Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bytnCgIxeTrEcb7ry9LUO0hqvxo.roa
File: bytnCgIxeTrEcb7ry9LUO0hqvxo.roa (raw, json)
Hash identifier: f+lvVqH09STQRyk7bx+5uL/fV4bsEvfcaDY6Kjm2B5o=
Subject key identifier: 6F:2B:67:0A:02:31:79:3A:C4:71:BE:EB:CB:D2:D4:3B:48:6A:BF:1A
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B0E05512C838FEC73716451EDB554
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bytnCgIxeTrEcb7ry9LUO0hqvxo.roa
Signing time: Sun 01 Jan 2023 13:35:07 +0000
ROA not before: Sun 01 Jan 2023 13:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199225
IP address blocks: 212.243.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:0e:05:51:2c:83:8f:ec:73:71:64:51:ed:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f2b670a0231793ac471beebcbd2d43b486abf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:5c:6b:d1:fb:8c:4a:5b:4d:40:87:77:6f:
98:01:35:5b:cc:20:90:c9:fc:59:21:cd:67:6e:3c:
71:d7:27:5b:4c:0e:2f:81:11:d8:45:b2:cb:6d:68:
20:25:1f:ca:e9:5a:e6:5b:eb:1f:b3:1c:eb:53:9c:
63:50:52:d5:6d:2b:29:be:98:bf:94:08:06:29:b8:
5a:a8:86:41:5c:3b:e3:e9:c3:88:e2:bd:bc:f1:0b:
8a:c4:a8:9f:9e:f5:02:e0:69:4a:d2:fd:dc:19:18:
3d:06:b5:3f:92:4d:b4:99:58:d5:4f:41:8f:09:fd:
71:06:02:c9:97:66:18:26:aa:b7:ae:96:c0:b9:02:
be:3f:90:c8:c7:a5:36:77:04:dd:53:e2:82:61:c3:
e3:56:68:eb:dc:cd:35:e8:45:2c:e6:3b:77:55:bd:
4d:8d:1d:e5:9c:77:31:66:7a:11:bd:ca:d3:b1:3b:
81:7c:d7:ad:99:8a:26:1e:77:2c:31:b6:5e:3e:fa:
62:44:9d:c7:b5:1f:3a:04:e4:c4:81:65:6f:1f:9f:
1a:72:08:d9:b9:b4:67:92:4f:b3:8c:d7:11:eb:e2:
7a:12:c5:aa:7a:3e:a5:9f:f6:79:cb:af:5d:3a:7b:
12:30:05:56:50:ae:81:2a:3f:e2:fc:ff:65:5a:ac:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2B:67:0A:02:31:79:3A:C4:71:BE:EB:CB:D2:D4:3B:48:6A:BF:1A
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bytnCgIxeTrEcb7ry9LUO0hqvxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.123.0/24
Signature Algorithm: sha256WithRSAEncryption
51:64:c5:2c:64:12:58:83:10:13:fd:68:df:e3:38:52:8d:f3:
94:c7:e2:17:9e:d3:04:92:ce:c9:d3:0a:a0:84:0d:57:e0:b0:
c4:eb:5d:fa:39:a3:49:e8:90:9c:aa:b9:ae:0b:35:9a:37:a2:
e8:45:02:6d:ab:0e:c8:98:88:0e:89:9b:76:aa:95:1b:79:aa:
97:af:24:70:e5:b4:70:d6:e7:11:e6:71:88:c8:e9:05:62:54:
a6:a0:32:e2:f0:05:d3:42:4e:9f:0e:3a:45:4b:02:cd:d8:89:
05:4e:c5:81:54:b1:af:c1:16:ac:e3:e1:84:08:5e:a9:81:6d:
a9:62:71:41:f7:64:f9:52:b2:f3:4e:cc:26:81:bf:b0:ac:3c:
37:f8:13:bb:8f:ee:cc:60:e7:12:74:ae:cd:26:d4:6b:4f:e7:
44:82:1c:55:3c:47:86:b8:3d:be:39:55:1f:29:f3:e9:e5:80:
a2:ba:f5:a6:2c:32:81:b2:ae:3f:6d:99:19:00:98:31:de:25:
47:95:d7:0f:6e:12:37:4f:44:9a:ef:4b:09:e6:ff:5a:fa:99:
73:4e:37:26:81:35:02:e0:b5:03:04:5d:06:5c:c8:6c:d5:ca:
b0:48:c2:28:e3:dc:17:b9:7f:e3:3c:92:fe:3f:1d:c4:04:ef:
7b:88:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:20 2025 by rpki-client