Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/8SMTC6Chl-FxghE235QJ03qDFsQ.roa
File: 8SMTC6Chl-FxghE235QJ03qDFsQ.roa (raw, json)
Hash identifier: O2dN0VdXvX2JqJqFBWlkQxyyVm8BsMkCxLsbympfIBo=
Subject key identifier: F1:23:13:0B:A0:A1:97:E1:71:82:11:36:DF:94:09:D3:7A:83:16:C4
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018538B0904ACF997A37EC546AD68C23C92A
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/8SMTC6Chl-FxghE235QJ03qDFsQ.roa
Signing time: Thu 22 Dec 2022 07:16:13 +0000
ROA not before: Thu 22 Dec 2022 07:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.119.0/24 maxlen: 24
212.113.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:b0:90:4a:cf:99:7a:37:ec:54:6a:d6:8c:23:c9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Dec 22 07:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f123130ba0a197e171821136df9409d37a8316c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:7a:da:62:5c:30:40:82:04:39:e6:8a:28:
d2:d8:4d:00:35:2e:dc:60:6b:eb:5b:44:e4:70:d2:
1c:bd:0e:e4:1d:d3:ea:88:9c:94:b7:6c:1d:4b:d8:
05:86:96:17:a8:d8:00:09:37:6b:3e:ba:71:ac:6a:
2f:6d:b6:11:65:35:d8:73:27:40:70:e2:11:dc:f4:
62:92:d4:e2:3a:87:3d:7e:22:73:d4:7c:19:d9:dc:
76:bb:5b:13:94:44:4f:80:42:bb:e3:d3:1f:1e:01:
b3:15:b3:14:56:ac:d6:82:5a:4b:33:55:41:e9:27:
f7:2e:67:09:3a:b9:e2:d6:b1:05:2e:03:49:99:7e:
fd:34:34:a2:28:56:29:24:94:48:de:3b:c9:27:7d:
82:90:49:c4:6b:36:f7:5a:62:85:0c:df:c2:de:60:
b4:76:70:21:c5:d6:4c:99:86:0f:67:11:a1:05:16:
d2:92:cd:53:7b:c8:85:7e:3f:3b:ff:c6:c0:fe:a4:
9a:28:2d:50:b9:76:3a:b7:19:19:5f:55:38:60:7f:
b5:5f:da:61:62:75:29:35:f4:ca:a0:bf:5c:1e:0c:
f3:92:b6:76:31:96:ad:35:55:10:1e:59:99:24:7e:
88:0f:79:ca:60:7c:ff:83:d4:1f:51:ce:c6:0d:58:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:13:0B:A0:A1:97:E1:71:82:11:36:DF:94:09:D3:7A:83:16:C4
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/8SMTC6Chl-FxghE235QJ03qDFsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.116.0/22
Signature Algorithm: sha256WithRSAEncryption
48:a4:c7:af:71:a1:32:10:9f:27:8a:79:6f:df:47:f2:8d:5f:
a1:e0:f9:8d:3a:ab:9f:1d:01:26:f3:78:fe:46:c9:28:4b:73:
4b:90:78:30:1e:ab:34:98:f9:91:58:1e:c9:72:57:1c:7c:33:
d0:5c:a3:45:9f:fa:c4:06:27:83:bc:55:5b:a8:ff:00:e2:d3:
dc:2b:c3:05:d1:3c:32:68:9c:38:9e:00:f2:7a:89:d7:3e:db:
dd:89:3c:01:6a:9b:dc:28:f2:09:dc:0e:20:b1:b4:f4:69:f8:
b3:e4:df:38:81:76:25:00:0d:95:0a:4c:af:af:1c:16:e5:98:
bc:5a:eb:81:96:6a:71:bc:12:a6:5e:92:da:b3:7f:74:35:0d:
39:f9:05:ec:ae:76:bf:1f:53:86:cf:bf:ab:c9:f8:42:19:ee:
f0:16:0c:58:05:58:98:c0:9f:0d:70:0d:91:15:c3:6b:dc:2f:
04:5a:37:b4:b6:35:34:4a:dc:50:dd:79:30:5d:bb:cb:dd:f6:
ce:05:50:d5:de:df:b7:46:56:3b:b2:5b:86:c6:0d:c4:ea:8a:
56:2b:2f:fb:72:40:8f:f4:1e:8d:fc:94:4d:bb:0d:73:95:1c:
da:5d:65:ec:0b:e7:21:8d:c1:9c:2e:59:a2:ce:d0:5c:65:4b:
80:32:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:38 2025 by rpki-client