Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pQCTOYw3R3d3CsBvjP6Wf7gAHMw.roa
File: pQCTOYw3R3d3CsBvjP6Wf7gAHMw.roa (raw, json)
Hash identifier: sY9J2KZjT0feHA1vUWfFNKQZ3K0SYCGXSL5u2nRI9Wc=
Subject key identifier: A5:00:93:39:8C:37:47:77:77:0A:C0:6F:8C:FE:96:7F:B8:00:1C:CC
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E241C781EED68B749F99A1EB6F4A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pQCTOYw3R3d3CsBvjP6Wf7gAHMw.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204783
IP address blocks: 212.243.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e2:41:c7:81:ee:d6:8b:74:9f:99:a1:eb:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a50093398c374777770ac06f8cfe967fb8001ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:d0:ed:4f:ae:3f:53:ec:97:b6:d1:c6:02:
24:9d:13:6f:7e:ec:94:41:7a:2f:b6:f6:12:6b:e5:
3d:5e:8b:ff:5c:7a:47:5e:25:8f:49:6c:d0:05:c6:
44:f2:75:5d:fd:0a:37:b0:d9:d0:ee:d5:fd:04:83:
cd:a2:db:f6:97:f5:03:9b:98:e6:3d:74:03:59:aa:
4c:07:d8:bf:c8:dd:f6:4d:ae:c2:1a:21:28:17:31:
73:6e:67:b8:fc:3b:2e:e8:a4:f8:b4:42:a3:f2:a6:
ad:6d:e5:f5:35:94:86:99:c2:b7:a8:e4:17:25:c9:
83:ed:71:5b:63:1b:1f:e4:6b:ae:de:42:1a:b9:13:
0d:8d:a0:ab:e8:5e:1d:d8:d3:3f:1c:60:a0:b6:8f:
8f:04:d9:d0:79:54:76:25:65:8f:d7:c1:d6:c4:49:
96:71:4a:c7:e4:8c:28:89:85:c5:d8:fb:9f:0d:1f:
e5:c7:a0:33:a0:89:5a:c7:cc:9a:ec:e8:86:59:a3:
59:03:e2:f6:47:4b:74:04:31:53:bb:30:84:53:8d:
10:4d:74:44:ef:b3:9f:e5:6a:47:5c:d0:8c:bd:4f:
1a:2d:31:53:07:01:d3:25:23:0d:0c:ca:2a:87:5c:
ef:87:c8:4a:57:25:0f:d4:f2:e4:72:d2:ce:96:6f:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:00:93:39:8C:37:47:77:77:0A:C0:6F:8C:FE:96:7F:B8:00:1C:CC
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/pQCTOYw3R3d3CsBvjP6Wf7gAHMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.115.0/24
Signature Algorithm: sha256WithRSAEncryption
14:29:cc:e8:84:c4:7a:33:1c:1e:45:07:cf:bd:e0:30:75:ab:
bb:eb:cd:da:83:5a:5e:73:70:e4:67:a3:0e:86:6b:66:7e:22:
08:45:8b:50:8e:7b:5f:dc:99:1e:be:65:4f:65:3d:92:02:d7:
da:35:d5:cf:70:84:f7:b9:90:f3:d3:ad:4a:8a:49:2d:c3:30:
a3:da:e0:48:49:bc:69:36:ef:a3:c2:55:5f:a3:41:47:fc:ca:
f9:4d:fa:3c:ac:48:20:8b:2e:a5:a8:e2:f5:64:ea:14:a6:24:
aa:89:12:65:88:58:d5:fb:db:98:70:f8:d0:a1:8a:53:5c:e4:
96:84:e2:bc:9d:55:3f:a2:b8:be:25:38:17:89:86:99:1d:1d:
d7:b8:f0:9d:26:4a:d3:70:1e:a7:fb:36:73:4a:d7:c5:5b:86:
f8:62:c8:96:d2:1c:13:15:7e:b5:87:c9:88:84:67:c8:e1:08:
03:e5:85:6f:57:01:eb:7e:bb:34:d9:5f:af:d2:64:22:51:dc:
63:5a:f8:9c:f9:73:98:0e:0f:09:45:57:5a:65:7e:ec:fc:12:
2c:f1:0e:8d:b6:d8:a2:d4:4e:f7:d1:71:27:83:95:1e:9d:34:
cd:5e:02:0f:3f:4d:66:62:eb:9f:fc:5d:81:c6:f8:20:91:26:
b8:9b:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:14:15 2025 by rpki-client