Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BG7a3HgengZnr-rmihVspUq88L8.roa
File: BG7a3HgengZnr-rmihVspUq88L8.roa (raw, json)
Hash identifier: SF3KfYnhv5daBaeUb0YA+9CXKzGSxwr3kcdJHVg8X8w=
Subject key identifier: 04:6E:DA:DC:78:1E:9E:06:67:AF:EA:E6:8A:15:6C:A5:4A:BC:F0:BF
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01856ED4DBA1E25C5013A17AD8C63D78E5DA
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BG7a3HgengZnr-rmihVspUq88L8.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200935
IP address blocks: 212.113.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:db:a1:e2:5c:50:13:a1:7a:d8:c6:3d:78:e5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=046edadc781e9e0667afeae68a156ca54abcf0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:b4:8f:65:95:9e:58:68:ff:fa:86:bb:ac:
09:ef:22:d5:a6:4e:7a:bd:ea:cc:2a:d8:7f:4c:37:
5a:58:91:ce:e2:60:04:a5:a1:be:38:f9:db:83:f7:
fb:fb:6c:68:2b:cf:7e:1d:b8:53:b0:5b:f2:cb:a5:
fe:74:f4:26:09:d5:5f:d8:96:55:c2:b7:fb:2e:c3:
7e:5c:af:46:51:70:59:8e:4d:c0:28:15:17:2d:23:
92:63:a0:d7:3e:16:93:4b:f8:2b:09:cf:43:c4:1b:
8f:4d:65:f1:14:f2:6e:95:8a:3d:59:dd:a2:48:86:
a8:07:e3:19:52:67:70:9c:e5:08:a8:10:31:1e:31:
77:d6:2d:92:43:b9:3e:1c:54:0d:0e:f7:0a:82:e3:
a6:24:5e:28:a7:83:4d:bf:4b:ae:21:f2:1d:75:c5:
49:00:df:cf:bc:94:b0:ae:86:79:20:0f:b6:6f:4f:
39:d3:7b:2d:42:83:68:fc:54:7d:e9:dd:fa:13:40:
9f:37:72:1a:fd:db:ca:44:56:6a:b9:2e:c4:42:5f:
eb:78:82:ca:5b:9c:87:a8:7d:02:84:af:a4:e7:81:
90:f5:1d:11:b7:53:4b:3c:1e:13:7c:2e:71:83:1c:
88:ba:46:fb:c9:3e:21:37:b3:e8:ee:c1:9e:7d:f5:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:DA:DC:78:1E:9E:06:67:AF:EA:E6:8A:15:6C:A5:4A:BC:F0:BF
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BG7a3HgengZnr-rmihVspUq88L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0b:0e:7a:a6:78:a9:6c:9e:90:a9:fe:dd:93:ab:ca:fb:66:
30:d7:a1:31:dd:d8:18:14:0f:b7:1d:60:6e:3a:dc:57:65:71:
cf:6c:cf:f9:3c:70:2b:36:41:e6:9f:de:3a:24:65:96:83:54:
c6:93:3c:80:14:b2:69:be:a5:be:f9:a4:fd:8e:52:95:7d:84:
ca:1d:b5:28:5c:a2:d6:5b:87:7a:bc:be:eb:cc:3c:cb:ef:b7:
84:90:e9:e1:d3:5d:57:30:f2:4d:58:6d:74:71:ab:fa:f8:70:
5a:25:d1:64:95:4b:9b:c4:3f:cf:c0:35:74:63:02:48:be:0b:
5a:9f:12:a9:92:6e:98:16:46:af:8a:1f:5c:1a:59:13:ee:a5:
c2:c0:0e:df:fe:92:30:fe:b3:7c:e2:77:33:ec:e4:7a:83:37:
2b:ea:5b:93:7a:26:cf:49:50:3a:f4:27:07:39:3e:51:c9:69:
5e:71:5f:60:13:33:19:dc:56:4e:68:3a:cd:bf:de:55:59:3e:
99:ce:8d:6d:5d:c1:8d:ae:56:48:11:2a:a5:37:99:58:21:3a:
22:ec:71:d0:d9:d3:72:a0:07:9c:2e:d6:a9:09:f0:58:29:a6:
47:16:e1:23:30:6e:49:41:df:15:68:14:23:ed:4b:e6:b5:bd:
93:bd:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:50 2025 by rpki-client