Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/9g_IRF-42-ipfH7Ec3-Cug-6M7g.roa
File: 9g_IRF-42-ipfH7Ec3-Cug-6M7g.roa (raw, json)
Hash identifier: ckidCc34e3nTj2CsVWAC7FMOnqC+Jew+iBn2hWj9+ZU=
Subject key identifier: F6:0F:C8:44:5F:B8:DB:E8:A9:7C:7E:C4:73:7F:82:BA:0F:BA:33:B8
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0185F476DA39D55A23EF745E2B612AF8A863
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/9g_IRF-42-ipfH7Ec3-Cug-6M7g.roa
Signing time: Fri 27 Jan 2023 18:21:47 +0000
ROA not before: Fri 27 Jan 2023 18:21:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 212.113.119.0/24 maxlen: 24
212.113.106.0/24 maxlen: 24
212.113.116.0/24 maxlen: 24
212.113.117.0/24 maxlen: 24
212.113.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:76:da:39:d5:5a:23:ef:74:5e:2b:61:2a:f8:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 27 18:21:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f60fc8445fb8dbe8a97c7ec4737f82ba0fba33b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:61:e2:e5:c6:e9:c3:ac:8d:9b:93:7d:da:
1b:c3:29:1f:71:91:c4:60:15:82:87:13:1a:ed:e0:
46:cc:ca:fc:d5:31:a2:7b:90:91:4f:8f:36:c4:4d:
13:39:1a:53:56:e9:b9:2b:ba:57:19:8c:5c:0e:53:
ab:75:96:9f:c5:e8:15:d6:00:3d:6d:7f:88:8b:0b:
ae:33:45:25:e8:b8:0c:56:5f:44:2a:70:63:dd:08:
f9:12:12:c7:58:32:a0:af:b4:3f:f1:a0:88:76:d8:
ce:f9:6a:eb:40:84:3f:57:8c:1a:b1:ae:ca:dd:91:
43:a4:e7:c3:b6:11:f6:5d:c8:e2:6b:4f:75:1e:ec:
e8:3a:b6:9f:4c:56:30:54:04:47:e6:35:87:88:89:
28:8d:0b:9e:1c:b5:a6:4b:e1:80:39:02:b4:d1:ec:
70:47:f7:d2:3c:21:ee:de:71:c1:59:36:60:c2:d8:
5f:d1:67:cf:03:5d:e3:c2:52:49:0d:6a:04:87:2d:
b9:5a:fd:82:d2:d8:a3:8a:66:83:21:05:0d:d8:15:
8e:9f:f1:2d:f9:9f:4e:eb:70:65:b3:55:cc:db:c0:
d2:43:ac:43:d2:78:9d:31:f3:17:9f:d0:d9:c7:25:
3e:1f:1c:b6:f4:dd:0a:58:68:39:f0:4d:1c:57:81:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0F:C8:44:5F:B8:DB:E8:A9:7C:7E:C4:73:7F:82:BA:0F:BA:33:B8
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/9g_IRF-42-ipfH7Ec3-Cug-6M7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.106.0/24
212.113.116.0/22
Signature Algorithm: sha256WithRSAEncryption
93:8a:2f:30:a0:a7:9f:a4:27:16:31:b3:3b:6f:e5:c3:18:73:
9a:10:60:b5:bc:e2:af:8a:2f:e1:0b:64:0a:53:df:f8:1e:de:
c2:da:2f:1c:bf:11:c8:cc:2b:7b:35:09:5c:b7:b5:70:83:c8:
82:d9:06:26:2d:ae:cc:3a:48:e4:f6:01:6a:f9:ce:7f:2d:49:
47:1e:2e:13:4f:d6:a6:39:7e:97:5c:b6:22:c2:3f:ac:bf:84:
cb:2e:e8:f8:06:9e:cb:a6:ec:c1:db:56:62:75:60:64:fd:f8:
a4:d3:15:79:ad:aa:a2:8f:19:08:be:3a:10:42:78:db:05:0a:
81:32:fe:fe:93:8b:ce:32:51:49:7a:99:8a:1f:72:61:51:7e:
6a:b5:38:31:75:f4:3c:61:19:22:4e:ac:c9:a1:86:fb:d2:78:
e2:42:82:bf:a4:99:8a:10:b9:3b:2e:7f:27:93:02:27:2b:40:
2f:94:cd:07:d7:b9:f4:9c:41:cf:35:9b:16:f1:a4:f7:95:a9:
01:40:94:e4:ad:e2:15:f8:c3:fb:87:38:0c:ad:cc:c3:53:f9:
2a:3b:f5:22:8f:20:fd:af:a5:06:ca:32:27:7f:ee:a7:ba:37:
95:70:75:5e:8a:25:93:fd:e8:79:3d:8d:fc:14:d7:37:25:a4:
c3:2c:a8:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYX0dto51Voj73ReK2Eq+KhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjMwMTI3MTgyMTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjBmYzg0NDVmYjhkYmU4YTk3YzdlYzQ3MzdmODJiYTBmYmEzM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT1h4uXG6cOsjZuTfdobwykfcZHE
YBWChxMa7eBGzMr81TGie5CRT482xE0TORpTVum5K7pXGYxcDlOrdZafxegV1gA9
bX+IiwuuM0Ul6LgMVl9EKnBj3Qj5EhLHWDKgr7Q/8aCIdtjO+WrrQIQ/V4wasa7K
3ZFDpOfDthH2Xcjia091HuzoOrafTFYwVARH5jWHiIkojQueHLWmS+GAOQK00exw
R/fSPCHu3nHBWTZgwthf0WfPA13jwlJJDWoEhy25Wv2C0tijimaDIQUN2BWOn/Et
+Z9O63Bls1XM28DSQ6xD0nidMfMXn9DZxyU+Hxy29N0KWGg58E0cV4FKBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPYPyERfuNvoqXx+xHN/groPujO4MB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvOWdfSVJGLTQyLWlwZkg3RWMzLUN1Zy02TTdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1HFqAwQC
1HF0MA0GCSqGSIb3DQEBCwUAA4IBAQCTii8woKefpCcWMbM7b+XDGHOaEGC1vOKv
ii/hC2QKU9/4Ht7C2i8cvxHIzCt7NQlct7Vwg8iC2QYmLa7MOkjk9gFq+c5/LUlH
Hi4TT9amOX6XXLYiwj+sv4TLLuj4Bp7LpuzB21ZidWBk/fik0xV5raqijxkIvjoQ
QnjbBQqBMv7+k4vOMlFJepmKH3JhUX5qtTgxdfQ8YRkiTqzJoYb70njiQoK/pJmK
ELk7Ln8nkwInK0AvlM0H17n0nEHPNZsW8aT3lakBQJTkreIV+MP7hzgMrczDU/kq
O/UijyD9r6UGyjInf+6nujeVcHVeiiWT/eh5PY38FNc3JaTDLKht
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:31 2025 by rpki-client