:a1:92:30:68:63:f6:
ce:2e:cb:93:a2:c8:6f:4f:e7:34:f3:21:37:b5:10:
aa:cc:94:b2:55:66:53:8d:51:44:cc:4e:16:97:ea:
d8:aa:d6:50:b1:51:86:8d:ed:e2:d9:0e:10:69:e3:
8c:f3:66:e7:be:37:6e:77:6a:09:90:31:26:af:92:
b9:73:81:c9:bf:13:a0:0b:81:d7:bb:f0:55:ae:4b:
ec:6e:74:2b:03:15:72:20:15:3b:2e:9e:e0:05:10:
0e:49:a2:41:91:52:66:e4:cd:0f:51:0d:09:86:e7:
0d:ab:2e:16:74:8a:27:10:fd:e5:42:55:c2:22:c0:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:75:D5:45:C9:C8:B2:4C:45:B1:5F:C2:02:5C:9D:DE:89:F8:77:69
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/1nXVRcnIskxFsV_CAlyd3on4d2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.45.96.0/21
Signature Algorithm: sha256WithRSAEncryption
55:21:78:db:28:dd:f5:37:da:e0:7f:fd:7b:a9:0f:ed:13:72:
b0:16:b8:d3:48:91:e6:16:bf:99:05:62:35:d2:69:90:ad:a9:
31:55:56:45:37:cc:7f:4b:06:37:b3:f6:9f:a1:58:6c:fa:6a:
11:1e:67:bc:92:5f:30:15:62:6a:54:d2:85:e1:41:24:77:df:
22:ee:43:75:ec:20:90:6b:a4:df:71:b7:75:d9:b4:63:1c:1d:
fa:99:c3:9a:5a:4d:d4:40:11:d8:e1:dc:36:9d:7f:73:18:b5:
30:3e:d1:52:7b:1b:ee:94:b0:4b:83:cd:4f:43:dc:c0:5a:b0:
14:92:b3:05:15:9d:6f:70:21:c1:80:6b:bd:25:c3:31:5d:35:
c6:90:3d:d3:ef:de:ca:ad:14:c8:ca:d1:46:68:89:cd:93:3f:
c6:7d:62:53:76:58:f7:3c:ac:9c:0d:3c:19:95:a3:09:08:2e:
6b:71:24:d0:e0:f9:5c:37:f4:fd:82:60:6e:73:3c:e7:28:61:
ea:15:dc:e9:19:0b:00:eb:d6:29:3c:0f:98:e1:30:d5:1a:63:
64:2b:89:5e:1c:a7:61:ee:ad:dc:3d:67:e9:ac:83:42:61:66:
62:7f:89:35:36:ae:cf:be:f7:ac:ab:6f:87:0b:10:35:fa:b0:
75:db:0f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:15:54 2025 by rpki-client on console.sobornost.net