Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/_C22KYJjbT7k9Y0F086sSatuYjQ.roa
File: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (raw, json)
Hash identifier: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=
Subject key identifier: FC:2D:B6:29:82:63:6D:3E:E4:F5:8D:05:D3:CE:AC:49:AB:6E:62:34
Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial: 019427B6219AC83F7A5E5FA0B3AAC6A08336
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/_C22KYJjbT7k9Y0F086sSatuYjQ.roa
Signing time: Thu 02 Jan 2025 15:50:34 +0000
ROA not before: Thu 02 Jan 2025 15:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208001
IP address blocks: 2.59.208.0/22 maxlen: 22
91.212.209.0/24 maxlen: 24
185.186.56.0/22 maxlen: 22
2a13:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:21:9a:c8:3f:7a:5e:5f:a0:b3:aa:c6:a0:83:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc2db62982636d3ee4f58d05d3ceac49ab6e6234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:db:f5:10:53:9d:0e:90:f8:64:85:f2:a2:d3:
fd:a7:e4:af:2f:33:cd:13:41:43:fe:8b:f6:6b:ec:
3a:5c:71:31:4b:0b:79:56:75:c6:a9:5e:52:bf:a2:
98:07:b1:3f:77:67:a2:17:75:49:79:9a:cf:9b:ca:
43:23:de:dc:88:86:45:a3:03:a7:c8:72:7f:e6:54:
c4:84:51:c1:9b:84:6a:f1:2e:d3:ff:31:af:03:e5:
09:4a:94:23:d6:c0:3b:cd:9b:c2:a3:de:a3:9f:6d:
63:66:06:87:46:dc:71:a1:b4:d5:d6:9d:38:e2:49:
31:04:57:3e:00:04:6e:b7:8d:38:e7:1b:e5:44:57:
e0:33:1d:94:7b:b5:93:86:1c:8d:b4:7b:53:07:b3:
28:8a:2b:2a:86:26:db:dc:6d:0e:73:34:b5:f6:f9:
1f:45:7e:9c:33:c8:a7:95:11:f9:f3:27:00:ac:18:
86:f9:8e:13:19:83:50:39:29:a1:8c:95:c8:0c:23:
b7:48:8f:57:ff:29:90:99:a5:13:25:91:5e:96:56:
fc:af:63:f2:3d:5f:63:99:50:ff:a1:18:5e:d7:ec:
44:76:c0:1d:8b:a5:2e:9f:d1:52:aa:0e:f9:0c:ba:
05:97:9e:3e:ae:b3:fb:57:a1:8f:fc:66:a2:2b:d7:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:B6:29:82:63:6D:3E:E4:F5:8D:05:D3:CE:AC:49:AB:6E:62:34
X509v3 Authority Key Identifier:
keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/_C22KYJjbT7k9Y0F086sSatuYjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.208.0/22
91.212.209.0/24
185.186.56.0/22
IPv6:
2a13:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:19:7f:59:f0:b7:cc:2c:12:32:63:0d:e4:3d:29:1d:d5:c5:
04:4e:6d:ca:ae:e9:c5:78:4d:61:45:3b:64:4a:28:67:fd:29:
9d:de:f9:07:0d:f8:3c:b6:e0:5e:2c:8a:ac:36:5a:0b:e2:03:
45:fa:52:0f:af:fc:d7:03:a5:f1:dd:a5:2a:8b:88:c0:07:1d:
29:cb:bf:39:dd:55:17:83:31:df:87:f5:da:be:5e:5e:e3:dc:
03:f4:31:4a:78:ab:ec:c4:5c:25:6a:ae:d5:6f:36:33:0d:e7:
10:1e:af:79:5f:f8:09:08:59:ac:20:ef:83:07:88:a0:8c:f5:
26:58:4e:de:65:4c:c8:fa:0f:67:52:23:c1:f5:83:e4:75:2a:
14:11:13:e3:51:c4:35:03:c3:e4:86:07:44:65:56:29:bb:3a:
92:21:c4:e1:b0:84:94:00:58:d8:77:89:50:5e:10:7b:07:44:
69:d5:f7:e3:63:b4:e2:e2:92:88:0e:26:28:07:4b:93:db:6a:
e9:ff:da:30:24:66:f8:8b:f0:6d:53:aa:e9:3c:12:29:d9:7e:
19:d4:61:2a:e4:3d:e3:ad:b9:de:0c:2b:aa:40:5b:5f:db:fc:
2b:99:c0:13:be:8f:e2:fa:64:72:50:ac:ba:54:56:ef:36:97:
d9:38:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net