Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/ygM2v3yxRCSTta-X-otHAEUh3WI.roa
File: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (raw, json)
Hash identifier: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=
Subject key identifier: CA:03:36:BF:7C:B1:44:24:93:B5:AF:97:FA:8B:47:00:45:21:DD:62
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01942823310132BAB3938644138F5970A566
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/ygM2v3yxRCSTta-X-otHAEUh3WI.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200935
IP address blocks: 212.113.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:31:01:32:ba:b3:93:86:44:13:8f:59:70:a5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca0336bf7cb1442493b5af97fa8b47004521dd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:a0:23:b4:27:e1:65:92:8f:71:9d:a0:4f:
29:c5:e8:5b:fc:ab:e6:8d:47:27:50:19:90:b1:20:
e2:41:fd:d8:31:c8:7e:d7:2d:c4:33:79:9c:65:56:
b5:b6:d7:a5:e0:0b:c5:97:35:e0:05:b8:05:e5:35:
d9:3c:40:40:72:1b:d9:b8:07:9d:57:97:14:15:e9:
b9:97:3a:d1:5e:14:8e:6b:33:11:e3:93:b2:3e:f5:
0d:a1:eb:96:69:34:c7:f4:27:e3:75:b2:61:f6:b2:
dd:53:c6:ec:c9:bd:29:36:07:67:d1:57:84:c0:96:
c1:33:47:76:db:dd:e6:bf:c3:bc:4d:a3:61:bf:c5:
d9:aa:e0:06:e5:25:b7:38:db:c6:86:0a:9b:84:da:
d0:75:8f:a1:0a:db:a1:36:ac:ac:82:13:db:06:f7:
6f:4a:6d:ad:1b:6f:e7:90:4c:42:bd:4e:ab:dc:ed:
d0:7c:bc:29:7c:33:9e:22:21:2c:1e:bd:7d:ed:05:
2f:fb:53:e2:75:28:7b:2a:61:dd:d1:7c:38:5d:04:
73:8e:f9:8c:f4:43:cc:70:f0:94:67:54:91:92:5d:
95:e5:f5:ba:76:55:16:24:09:e2:7c:d7:95:cf:1e:
ec:ee:34:bf:ee:4c:67:c9:6b:87:20:92:8f:36:ce:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:36:BF:7C:B1:44:24:93:B5:AF:97:FA:8B:47:00:45:21:DD:62
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/ygM2v3yxRCSTta-X-otHAEUh3WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.110.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b0:39:84:ab:bc:6c:38:16:c9:05:b2:7d:0e:14:f9:b2:00:
b8:f5:ec:dd:ae:50:69:a3:66:88:74:8b:d4:15:d2:f7:c9:34:
a1:b8:8e:21:11:c5:9a:20:05:88:72:ba:b4:e5:1c:5a:7a:92:
00:60:88:4d:18:c8:8b:90:70:53:97:88:97:52:e9:d2:4e:13:
d7:bf:c8:c4:91:01:07:dc:97:07:ff:b3:53:17:ae:be:5b:58:
bb:16:35:7a:04:0e:f0:3d:71:dd:1b:66:be:c1:27:a2:5f:5d:
0b:13:41:c3:9d:08:dc:eb:99:33:db:f5:40:e0:4d:7e:03:c0:
16:27:28:d9:82:6c:5e:06:3a:28:f4:bc:69:b5:97:ad:6a:1b:
f7:b2:0f:5b:f3:34:63:87:97:06:4d:72:26:a3:77:f9:bc:6e:
ad:99:fc:d0:5e:7c:ce:73:80:80:93:62:02:8e:cf:ed:b3:02:
98:61:1b:89:dc:02:2a:45:18:d5:0f:6b:0d:6c:35:79:d8:f0:
c9:01:b3:8a:30:a0:f4:ef:78:53:2c:38:63:01:62:eb:98:1b:
3c:a6:64:56:e0:ae:e6:31:a4:9d:9c:d8:da:f1:e4:82:a7:a5:
3c:f5:e8:fb:61:e0:38:13:22:46:f6:05:6e:e0:1e:0f:c6:5e:
d3:ac:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:22 2025 by rpki-client