Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/gANuTTLlvKS7995CPzsWJ1Y76iU.roa
File: gANuTTLlvKS7995CPzsWJ1Y76iU.roa (raw, json)
Hash identifier: Z74EDwxvtTjL2Se5vxd/4E+6nbcCxTHX5XuZh6MDXTM=
Subject key identifier: 80:03:6E:4D:32:E5:BC:A4:BB:F7:DE:42:3F:3B:16:27:56:3B:EA:25
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 24E0
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/gANuTTLlvKS7995CPzsWJ1Y76iU.roa
Signing time: Mon 28 Feb 2022 19:40:40 +0000
ROA not before: Mon 28 Feb 2022 19:40:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9440 (0x24e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Feb 28 19:40:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80036e4d32e5bca4bbf7de423f3b1627563bea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:23:8f:29:10:b5:19:02:8b:94:6a:c5:07:
01:26:04:dc:9f:41:21:8b:18:6f:3e:a8:90:2d:3f:
01:8d:13:27:ca:52:05:b8:f5:8a:fd:b4:dd:ae:cd:
6b:a2:67:0b:ad:d1:4d:32:84:87:d2:ea:21:ec:9c:
d3:d1:97:2d:4f:0b:b8:54:25:62:a3:d8:7f:3b:72:
91:0f:f1:df:cd:9c:70:22:5c:93:e7:d9:66:43:17:
54:a9:74:c3:be:94:ae:13:df:7b:6c:b5:5c:36:ab:
26:6b:37:84:66:1d:b9:7f:76:ac:f3:cc:9a:ab:dd:
f8:d1:e1:91:bc:6b:d5:99:cc:e5:50:e7:56:11:7a:
d9:30:07:63:b7:11:65:3b:d1:30:08:f3:11:bc:dd:
e1:5d:c6:cd:1b:ba:5e:46:86:4c:92:19:5c:d4:4d:
68:cb:77:65:49:e1:9d:8d:77:6f:de:56:ee:50:1a:
cf:75:7c:29:d8:0f:3e:43:b9:66:e9:f3:9a:8f:07:
3d:4b:ca:bf:34:7a:32:57:7e:e6:0c:1a:1d:64:2f:
b3:1f:ca:f3:ce:2f:43:4f:87:bd:57:af:e8:72:c4:
5c:d2:98:b3:73:90:c9:24:24:ff:1c:2c:74:c1:d8:
ad:71:09:6c:68:51:01:6f:72:7d:5f:ff:24:da:29:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:6E:4D:32:E5:BC:A4:BB:F7:DE:42:3F:3B:16:27:56:3B:EA:25
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/gANuTTLlvKS7995CPzsWJ1Y76iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
13:61:3f:6e:42:ed:92:56:1e:dd:98:db:c3:13:63:38:4a:de:
bc:91:0b:b9:3e:dd:fd:e3:87:84:f8:9c:98:dd:bd:44:53:7d:
d9:3c:a2:65:dd:67:1e:e7:82:4d:a2:c1:a5:1a:a6:90:34:18:
65:68:3d:10:a2:96:2d:15:e0:74:86:c0:b3:1e:25:51:2f:a2:
8f:03:44:1d:aa:85:f0:24:5e:2d:59:a0:14:ab:ea:df:99:d2:
6e:d7:8d:fc:df:e5:0f:9b:e6:38:5d:07:4e:de:b6:a0:67:e8:
e5:22:50:13:5a:13:c5:09:1d:82:3c:45:a3:13:5c:45:6e:cc:
56:f1:60:3f:c6:e2:b4:59:d6:97:c4:7a:d8:f9:7e:ac:98:bd:
5f:71:7a:cc:77:2f:ee:b1:24:45:df:97:67:e8:ff:c6:ca:14:
5b:ee:74:84:a6:dd:ea:23:09:e5:e0:e6:0a:3b:3b:b5:ec:b7:
30:d1:9b:8e:0b:89:a4:3e:a1:95:1a:8c:f5:e1:cc:a8:b7:17:
f1:57:87:db:fc:44:ce:21:7d:ca:e8:f3:93:cd:4c:98:6f:c9:
a3:ed:3a:6f:3f:16:26:17:cc:e8:f4:66:10:86:6e:98:f5:40:
63:dc:2b:fa:c1:17:87:63:c5:44:49:20:fa:c9:f9:5f:7d:9e:
4c:dc:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:27:40 2025 by rpki-client