Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0JcWkb58BCzqEsbhkWPKe36ujXc.roa
File: 0JcWkb58BCzqEsbhkWPKe36ujXc.roa (raw, json)
Hash identifier: Bp2hNDh6SnHrweUO6CfU0fzNQ1qZnJ13vbaRmVVq9eE=
Subject key identifier: D0:97:16:91:BE:7C:04:2C:EA:12:C6:E1:91:63:CA:7B:7E:AE:8D:77
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01856ED4DA73987155A400334FEC98F7B677
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0JcWkb58BCzqEsbhkWPKe36ujXc.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28890
IP address blocks: 212.113.120.0/22 maxlen: 22
212.113.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:da:73:98:71:55:a4:00:33:4f:ec:98:f7:b6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0971691be7c042cea12c6e19163ca7b7eae8d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:a2:7e:bc:77:e0:68:d5:03:bc:ad:1d:92:
69:30:47:f3:c7:1b:01:fb:35:cb:91:08:11:50:37:
2c:1b:bf:9a:9b:9a:00:fd:5c:93:f5:b2:12:7d:c3:
9c:17:b7:83:1c:a0:25:1e:2d:53:9d:37:a0:6c:d3:
5c:98:43:bc:a2:6f:b1:44:52:4d:5b:52:fe:08:1d:
a6:b2:7f:5f:24:ce:ae:53:7f:9e:ea:17:8d:c2:9f:
cd:50:bf:ed:ce:b3:c6:1f:60:db:2e:2f:95:1d:a1:
f5:3f:9c:dd:12:70:fb:68:c2:58:b8:b3:de:5c:c5:
3c:3b:60:03:a7:85:cd:53:00:35:19:ce:ce:78:5a:
93:20:c7:d0:7a:64:0d:90:e5:db:fb:cd:bc:92:de:
12:47:d5:19:dd:97:a2:66:0e:9d:6a:f4:82:ef:c5:
d5:fd:4d:2a:28:42:9e:8d:28:af:19:71:1b:2a:40:
08:5f:31:69:27:ca:9d:0e:61:f6:65:5f:a5:21:44:
16:c5:14:84:de:d0:1c:73:1a:81:8d:ce:9c:21:70:
25:05:ed:2b:b9:f5:c1:88:5c:f2:53:a0:83:bf:e3:
b5:46:99:26:e3:06:13:de:1b:0e:a1:84:86:6f:f3:
3b:c4:75:9d:cc:28:56:94:80:2d:55:8e:48:ab:d2:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:16:91:BE:7C:04:2C:EA:12:C6:E1:91:63:CA:7B:7E:AE:8D:77
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0JcWkb58BCzqEsbhkWPKe36ujXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.100.0/22
212.113.120.0/22
Signature Algorithm: sha256WithRSAEncryption
80:75:24:67:af:28:dc:14:33:7b:7a:bc:1c:26:e5:8f:ef:25:
8d:dd:87:63:cc:f7:ec:7b:3d:9f:ed:31:cf:ea:37:f2:af:1d:
81:3f:bc:cd:fb:da:c7:7e:26:61:60:39:8e:33:f4:95:32:27:
1e:92:e3:77:df:f5:bf:2d:71:f5:2b:17:9f:b9:96:c1:69:d2:
ae:86:b2:40:d1:6a:2a:f6:66:8c:49:ed:ec:13:60:43:08:d4:
ec:71:69:9d:e7:e6:30:6c:2b:c5:3d:28:69:d7:5f:b4:e7:c3:
9d:fd:57:97:1d:4c:94:68:5b:93:63:db:52:9a:6c:68:49:fe:
53:28:01:bd:69:4b:ce:92:ad:52:07:f0:59:65:11:b7:b1:af:
53:ce:37:49:d8:60:3b:e1:1a:4a:50:ed:dc:6b:a2:a0:80:7a:
5a:5c:7a:f2:7d:61:62:5e:32:f0:2d:91:23:b0:8e:de:ed:2e:
a1:9e:8d:ce:9a:24:1b:4d:5a:85:fb:b5:0a:af:88:d2:ca:6c:
42:4a:89:74:09:f6:38:4b:18:7d:a4:5a:ae:ac:a3:5e:ce:27:
d5:20:3d:24:96:35:13:24:e8:ee:46:b0:1b:40:75:9f:00:5a:
39:82:c9:30:22:03:d7:a2:89:87:93:38:0e:05:f3:65:9d:09:
6e:0b:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:48 2025 by rpki-client