Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/IYyqynMTus4oPpNYFaqcXOIUQZk.roa
File: IYyqynMTus4oPpNYFaqcXOIUQZk.roa (raw, json)
Hash identifier: S0qIT+db7hCKhfk1GglFh+NbyrCnVz3r1J0vu2/hHqE=
Subject key identifier: 21:8C:AA:CA:73:13:BA:CE:28:3E:93:58:15:AA:9C:5C:E2:14:41:99
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0191E46D3894EACA13660A81954425D43691
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/IYyqynMTus4oPpNYFaqcXOIUQZk.roa
Signing time: Thu 12 Sep 2024 04:10:48 +0000
ROA not before: Thu 12 Sep 2024 04:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:6d:38:94:ea:ca:13:66:0a:81:95:44:25:d4:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Sep 12 04:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=218caaca7313bace283e935815aa9c5ce2144199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:c1:37:9d:0e:92:3a:6f:82:9f:24:93:d1:
ae:51:c0:b6:81:3c:30:85:c1:b7:21:49:7c:17:29:
93:9a:61:8d:85:9c:24:4d:0e:34:8a:87:16:07:2c:
23:87:9d:77:0a:8b:2c:9f:f6:89:ff:57:60:8c:bd:
12:54:b7:9c:54:22:1a:84:ca:e1:35:b4:5c:35:5d:
bd:29:a0:a7:e7:55:a4:b0:c3:a5:17:55:37:a5:32:
d3:95:3e:1e:19:b4:82:57:48:7b:53:9a:b6:ae:88:
0c:fe:67:7a:ca:6a:50:3b:79:6c:81:91:13:96:44:
64:9a:36:28:3c:1f:14:af:26:0d:0c:ec:f5:8c:34:
3c:2c:11:8b:99:86:bd:87:74:d7:31:9c:7d:60:74:
22:8b:a4:82:8b:f8:a1:2c:8a:60:62:8a:e2:23:47:
cc:69:10:f3:51:d3:5a:69:f5:ee:b2:5a:65:75:0b:
67:28:97:71:ac:72:a9:13:33:c3:79:f7:f0:59:f7:
11:f1:c4:b4:0b:c8:66:35:3a:a7:4f:eb:c9:e0:27:
a0:8b:16:74:d8:96:71:e1:4c:f2:0d:20:b2:2f:4f:
05:40:d6:91:c3:4b:ee:80:3f:11:b5:d4:67:0a:7c:
64:7d:c2:fc:fc:1c:2d:a7:06:5a:0a:6d:78:7a:7e:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8C:AA:CA:73:13:BA:CE:28:3E:93:58:15:AA:9C:5C:E2:14:41:99
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/IYyqynMTus4oPpNYFaqcXOIUQZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ca:54:dc:48:e1:e3:3f:ce:e6:b2:b9:78:7b:a9:11:06:8d:
7d:54:e4:e2:b9:a4:53:56:7a:b4:b9:b0:03:10:97:89:a1:26:
5d:1e:bc:ea:19:12:99:c4:c1:45:87:aa:9d:5e:75:62:fa:8c:
3b:e5:a6:5a:0d:31:4b:b2:bd:59:04:82:2c:2f:17:32:fd:f2:
21:20:4c:b0:b7:42:dc:19:d6:0c:02:86:38:36:53:56:17:43:
af:58:85:68:aa:32:cd:57:55:33:13:e4:01:67:e6:4d:84:6b:
fa:b6:f9:2e:f5:25:62:1f:f8:2c:3c:c6:68:74:f8:76:1b:5a:
4a:44:a1:89:86:12:40:a2:a3:f3:0c:d2:5e:44:65:12:a4:e6:
82:5f:bb:fb:85:20:90:7c:84:93:ba:55:06:46:eb:ee:7d:0f:
6b:83:0f:84:fc:23:67:68:42:6b:71:5b:74:42:d6:f9:a2:be:
75:a1:53:0c:c9:a9:d6:de:93:d6:b7:fc:b3:c2:b1:15:e1:15:
f4:fa:35:b6:a7:33:ae:a1:5f:ed:cf:43:cd:f4:0d:c7:4d:5c:
37:e1:88:20:86:b7:cc:37:87:1e:6a:28:a7:8c:2e:7d:42:fb:
c3:eb:ce:9f:53:82:54:54:f7:c8:84:74:88:23:43:49:95:2a:
d9:37:b1:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHkbTiU6soTZgqBlUQl1DaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjQwOTEyMDQxMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMThjYWFjYTczMTNiYWNlMjgzZTkzNTgxNWFhOWM1Y2UyMTQ0MTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4XBN50Okjpvgp8kk9GuUcC2gTww
hcG3IUl8FymTmmGNhZwkTQ40iocWBywjh513Cossn/aJ/1dgjL0SVLecVCIahMrh
NbRcNV29KaCn51WksMOlF1U3pTLTlT4eGbSCV0h7U5q2rogM/md6ympQO3lsgZET
lkRkmjYoPB8UryYNDOz1jDQ8LBGLmYa9h3TXMZx9YHQii6SCi/ihLIpgYoriI0fM
aRDzUdNaafXuslpldQtnKJdxrHKpEzPDeffwWfcR8cS0C8hmNTqnT+vJ4CegixZ0
2JZx4UzyDSCyL08FQNaRw0vugD8RtdRnCnxkfcL8/BwtpwZaCm14en5JPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCGMqspzE7rOKD6TWBWqnFziFEGZMB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvSVl5cXluTVR1czRvUHBOWUZhcWNYT0lVUVprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1HFjAwQA
1HFwMA0GCSqGSIb3DQEBCwUAA4IBAQBLylTcSOHjP87msrl4e6kRBo19VOTiuaRT
Vnq0ubADEJeJoSZdHrzqGRKZxMFFh6qdXnVi+ow75aZaDTFLsr1ZBIIsLxcy/fIh
IEywt0LcGdYMAoY4NlNWF0OvWIVoqjLNV1UzE+QBZ+ZNhGv6tvku9SViH/gsPMZo
dPh2G1pKRKGJhhJAoqPzDNJeRGUSpOaCX7v7hSCQfISTulUGRuvufQ9rgw+E/CNn
aEJrcVt0Qtb5or51oVMMyanW3pPWt/yzwrEV4RX0+jW2pzOuoV/tz0PN9A3HTVw3
4YgghrfMN4ceaiinjC59QvvD686fU4JUVPfIhHSII0NJlSrZN7FT
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:01 2025 by rpki-client