Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/v2TS3poNrx67RxE7vFGIEhMWRqA.roa
File: v2TS3poNrx67RxE7vFGIEhMWRqA.roa (raw, json)
Hash identifier: Gl8XGsvnyDQBH31ZbDJ+T6loQFlP6+e6x8LK3c6k/Ik=
Subject key identifier: BF:64:D2:DE:9A:0D:AF:1E:BB:47:11:3B:BC:51:88:12:13:16:46:A0
Certificate issuer: /CN=39407123065c955d19d4fae963b0d055f489b215
Certificate serial: 01856F0B736AFE9AB90EA7FFC2C956F6A8F9
Authority key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/v2TS3poNrx67RxE7vFGIEhMWRqA.roa
Signing time: Sun 01 Jan 2023 20:34:59 +0000
ROA not before: Sun 01 Jan 2023 20:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 212.18.111.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:73:6a:fe:9a:b9:0e:a7:ff:c2:c9:56:f6:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39407123065c955d19d4fae963b0d055f489b215
Validity
Not Before: Jan 1 20:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf64d2de9a0daf1ebb47113bbc518812131646a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:21:5b:36:ff:b9:6e:de:72:37:f4:b4:cd:
7a:ae:3b:cc:ee:67:a4:3c:cd:ee:ad:22:46:54:e5:
41:11:92:57:03:30:a2:aa:ec:5f:9c:4b:47:01:07:
52:b1:dd:da:a7:ff:fb:e0:8a:47:2b:0d:d6:84:c7:
c1:95:07:18:94:22:22:53:75:1d:d7:e9:ab:68:10:
bf:cb:48:21:3e:ca:01:d5:9d:43:1b:19:7a:07:e5:
a3:fe:0d:9d:0a:7d:25:f6:9e:ac:f0:ec:96:a1:72:
82:95:ed:25:29:91:2c:a0:81:12:24:93:c2:d8:c2:
32:de:e0:f7:00:47:13:3e:4b:25:09:6f:82:c4:a7:
02:59:b1:ad:72:e2:aa:ce:6b:a4:57:6d:f0:56:40:
c0:8b:c3:49:6d:e6:6b:37:d8:55:dc:81:16:80:3a:
97:e9:9e:c1:18:89:d4:b7:25:74:13:d0:02:b9:5a:
6a:b0:c7:29:f7:e4:dc:d6:43:e6:da:aa:26:f7:c3:
d4:96:c1:92:b6:4e:7f:1b:cd:13:fb:71:0c:37:b5:
28:d8:c2:2f:9c:68:1c:99:ce:64:f4:47:de:d3:12:
e4:d2:ad:d5:ca:a0:ee:69:9b:32:20:08:77:14:41:
a2:94:38:7a:16:9d:e9:b8:26:14:f6:8d:f5:37:f5:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:D2:DE:9A:0D:AF:1E:BB:47:11:3B:BC:51:88:12:13:16:46:A0
X509v3 Authority Key Identifier:
keyid:39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/v2TS3poNrx67RxE7vFGIEhMWRqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.111.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6b:77:67:91:8c:d2:ec:e8:45:f4:f0:6e:15:d8:f2:2f:7b:
b7:32:7e:8e:2b:8b:bc:a5:0f:12:ae:e7:5f:32:08:10:5b:4c:
30:88:b4:b1:03:79:8c:af:b4:57:36:20:66:81:8a:13:21:30:
5b:be:8e:55:79:81:94:91:a5:af:ab:bc:e0:11:93:75:f4:4e:
84:a6:65:0e:51:5d:70:75:b2:64:8b:4d:94:e7:2a:3f:24:60:
93:c4:10:38:81:dc:6d:c6:37:44:a6:04:c5:8c:07:24:8f:45:
0b:2d:4d:66:56:f7:25:cc:bb:01:f0:20:a3:a0:34:0f:9b:45:
a8:59:19:ec:d6:27:65:85:6b:ab:82:bf:01:4b:c5:44:85:40:
33:ba:92:d7:36:d0:4e:bb:f0:0d:97:f0:49:16:f3:fb:06:44:
07:86:c0:4a:64:f1:46:49:e0:c3:b2:ce:c9:b2:bf:a9:4f:21:
e3:e5:56:ef:17:0c:c5:d8:7c:21:26:ce:ce:64:89:ec:4b:0c:
1f:17:bd:73:9a:42:b0:94:13:a8:1c:8f:91:ff:65:30:c9:0a:
83:54:4d:04:ba:25:91:8b:57:39:4d:62:b4:4d:85:d3:ac:91:
de:3f:fb:cd:e9:5d:3b:12:d2:8c:c7:b0:37:fe:a7:43:4d:d8:
12:b0:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:45:04 2025 by rpki-client