Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/C_0ORiP6GTff8xYOZ4mMicSAww8.roa
File: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (raw, json)
Hash identifier: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=
Subject key identifier: 0B:FD:0E:46:23:FA:19:37:DF:F3:16:0E:67:89:8C:89:C4:80:C3:0F
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019424B3E163974F41C0D033FB01A5172438
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/C_0ORiP6GTff8xYOZ4mMicSAww8.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9000
IP address blocks: 212.50.32.0/24 maxlen: 24
212.50.33.0/24 maxlen: 24
212.50.36.0/24 maxlen: 24
212.50.37.0/24 maxlen: 24
212.50.38.0/24 maxlen: 24
212.50.39.0/24 maxlen: 24
212.50.40.0/24 maxlen: 24
212.50.41.0/24 maxlen: 24
212.50.44.0/24 maxlen: 24
212.50.54.0/24 maxlen: 24
212.50.55.0/24 maxlen: 24
212.50.61.0/24 maxlen: 24
2001:1b68::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e1:63:97:4f:41:c0:d0:33:fb:01:a5:17:24:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bfd0e4623fa1937dff3160e67898c89c480c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:c5:53:7d:d2:13:ca:d9:cc:70:9a:5f:5c:
58:d6:4b:d2:75:5c:08:22:8a:2e:b9:5f:47:b8:4d:
a3:a2:a9:04:98:06:f5:8c:9e:11:d9:6f:39:4f:36:
ef:86:ed:1a:6f:4c:13:4e:b0:6a:b9:5b:01:c9:64:
dd:95:d3:32:4d:7f:5d:dd:83:fc:ed:29:f4:d3:85:
2f:7b:91:df:b9:8f:c4:e8:1c:13:e7:ed:4f:90:f5:
4e:5a:4c:ba:15:56:89:9c:22:e3:4c:52:ad:e9:22:
67:f5:22:43:b2:0a:18:bf:8f:8d:a1:8c:83:c7:74:
2e:d3:7a:fb:63:6d:96:57:fe:0f:2a:eb:b1:d6:e0:
a6:0f:30:3a:be:61:bc:fe:95:22:04:a6:52:1c:0f:
22:d5:11:0a:63:b0:a1:08:c4:ca:6a:fe:03:86:ec:
d7:2a:08:5d:d6:9f:99:84:4a:9a:2d:4b:05:65:9d:
a1:d6:e2:79:d4:58:09:57:7f:18:d7:cc:3c:68:21:
8d:aa:af:0b:65:44:c5:30:cd:8d:39:13:94:fd:7f:
77:80:ac:05:b2:99:ae:5b:25:76:30:32:65:8f:de:
af:af:ac:28:d6:12:5c:3a:82:11:ad:41:52:ff:b4:
44:5b:7d:4f:d1:6f:7b:68:75:4c:7d:93:2e:30:97:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FD:0E:46:23:FA:19:37:DF:F3:16:0E:67:89:8C:89:C4:80:C3:0F
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/C_0ORiP6GTff8xYOZ4mMicSAww8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.50.32.0/23
212.50.36.0-212.50.41.255
212.50.44.0/24
212.50.54.0/23
212.50.61.0/24
IPv6:
2001:1b68::/29
Signature Algorithm: sha256WithRSAEncryption
55:0d:f7:d4:df:66:e1:1a:29:1e:1d:55:c3:b8:28:6b:8e:d3:
a0:c7:cd:78:fd:f2:92:6a:23:ab:b8:74:70:7e:20:a8:e1:0e:
d5:fd:64:22:41:86:01:6b:e2:3a:ab:7d:4d:10:5c:7d:7d:d3:
ea:a7:23:ac:17:5c:b4:e8:69:9c:80:e4:68:d1:44:5e:7c:06:
60:7c:90:ad:41:2e:31:6a:6c:63:07:f9:39:44:54:ee:ab:5a:
52:27:bb:f4:15:aa:ce:8e:05:a9:22:5b:51:b3:91:23:97:56:
60:93:b6:7e:7d:76:53:9f:a3:d1:45:9f:76:90:a5:27:fe:f5:
94:75:88:83:8a:08:3a:1e:20:d1:95:a4:f8:b1:4d:05:3a:16:
18:dd:fc:c2:b7:94:bb:0d:90:0a:d2:88:64:53:02:da:6c:36:
7a:be:98:5a:97:1f:1f:94:7d:d0:ba:5d:87:56:8e:c6:a6:ab:
52:d8:12:df:56:68:59:c6:59:85:8a:7d:26:37:fb:dc:0f:42:
a5:30:54:11:89:92:af:53:06:50:47:b2:d0:aa:1b:1f:9f:f3:
ee:4a:be:99:dd:2f:07:b7:13:40:82:38:e5:64:6c:96:de:4a:
b9:b9:07:d1:93:a4:b3:34:48:f8:4e:41:01:1d:b0:49:73:dd:
27:27:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net