Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tCVPjtpO2u7j9rQWSJuJ-H4-Tks.roa
File: tCVPjtpO2u7j9rQWSJuJ-H4-Tks.roa (raw, json)
Hash identifier: RLXcOoV0if6nIQZKOtQnfcCet4nw4K6n0O3UhxNGfAE=
Subject key identifier: B4:25:4F:8E:DA:4E:DA:EE:E3:F6:B4:16:48:9B:89:F8:7E:3E:4E:4B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282824D03F9E1FF942F89C38741A5A7E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tCVPjtpO2u7j9rQWSJuJ-H4-Tks.roa
Signing time: Thu 02 Jan 2025 17:55:07 +0000
ROA not before: Thu 02 Jan 2025 17:55:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198938
IP address blocks: 213.222.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:24:d0:3f:9e:1f:f9:42:f8:9c:38:74:1a:5a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4254f8eda4edaeee3f6b416489b89f87e3e4e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2c:3b:a4:c3:6e:80:ea:ce:87:56:4a:74:36:
cf:de:84:55:65:7d:b0:fb:d7:62:e4:89:0b:e9:e5:
f1:13:1c:e3:5b:dd:8f:2e:e7:35:1a:db:20:fe:47:
bb:f7:22:d4:49:55:af:d0:8c:e9:b2:1e:01:2d:05:
28:11:a4:97:4e:66:97:16:1d:86:09:62:85:dd:f5:
5f:28:65:f0:6a:3b:02:b3:0b:51:4d:8b:d4:1a:70:
45:6c:bc:93:c8:0f:cb:cb:66:0e:0f:bd:29:47:6b:
b5:c3:ed:7d:f4:b9:cb:fa:be:f1:1f:b3:cd:8b:ac:
f3:07:60:2d:2f:2e:0e:b9:fa:99:63:f5:08:02:17:
28:e0:20:a6:75:54:95:58:5f:b9:c1:22:c9:6d:e3:
ca:58:f3:fd:e4:87:06:02:39:d3:a7:f7:77:b9:1e:
31:2b:4c:74:fa:d7:25:6d:49:f2:3a:d7:7f:4e:fb:
94:eb:c4:92:88:a9:9a:60:ee:74:9a:ca:7e:1d:fe:
7c:4e:52:99:a4:aa:a3:43:79:0c:54:41:ba:79:8d:
3c:00:e1:a7:da:4b:de:1d:6f:d2:9f:2d:e0:dd:4a:
55:1f:57:f2:fc:1a:c0:1d:59:69:ca:13:92:28:b3:
84:77:5f:ff:28:5b:30:da:fe:9d:1e:60:26:49:32:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:4F:8E:DA:4E:DA:EE:E3:F6:B4:16:48:9B:89:F8:7E:3E:4E:4B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tCVPjtpO2u7j9rQWSJuJ-H4-Tks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.50.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ac:33:94:86:d5:25:c4:e7:47:68:49:0a:22:6c:a8:8f:24:
53:3f:29:b2:5b:9e:27:38:3b:20:8d:af:08:60:29:91:8c:03:
ae:0e:a5:27:02:5e:73:d7:78:19:2f:84:d8:f3:80:55:a7:21:
1a:3b:ff:cb:f9:df:43:40:c8:39:23:df:ea:fd:0e:52:26:cd:
13:d3:e9:4b:9e:27:1f:51:d9:86:28:c2:a2:9f:b4:b1:6e:2b:
51:78:e5:aa:2c:81:06:19:6c:2c:94:df:36:61:64:c9:9f:4d:
42:bf:d6:83:4c:3d:ef:ce:05:87:43:da:f0:5a:65:0f:68:07:
bc:2d:3e:ae:ae:71:f8:e8:75:71:c4:9b:b0:d7:53:fb:8c:0b:
a3:b6:ce:52:68:30:20:39:83:54:e9:61:f3:20:ac:3a:27:3a:
7c:69:79:22:b0:dd:97:53:fd:d1:f4:0d:ac:16:13:4a:97:5b:
ac:40:66:9a:88:0f:98:f9:b4:f0:2c:94:70:33:88:8a:a6:98:
50:cb:ef:e7:f6:bc:c6:2a:c5:c3:e8:24:81:5a:a3:db:ed:a6:
16:82:61:5e:11:c9:73:08:e1:2f:77:31:44:5a:32:bc:30:9c:
cb:42:d4:86:be:f3:a7:74:ae:d5:43:53:5d:16:e5:51:23:1e:
97:3b:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:50 2025 by rpki-client