Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa
File: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (raw, json)
Hash identifier: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=
Subject key identifier: D3:E8:4C:92:0C:07:D7:FE:97:B8:F4:12:C8:FB:BE:9E:DC:00:F2:BD
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019428232FA53172540304A39A27BE02F93C
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 212.113.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:2f:a5:31:72:54:03:04:a3:9a:27:be:02:f9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3e84c920c07d7fe97b8f412c8fbbe9edc00f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:74:2a:dc:b7:6d:5e:7d:a3:de:1b:be:c4:
32:e3:24:a0:dd:3b:86:4c:4a:c3:7b:c2:b9:e7:62:
2a:2c:5b:3d:fd:13:03:c1:b0:a6:3f:d0:0c:f2:82:
05:0e:27:5e:f9:0e:b8:95:5b:2c:93:67:6b:88:49:
43:15:c5:9d:2f:77:f1:d6:9e:f6:f1:ad:4b:22:50:
7e:07:71:9a:2d:72:d6:5a:6c:c8:55:a7:ff:43:05:
5c:86:1f:a1:9c:ae:be:44:3d:29:62:29:b9:6c:60:
c2:ff:db:44:44:d4:0f:b1:8f:65:b0:c5:ad:46:00:
29:25:18:a0:87:09:0d:9f:cc:59:f9:b5:b7:84:4c:
cd:15:33:8b:f2:d3:f1:49:2e:02:27:86:38:cd:25:
32:84:83:e5:81:0d:92:b7:f6:89:16:96:23:77:9f:
88:df:68:05:f4:f5:62:9a:1d:87:e1:bf:cc:be:1e:
6a:31:a1:55:d0:d4:e2:85:51:9d:bf:86:ba:5f:44:
d0:03:dc:5e:2b:aa:ee:12:48:2b:1b:59:7c:48:96:
05:7d:56:80:a9:92:71:43:d2:2f:d6:c2:9e:5b:05:
51:a9:9e:d1:d5:6d:58:00:23:dd:7d:1c:91:3e:8a:
35:74:aa:96:6f:a5:6b:92:6f:f8:9e:77:21:c4:42:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:4C:92:0C:07:D7:FE:97:B8:F4:12:C8:FB:BE:9E:DC:00:F2:BD
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.116.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b7:ea:bf:77:f7:91:70:63:0e:60:93:5c:96:71:38:22:97:
a2:26:87:6f:b1:a6:ae:aa:9c:6e:ae:7f:88:8d:5c:be:bb:be:
cf:1c:84:8e:9b:35:c7:04:61:31:9d:d3:57:87:88:17:8e:3e:
07:19:17:74:97:be:56:5a:5f:61:e3:e7:ae:c6:18:be:2a:0a:
03:d7:96:e4:64:80:fc:82:54:b1:a7:98:57:37:05:4e:d8:b9:
04:f6:1a:0e:8e:b1:75:db:20:19:1e:bd:30:98:c4:3d:75:52:
04:af:91:50:42:2c:d5:9a:bc:07:42:0c:16:ba:b0:3f:b6:31:
40:48:71:47:68:12:07:4f:b7:f7:7a:a5:34:40:c5:77:f8:45:
7b:13:47:f0:d3:32:d2:21:c1:83:b6:0b:5f:05:d1:d2:c2:32:
84:7c:47:29:a8:5d:4d:d0:0d:60:b3:37:b9:e7:11:8c:c7:be:
10:d8:10:e6:85:df:ee:63:d3:75:24:4e:de:84:fb:92:59:7f:
cb:82:db:00:d6:6f:9f:a1:03:da:ac:7a:d4:37:15:51:dd:c8:
05:61:c1:8c:a2:45:66:0f:3f:df:54:51:79:f5:40:f9:45:99:
e3:05:97:12:95:b6:5e:14:88:a9:40:b3:62:4b:05:27:f2:35:
26:99:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:18 2025 by rpki-client