Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/KtWriAMFYwW2ntc3CG8aj0I98Ks.roa
File: KtWriAMFYwW2ntc3CG8aj0I98Ks.roa (raw, json)
Hash identifier: rYPTVFJwU7qDb2KBf2WJIy3MhFZyf4IJnFiQXaK4PUs=
Subject key identifier: 2A:D5:AB:88:03:05:63:05:B6:9E:D7:37:08:6F:1A:8F:42:3D:F0:AB
Certificate issuer: /CN=aa3a91c36754d7865db93986322f251d141abbee
Certificate serial: 018CC348BBE5EDE39D5BC8B4C647036E1EF1
Authority key identifier: AA:3A:91:C3:67:54:D7:86:5D:B9:39:86:32:2F:25:1D:14:1A:BB:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjqRw2dU14ZduTmGMi8lHRQau-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/KtWriAMFYwW2ntc3CG8aj0I98Ks.roa
Signing time: Mon 01 Jan 2024 04:29:32 +0000
ROA not before: Mon 01 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20693
IP address blocks: 212.111.96.0/20 maxlen: 20
212.111.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bb:e5:ed:e3:9d:5b:c8:b4:c6:47:03:6e:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3a91c36754d7865db93986322f251d141abbee
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad5ab8803056305b69ed737086f1a8f423df0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:d8:62:44:16:c1:81:7b:f5:d8:65:23:43:
e3:07:71:fd:e8:bd:ff:52:8a:34:12:25:25:de:c1:
7c:bc:2c:c7:ef:96:d8:5c:a7:2e:5d:b5:05:1a:18:
3c:c0:9d:a1:f2:e1:10:61:ff:dd:35:49:a3:1a:55:
7f:46:36:01:69:7c:9d:25:89:b6:e6:2b:05:bf:cd:
e7:7e:4e:82:1f:54:e4:24:98:ed:8b:8e:80:78:15:
17:db:cd:ec:36:1e:56:64:00:97:0c:d1:9b:2a:e4:
7b:c3:7c:78:ae:52:e3:41:6c:ee:87:55:6a:63:e0:
89:8d:d8:9a:ff:16:42:fa:a5:3b:06:69:6f:53:43:
06:c5:48:a7:be:5f:9e:20:f4:c6:26:5a:5f:65:2a:
82:6e:f5:b8:69:de:40:73:4d:4f:50:22:12:ef:c1:
3d:d5:09:01:75:ad:05:6b:3c:fa:0a:e7:01:9e:b9:
2e:59:7b:30:af:73:a9:68:c5:81:a0:e4:e6:38:db:
af:4f:43:10:5e:be:a1:d3:e1:12:47:df:0c:7b:ec:
1e:95:f5:ef:9f:ee:45:67:6d:6f:e0:74:69:78:2c:
c0:47:ea:d6:fc:99:52:00:d9:80:f6:5d:4b:46:b4:
4f:1e:3d:03:fb:6d:f9:03:b7:df:9c:b4:a9:e9:59:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:AB:88:03:05:63:05:B6:9E:D7:37:08:6F:1A:8F:42:3D:F0:AB
X509v3 Authority Key Identifier:
keyid:AA:3A:91:C3:67:54:D7:86:5D:B9:39:86:32:2F:25:1D:14:1A:BB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjqRw2dU14ZduTmGMi8lHRQau-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/KtWriAMFYwW2ntc3CG8aj0I98Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/qjqRw2dU14ZduTmGMi8lHRQau-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.96.0/20
Signature Algorithm: sha256WithRSAEncryption
94:58:de:6c:32:ab:f7:78:17:97:34:c8:62:80:47:c5:af:67:
b8:ae:12:c1:08:13:96:3f:5e:2c:42:d9:d7:a7:4f:36:8c:31:
d5:dc:dc:ae:9a:d9:2f:d2:be:b4:3f:32:d9:26:7f:1f:b0:cf:
b6:c2:a8:1f:6c:89:e9:d9:77:fe:a4:8c:9e:41:9c:12:25:b1:
37:9a:5d:48:7f:3c:2d:3f:cf:14:67:d3:d3:09:cc:74:be:fb:
a3:00:15:e5:bb:e5:74:47:8e:94:1c:1e:c0:a5:81:98:5e:92:
5c:ab:9e:0a:7a:0b:da:e9:07:2e:5f:37:dc:31:38:ae:08:88:
f7:11:f0:c1:a9:19:45:63:bc:db:53:ab:b6:cb:35:7f:44:b4:
f5:a1:d4:cc:c7:29:19:af:fa:05:58:45:c0:61:4c:89:ee:d6:
83:6d:55:59:eb:dd:ea:a6:9a:80:e1:18:2b:68:77:ef:ae:5c:
f9:13:81:6d:ba:ab:35:f1:d6:c1:d7:80:bf:3a:cc:53:e0:0a:
0f:6c:34:25:92:0c:78:31:79:23:32:61:1e:d4:62:e7:3c:84:
bb:57:bc:3a:40:93:66:cd:ce:1c:b6:4a:21:38:fb:c7:15:24:
8a:f5:bb:80:c9:a0:14:a9:f6:93:4a:6d:f8:25:0d:1d:a5:d6:
ab:3d:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org