Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oBhd51mlkKHa_U6tVWvM-Olf70w.roa
File: oBhd51mlkKHa_U6tVWvM-Olf70w.roa (raw, json)
Hash identifier: dV4Ij536KWETMd+Ht2qAakBKpmg8KNwY602s8S78f3s=
Subject key identifier: A0:18:5D:E7:59:A5:90:A1:DA:FD:4E:AD:55:6B:CC:F8:E9:5F:EF:4C
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D109AA21ED820999E736993E374C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oBhd51mlkKHa_U6tVWvM-Olf70w.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199225
IP address blocks: 212.243.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d1:09:aa:21:ed:82:09:99:e7:36:99:3e:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0185de759a590a1dafd4ead556bccf8e95fef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:1e:80:fa:d3:d7:ae:bd:81:76:33:79:23:
06:10:93:9d:d1:7a:f2:56:53:9d:e9:18:04:fc:97:
ba:5b:d4:87:58:ff:74:d2:a3:32:bd:9f:68:28:b9:
e0:73:1c:1c:a4:8b:7b:9a:17:9b:b7:83:22:7b:5d:
77:00:64:78:37:e5:06:b8:e1:f4:66:cd:fe:d1:71:
3b:d5:89:dd:d7:82:ff:63:86:ab:e0:34:4d:e4:27:
d2:8b:20:6f:4a:da:ee:3a:7b:76:54:c5:1d:14:cc:
5a:42:76:96:94:ba:46:e6:14:6e:6a:04:a5:3b:a6:
bb:16:5d:f3:d5:81:cd:1c:74:51:08:3c:84:09:93:
c6:b0:2e:44:cf:59:f5:68:c2:c7:30:be:6a:3e:4b:
db:5c:13:b7:80:c6:12:c3:62:2e:dd:4b:61:8b:45:
c1:3e:2c:40:d7:61:d9:53:dc:0e:98:cf:36:9d:55:
4d:6e:cf:71:fa:b3:b9:8a:62:70:22:7c:58:72:0c:
c7:d4:4c:0d:bf:18:f8:f4:35:34:10:96:7c:67:9e:
eb:b9:48:8d:3c:46:35:cb:c7:15:06:f5:e4:17:9b:
6d:f1:d1:dc:ac:19:98:a9:25:f8:f0:01:19:60:f2:
4a:78:f0:c1:fe:7c:5f:e4:82:03:ca:78:66:d8:31:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:5D:E7:59:A5:90:A1:DA:FD:4E:AD:55:6B:CC:F8:E9:5F:EF:4C
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oBhd51mlkKHa_U6tVWvM-Olf70w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.123.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b5:a0:6f:c4:e3:ec:fc:6e:11:e8:d4:40:e8:2c:f5:bf:99:
b1:9b:73:19:81:6e:91:14:b6:bd:4a:8e:cb:8d:f4:90:e2:b7:
74:ab:e7:00:90:24:aa:a6:bf:ff:a1:6d:59:c3:41:48:30:87:
79:40:7c:9e:be:a2:a7:9d:88:0e:87:a7:23:5d:e1:ba:c1:96:
a3:4c:f3:74:3e:47:30:f2:52:d3:e1:b4:e2:40:e3:f3:cd:c6:
0c:82:1c:90:c6:16:15:48:6a:8b:45:f2:ec:bc:0e:fb:1c:aa:
8c:f2:1d:45:97:76:4c:ab:16:6b:ae:f7:24:b3:5d:ed:8d:12:
83:b0:95:dc:ef:80:b0:1c:c7:f4:85:6b:a3:d1:32:dd:67:17:
e2:84:b9:12:38:73:1f:b9:c3:85:65:89:57:40:1b:8f:04:bf:
09:b8:f5:9b:a1:fe:db:9e:69:b8:3c:04:1f:96:f3:7c:5a:e0:
f0:05:ee:eb:d7:e5:70:e2:09:bc:92:f8:a7:73:d3:1e:8b:a2:
67:6d:3a:17:cb:16:d8:07:74:90:51:1b:11:cb:d5:04:05:eb:
e6:0c:66:8f:74:fe:d7:13:e2:8a:5f:8f:1d:32:e1:5a:ff:0c:
2f:b2:60:96:b8:07:f0:0a:54:e1:ba:df:7d:43:9b:41:cb:d0:
06:23:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:34:16 2025 by rpki-client