Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/hhsGL7XF6m4-rXK8cvWhpuZgBgY.roa
File: hhsGL7XF6m4-rXK8cvWhpuZgBgY.roa (raw, json)
Hash identifier: EQhoYquEAC8IUBrPfsKP8B3LDeEhyrmGzdOFcc7HfMs=
Subject key identifier: 86:1B:06:2F:B5:C5:EA:6E:3E:AD:72:BC:72:F5:A1:A6:E6:60:06:06
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01862ABC9F3D155B9BBD9FEF1AD7DBBA9889
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/hhsGL7XF6m4-rXK8cvWhpuZgBgY.roa
Signing time: Tue 07 Feb 2023 07:17:29 +0000
ROA not before: Tue 07 Feb 2023 07:17:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29076
IP address blocks: 212.113.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:bc:9f:3d:15:5b:9b:bd:9f:ef:1a:d7:db:ba:98:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Feb 7 07:17:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=861b062fb5c5ea6e3ead72bc72f5a1a6e6600606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:8e:d6:01:bf:f7:04:6d:b5:50:d5:f3:3f:
61:41:58:22:86:c8:81:b2:4f:72:1f:a7:ef:02:b3:
5c:06:0b:8f:42:54:24:ea:19:82:2d:c7:e6:df:b3:
55:f2:75:ce:96:c5:e6:08:98:a7:8c:72:6f:78:d6:
c7:3f:aa:3d:3d:b2:65:7c:2c:4c:00:b4:c5:bb:e4:
25:84:c4:8d:49:e6:ad:6e:80:3a:bc:d9:7f:b6:1e:
45:e8:07:6d:c6:22:85:5d:2b:b3:43:b4:fd:bc:57:
1d:05:49:9d:84:a0:0f:1d:83:58:18:9f:3d:eb:8a:
61:e1:d8:5f:f7:69:fc:0e:0b:9b:41:6e:be:3b:c8:
31:1b:18:48:17:6d:57:ce:98:9a:ff:66:fc:b1:81:
70:1b:e2:23:d7:51:52:4a:04:31:e0:57:4a:13:ce:
9f:66:b2:1b:a0:14:8f:ee:09:9b:9b:05:89:48:bc:
28:81:17:06:89:ad:e2:d3:f3:19:5e:a5:75:38:f0:
fb:f8:b3:a9:0e:2f:88:2e:94:47:3f:de:68:28:1a:
38:d7:2f:d9:67:ec:b7:a6:c5:db:8f:90:0c:2a:e3:
9a:02:33:42:bd:65:33:6f:41:34:d7:06:14:9a:0d:
96:3f:9c:7a:c2:2c:53:cf:6e:78:df:f3:19:01:dc:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:06:2F:B5:C5:EA:6E:3E:AD:72:BC:72:F5:A1:A6:E6:60:06:06
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/hhsGL7XF6m4-rXK8cvWhpuZgBgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c2:44:da:e8:be:5b:c0:01:fd:f4:ed:ff:98:27:62:9f:7e:
83:50:c1:93:a1:00:3b:5a:06:a7:64:5b:8d:b1:bc:e4:13:c6:
84:43:34:b6:43:2e:14:ea:9a:72:1b:7b:82:d9:07:87:9e:ab:
8b:5b:bd:61:0c:8c:b5:53:0f:76:02:8b:9f:b0:a9:d0:cc:0e:
fc:30:02:a8:3a:71:3a:fe:56:3e:29:d1:af:ab:ad:66:32:e4:
dd:47:19:6c:df:89:28:c7:67:b2:c4:aa:9f:0f:c7:1c:a2:42:
bb:32:03:5a:ee:8e:35:93:65:69:f0:a5:dd:22:4e:84:52:de:
7c:27:f2:62:ab:26:c8:59:e0:34:51:5d:0d:48:da:3d:21:4e:
e6:70:5c:e8:02:ac:b5:b0:c7:da:a2:16:e8:e8:2f:db:6f:3a:
5d:14:43:59:98:0b:4a:82:91:bc:9b:16:1b:c8:c3:18:dd:d3:
83:a6:49:8a:c5:26:1e:03:0f:25:34:e1:d9:24:29:b0:5e:f3:
3b:2f:87:c3:e1:69:25:cf:7e:3f:ff:d6:64:d2:54:92:6c:cd:
1b:d0:b8:01:94:dc:09:32:4e:30:99:d8:4d:0e:49:ff:33:48:
04:25:a3:84:b4:00:3b:04:a5:d9:63:70:0e:90:22:49:2d:47:
9c:b4:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:20 2025 by rpki-client