Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YFoD6_aotGESH7iQCW-iY6sd_9c.roa
File: YFoD6_aotGESH7iQCW-iY6sd_9c.roa (raw, json)
Hash identifier: OudnMsdgXgWB8juoxycTTk9ys7Sbts5qjPNsbIpIQDY=
Subject key identifier: 60:5A:03:EB:F6:A8:B4:61:12:1F:B8:90:09:6F:A2:63:AB:1D:FF:D7
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B1A77AAA112192BF8AA35A084C572
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YFoD6_aotGESH7iQCW-iY6sd_9c.roa
Signing time: Sun 01 Jan 2023 13:35:10 +0000
ROA not before: Sun 01 Jan 2023 13:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209326
IP address blocks: 212.243.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:1a:77:aa:a1:12:19:2b:f8:aa:35:a0:84:c5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605a03ebf6a8b461121fb890096fa263ab1dffd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:51:64:7e:d2:e3:41:8d:e5:ca:81:08:49:
de:8e:75:2c:dd:23:b2:b5:13:a7:d4:95:78:cb:d4:
e1:49:a9:d8:cf:0e:ee:5d:5a:40:e9:40:e1:50:c2:
ea:bb:99:68:a9:76:89:28:30:f7:a9:00:93:74:b8:
53:d3:88:aa:3c:09:ba:d7:86:6f:d5:72:8f:ef:cc:
8a:ef:fd:48:f3:93:66:c7:51:0e:cd:0b:26:ca:b6:
72:ee:52:25:d1:74:3e:f3:55:c6:86:e3:fe:4b:e2:
51:cf:98:85:01:6e:7d:55:db:d1:d2:d7:d5:47:7d:
63:1c:8b:5a:d6:2e:f7:69:3d:19:92:83:3f:6e:36:
c9:a8:76:87:f6:d3:f2:b0:0a:39:e1:ff:cb:29:9f:
e3:96:bc:3b:bb:11:ce:27:14:25:c0:99:3e:e8:25:
5a:ef:8b:c3:39:09:92:a5:fd:6a:12:2e:ee:c2:e9:
68:99:5b:aa:19:1a:a1:17:63:9b:b2:c2:90:9b:98:
52:30:a8:db:f8:03:c6:ca:c3:47:98:9c:a6:86:38:
f7:84:9d:af:d2:29:cc:9c:1c:c3:d4:82:8a:01:5a:
aa:94:7d:71:58:6f:b1:a1:17:96:03:df:b6:9a:dc:
9e:93:98:a1:99:a7:5e:83:04:09:57:62:6b:52:99:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:03:EB:F6:A8:B4:61:12:1F:B8:90:09:6F:A2:63:AB:1D:FF:D7
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YFoD6_aotGESH7iQCW-iY6sd_9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.112.0/24
Signature Algorithm: sha256WithRSAEncryption
61:dd:89:7f:85:2d:5d:f0:f2:7e:bb:47:fc:74:0a:96:87:d4:
9c:f7:6f:1e:01:35:bc:06:c4:15:1f:be:f6:66:1e:6e:32:47:
89:15:a3:64:02:1d:b7:7b:ac:f8:69:dc:89:8e:3b:5c:85:06:
72:a1:5a:83:f3:ba:1b:1d:0f:19:51:89:69:30:74:f3:e5:a4:
9e:8a:2b:f0:87:e7:24:ad:72:0b:b2:10:60:8f:1d:f8:00:64:
60:f9:c5:48:58:90:6b:97:5e:c3:a3:6d:08:91:f1:88:60:8d:
db:50:87:f9:c6:d3:3d:45:e0:b4:b5:c8:70:cd:ac:e9:e9:e8:
cd:3f:3e:e7:5c:0a:c6:ec:55:c9:b5:42:44:69:86:92:24:10:
94:f9:70:ac:5f:5c:bd:20:5b:c0:81:9a:51:a3:21:b0:11:9f:
ad:aa:dd:9d:88:89:89:7f:fe:55:a3:f6:27:a4:7e:cd:8f:ef:
25:c4:fa:53:5d:ec:25:30:54:4d:08:63:89:c3:27:b6:d6:05:
84:26:ae:98:b8:df:5b:a1:26:74:ee:fb:ae:d4:45:e5:3b:9e:
cf:cb:e3:8a:1b:0a:10:74:b5:dd:15:09:b8:0b:42:3d:34:20:
f9:90:a3:39:64:09:a6:1e:2a:5c:c4:21:d1:7a:ab:b0:35:8e:
81:a5:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:34:14 2025 by rpki-client