Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BquKat6j82qOS2m8MoMszw9MXhs.roa
File: BquKat6j82qOS2m8MoMszw9MXhs.roa (raw, json)
Hash identifier: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=
Subject key identifier: 06:AB:8A:6A:DE:A3:F3:6A:8E:4B:69:BC:32:83:2C:CF:0F:4C:5E:1B
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0194282332FA86C5F85AAFBFF85B4843DE57
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BquKat6j82qOS2m8MoMszw9MXhs.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210223
IP address blocks: 212.113.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:32:fa:86:c5:f8:5a:af:bf:f8:5b:48:43:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06ab8a6adea3f36a8e4b69bc32832ccf0f4c5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:b9:53:c3:2c:5e:e3:ba:85:01:c9:d5:87:
3b:47:05:75:5b:53:8f:bd:4b:81:17:d1:f7:fe:2a:
a2:8c:8e:19:f3:b7:c0:c3:46:76:a2:45:cf:8f:6a:
c7:60:d8:4a:88:f7:68:23:b0:a6:23:a4:12:2a:55:
22:46:63:51:58:f6:6b:86:ce:7e:35:4f:c8:57:68:
9c:0e:1d:4d:85:c2:3b:23:f7:90:e6:fc:3b:5f:b3:
ee:fb:2f:e9:e1:39:1d:0c:98:3b:da:ba:74:48:6e:
62:67:be:85:c8:8b:22:39:9b:18:a4:0b:b1:a8:56:
b9:47:f9:df:89:44:9d:22:61:90:d7:2e:c0:cb:65:
51:0a:af:70:49:b5:f4:04:53:93:2f:e9:e0:d4:74:
d8:bb:7c:67:50:df:33:2d:75:c1:f2:6a:4c:7b:39:
2f:65:b9:d4:67:8d:d1:a3:a1:92:db:a4:16:6e:d3:
45:5a:4e:40:e0:5d:e2:92:cc:7d:f2:d9:d5:8e:bf:
01:f0:c4:57:cf:6f:2b:ac:a6:c4:29:5c:6a:60:47:
b3:7f:21:9e:02:53:92:f1:a8:9b:94:99:a3:62:3d:
15:65:b6:5b:23:39:4b:e9:aa:68:86:9a:55:49:14:
04:cd:2a:20:f5:f8:49:2e:7c:eb:53:27:47:30:73:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:8A:6A:DE:A3:F3:6A:8E:4B:69:BC:32:83:2C:CF:0F:4C:5E:1B
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BquKat6j82qOS2m8MoMszw9MXhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c6:08:87:0f:98:a6:ee:46:4d:cc:68:86:90:a2:d5:7f:69:
2e:41:00:95:b6:b2:f0:51:42:af:6e:97:2b:6d:32:97:66:56:
08:84:e3:ef:ba:b3:2c:06:ba:9e:68:72:94:93:5b:02:98:d4:
fa:68:80:8e:d3:4f:ee:a6:09:27:5d:d3:e6:0f:bb:92:f0:6d:
5f:df:7b:42:66:65:bf:12:fe:d6:3b:85:cb:a0:53:61:14:e2:
a0:53:93:df:c0:fb:c4:2c:dd:b8:cb:26:03:a1:f8:9e:70:49:
d7:bc:66:0d:81:d5:55:26:6f:f3:fb:bd:cb:f3:d5:65:45:27:
3a:74:c5:43:eb:cf:d6:80:af:f5:40:67:3a:38:c9:aa:95:36:
c7:5c:d4:02:18:9f:ba:a1:fa:dc:39:52:22:be:04:6b:a0:55:
e2:25:e6:7c:2e:10:56:4b:e1:b9:47:b0:fd:d6:38:b1:34:41:
e5:c3:b2:a5:61:61:8f:85:dc:28:e4:ec:88:9c:79:8a:a2:75:
2e:00:55:da:b8:a9:91:7e:17:ce:f8:c7:90:77:dd:30:3f:e2:
86:ce:38:d2:6b:63:13:c7:36:fd:8b:5f:9a:3d:6d:4d:24:ba:
2f:eb:4e:f1:a9:00:e5:50:07:66:e2:2c:a6:7f:4b:7f:10:c3:
11:c3:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:00 2025 by rpki-client