Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa
File: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (raw, json)
Hash identifier: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=
Subject key identifier: FA:E5:2A:2C:14:62:DA:5F:10:A2:6D:18:5C:A1:85:CA:21:3F:E7:6B
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 0194258F5B4E4FC83EE4701EE1B8D097A3C6
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 212.18.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5b:4e:4f:c8:3e:e4:70:1e:e1:b8:d0:97:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae52a2c1462da5f10a26d185ca185ca213fe76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:d8:2d:6d:f9:5d:8f:16:cb:23:8a:d8:cd:
11:82:ff:50:51:b7:3d:0e:79:59:02:a6:66:4a:d3:
c5:5d:31:69:6c:18:ce:73:8a:bd:b3:65:1a:d9:13:
27:70:5f:da:eb:8d:80:70:1a:74:d6:59:92:73:bc:
d8:a5:72:8e:47:f5:03:b1:98:fb:75:07:39:ba:25:
98:31:e5:aa:bd:49:98:6a:13:d8:43:a2:bc:f1:79:
56:7a:12:a5:e9:23:e9:e1:35:1f:0f:42:53:4a:bd:
5d:a0:14:27:bd:79:90:38:76:ad:8e:f2:6e:46:8a:
9f:c1:4b:30:be:c2:ce:be:80:99:c5:cf:9f:34:6e:
23:cf:e5:4d:1e:eb:e3:4c:f4:d8:f4:6e:5c:d6:5a:
8f:3e:7c:a2:40:de:87:96:e1:a8:8b:2d:9f:f8:2e:
c7:f4:c8:50:4f:2c:67:92:55:70:8d:1d:94:a5:a5:
e4:da:0a:9f:7a:d7:1c:56:35:72:aa:ab:3c:4f:d8:
72:68:d1:a5:5f:7d:53:00:89:ca:65:bf:e4:d0:c0:
22:58:0e:6e:a1:4a:c2:15:47:ee:c1:3c:9f:f4:33:
9f:6c:60:72:b8:f1:7a:9c:6f:8b:ef:50:36:f2:3a:
e8:48:03:cd:11:2d:2b:77:f6:9b:0f:a7:86:99:fa:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:2A:2C:14:62:DA:5F:10:A2:6D:18:5C:A1:85:CA:21:3F:E7:6B
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.230.0/24
Signature Algorithm: sha256WithRSAEncryption
13:61:ab:8c:af:f4:65:88:8a:d8:e2:6d:be:93:a2:78:27:be:
32:60:aa:1e:db:dd:82:e1:c8:44:5c:34:9b:af:81:45:07:94:
b7:2c:cf:8a:82:b8:ce:5b:02:33:ff:c6:15:dd:ee:2a:51:23:
f9:f5:69:47:0a:6a:e8:be:a3:d8:a9:48:40:06:86:fb:bd:3b:
1e:da:16:65:c6:01:02:e3:3e:7a:59:5d:4f:b0:10:05:46:26:
29:86:3d:1c:b4:bc:a4:ad:96:e2:97:77:81:b9:44:9d:3e:68:
c6:3c:7b:0c:15:49:6b:41:87:82:9c:89:a8:20:1f:a5:23:a1:
4b:59:fb:63:fa:be:74:e9:db:0a:e6:e0:39:f2:05:03:ef:75:
4f:b3:b6:1f:41:58:90:89:9f:7f:d3:08:12:91:f2:a4:fd:da:
d9:91:88:89:67:a0:4b:be:f9:6c:6a:f8:07:50:9b:f1:e2:6e:
98:a2:6d:87:93:d2:1d:02:e0:01:67:c3:36:56:7c:29:7c:9d:
59:20:fe:30:a3:c3:e6:10:42:0c:1a:f5:58:b6:87:42:d3:e1:
49:bc:90:fd:9d:d5:d5:64:c7:e5:01:88:69:a1:c1:43:34:be:
ac:03:1d:be:7d:4e:16:bb:90:41:0c:0b:cc:29:3e:7c:7b:8d:
bf:61:c4:59
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlj1tOT8g+5HAe4bjQl6PGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YmQ3ZjZhZGZlYzZkNDRkMTZkM2UzZjc5OGUzZjJiZDIw
ZGEzZmYwHhcNMjUwMTAyMDU0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWU1MmEyYzE0NjJkYTVmMTBhMjZkMTg1Y2ExODVjYTIxM2ZlNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+rYLW35XY8WyyOK2M0Rgv9QUbc9
DnlZAqZmStPFXTFpbBjOc4q9s2Ua2RMncF/a642AcBp01lmSc7zYpXKOR/UDsZj7
dQc5uiWYMeWqvUmYahPYQ6K88XlWehKl6SPp4TUfD0JTSr1doBQnvXmQOHatjvJu
RoqfwUswvsLOvoCZxc+fNG4jz+VNHuvjTPTY9G5c1lqPPnyiQN6HluGoiy2f+C7H
9MhQTyxnklVwjR2UpaXk2gqfetccVjVyqqs8T9hyaNGlX31TAInKZb/k0MAiWA5u
oUrCFUfuwTyf9DOfbGByuPF6nG+L71A28jroSAPNES0rd/abD6eGmfotVwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrlKiwUYtpfEKJtGFyhhcohP+drMB8GA1UdIwQY
MBaAFFa9f2rf7G1E0W0+P3mOPyvSDaP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnIxX2F0X3NiVVRSYlQ0X2VZNF9LOUlOb184LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC83NTRhZjktNzhkZi00YmQxLWI0ODAt
NTI3YzgxOTU4NjQ5LzEvMS11VXFMQlJpMmw4UW9tMFlYS0dGeWlFXzUycy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvNzU0YWY5LTc4ZGYtNGJkMS1iNDgwLTUyN2M4MTk1ODY0
OS8xL1ZyMV9hdF9zYlVUUmJUNF9lWTRfSzlJTm9fOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQS5jAN
BgkqhkiG9w0BAQsFAAOCAQEAE2GrjK/0ZYiK2OJtvpOieCe+MmCqHtvdguHIRFw0
m6+BRQeUtyzPioK4zlsCM//GFd3uKlEj+fVpRwpq6L6j2KlIQAaG+707HtoWZcYB
AuM+elldT7AQBUYmKYY9HLS8pK2W4pd3gblEnT5oxjx7DBVJa0GHgpyJqCAfpSOh
S1n7Y/q+dOnbCubgOfIFA+91T7O2H0FYkImff9MIEpHypP3a2ZGIiWegS775bGr4
B1Cb8eJumKJth5PSHQLgAWfDNlZ8KXydWSD+MKPD5hBCDBr1WLaHQtPhSbyQ/Z3V
1WTH5QGIaaHBQzS+rAMdvn1OFruQQQwLzCk+fHuNv2HEWQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:38 2025 by rpki-client