Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/83AdAV7q4_mzw_oSgtYWbSRba4A.roa
File: 83AdAV7q4_mzw_oSgtYWbSRba4A.roa (raw, json)
Hash identifier: dZpQ8DUI4A1CaTj9YcFHipmt+4AfueuDCUFYr/KmZds=
Subject key identifier: F3:70:1D:01:5E:EA:E3:F9:B3:C3:FA:12:82:D6:16:6D:24:5B:6B:80
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0193BA6F1676830134527C1B715177987936
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/83AdAV7q4_mzw_oSgtYWbSRba4A.roa
Signing time: Thu 12 Dec 2024 10:34:22 +0000
ROA not before: Thu 12 Dec 2024 10:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.107.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:6f:16:76:83:01:34:52:7c:1b:71:51:77:98:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Dec 12 10:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3701d015eeae3f9b3c3fa1282d6166d245b6b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:93:c9:30:15:05:9f:59:29:3f:59:c8:13:92:
d5:72:e1:69:e1:6d:f4:34:7a:9f:f5:cf:3e:43:13:
ed:3a:0e:60:4e:d0:a0:56:bb:5a:30:d5:4a:7a:63:
d3:65:a0:9f:13:45:b2:d8:bc:94:5b:18:4b:ce:4f:
21:20:7d:71:bd:ba:f9:84:e7:8c:8d:4e:b0:4c:c4:
e8:43:80:54:76:61:f0:54:a0:14:73:de:37:4b:b3:
d2:e6:ac:4c:bf:25:90:cf:b0:a2:bf:16:a5:1d:6b:
c3:ab:af:d5:5f:9d:9b:d1:3e:4d:f7:68:63:c5:45:
78:44:12:8d:a2:c2:97:73:b4:3d:b6:5b:b3:22:0a:
90:35:45:14:ee:f5:7d:e0:69:99:b9:dc:22:59:5a:
bd:42:ca:c2:0f:39:34:d5:b1:1c:81:05:6d:92:05:
ce:4e:ad:47:2e:b6:bf:0c:3d:01:71:f9:56:2d:f9:
ec:32:6a:09:1c:34:d0:ec:4c:3d:dc:e5:f2:4e:bc:
79:30:9a:51:bb:90:25:f0:3d:f5:5d:dd:51:7b:41:
50:84:15:fa:96:07:2b:f7:85:8c:db:e9:c0:70:1f:
25:07:27:a2:2e:3d:ee:c2:33:23:5b:61:ca:27:cc:
7b:18:0d:66:4a:5c:17:73:10:58:47:6c:94:a0:e7:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:70:1D:01:5E:EA:E3:F9:B3:C3:FA:12:82:D6:16:6D:24:5B:6B:80
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/83AdAV7q4_mzw_oSgtYWbSRba4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.107.0/24
212.113.109.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:60:e0:b5:8d:9a:67:de:25:67:50:eb:e2:e0:55:52:e3:40:
df:51:a7:e1:8e:d8:d8:03:55:1a:cb:d5:01:08:2c:a1:c3:cf:
74:68:75:bd:c5:02:91:45:1c:17:cd:9f:2d:90:6b:d6:e6:41:
ae:f0:45:35:4f:fd:a4:39:1f:20:36:c3:54:74:71:ba:57:b7:
85:8b:71:97:be:9d:1a:1b:fc:79:cc:fb:7a:92:4f:2a:c8:d8:
e4:e7:f0:32:fb:a0:4b:06:e1:82:1b:7f:bd:0f:f1:d0:48:a2:
74:2b:0e:55:95:12:32:03:4f:6b:2f:c8:89:fe:12:03:b3:ca:
49:47:b7:ff:83:81:7e:d7:b4:6e:ab:7d:a8:ae:a0:4f:ba:3b:
31:82:51:66:34:1d:3c:25:35:3a:c8:cb:10:19:5a:21:df:bc:
31:45:69:14:a9:7e:87:af:0e:ba:89:b1:5a:61:fd:d4:ea:7b:
8f:9a:e3:45:ac:a1:0d:ab:e9:52:73:fd:2a:cd:ad:4a:14:50:
5b:01:3d:56:24:27:03:2d:4c:c1:06:0b:92:30:b9:88:9e:50:
2a:38:e5:75:7c:3c:8f:cd:98:8c:e0:1c:7e:a0:5e:e8:32:03:
bf:63:5c:cb:19:01:7f:5c:92:a6:ab:7a:70:8e:5c:19:18:3c:
7a:97:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:42 2025 by rpki-client