Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_hWIZtCNgEyL-H1ZcXOs3ubux20.roa
File: _hWIZtCNgEyL-H1ZcXOs3ubux20.roa (raw, json)
Hash identifier: taNMHdFrOjv54DcZn4eFZHeynyvVa26TAy5jacrLlQ4=
Subject key identifier: FE:15:88:66:D0:8D:80:4C:8B:F8:7D:59:71:73:AC:DE:E6:EE:C7:6D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D9D0904C44E60DBA37F9CEA8D2C99
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_hWIZtCNgEyL-H1ZcXOs3ubux20.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207686
IP address blocks: 212.14.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9d:09:04:c4:4e:60:db:a3:7f:9c:ea:8d:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe158866d08d804c8bf87d597173acdee6eec76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:1c:7c:5a:8d:fc:ca:26:42:72:0c:20:db:
1b:8c:06:4a:2f:78:28:3b:ba:a5:60:f1:32:78:78:
1b:89:96:2d:a6:e7:ad:6f:ff:a7:d6:15:de:0d:ed:
0c:23:3d:0f:4b:0c:71:0f:2e:32:f9:3d:9d:62:a7:
66:d1:24:00:8e:1e:cd:10:9a:aa:63:db:9d:8e:b7:
6d:f0:40:35:4f:a2:66:13:33:94:43:4c:37:d7:97:
90:27:ea:13:28:6e:d1:08:24:14:3e:0e:6d:ac:35:
47:4a:5d:51:11:f4:fc:b7:de:e3:98:60:d3:b6:84:
7d:db:75:54:38:d1:3b:39:79:9a:e0:4b:84:56:da:
86:0d:5c:4b:33:70:6f:4c:2f:f5:cd:ac:77:da:ac:
15:b2:d3:7b:09:25:52:04:31:89:cf:62:2a:0e:f6:
90:2e:ee:ab:ec:fa:66:01:72:1c:ba:10:60:0a:d2:
dd:31:67:c3:33:75:d1:8e:72:0f:b2:71:fe:80:08:
c0:e1:84:6c:fa:95:a3:69:2a:be:8c:62:16:4a:85:
06:a1:e8:fa:b2:19:31:ec:c1:7f:bf:78:f7:86:4f:
e8:44:bf:ff:9e:ad:35:cf:c3:91:60:d9:99:cd:53:
40:86:8d:1d:14:3e:20:44:6d:b8:82:9d:0a:4d:16:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:88:66:D0:8D:80:4C:8B:F8:7D:59:71:73:AC:DE:E6:EE:C7:6D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_hWIZtCNgEyL-H1ZcXOs3ubux20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.14.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:91:33:25:fb:b1:77:1b:b1:b2:63:33:0b:3e:6c:c6:b7:bf:
0c:d9:bf:12:89:e4:73:8b:a3:ab:21:31:1b:9a:54:d1:fe:1e:
66:97:a4:46:85:98:c3:c1:b3:81:1a:4c:4d:2e:3a:fb:aa:06:
43:4a:ed:31:04:21:51:5c:a0:cb:6a:ea:c8:b2:b5:11:c0:36:
39:67:10:2d:37:c1:a0:dc:41:4d:4f:aa:ce:18:80:a2:ca:a2:
0d:5b:c6:8d:64:6f:f9:85:0b:7e:d1:47:58:9e:e6:79:41:97:
e7:f4:93:72:da:ea:6b:58:49:51:8c:55:88:0f:e9:ab:df:ff:
b6:4f:aa:b3:79:91:f0:87:5b:be:04:11:91:1c:f2:f1:03:ca:
67:c2:1b:f7:7f:ef:5b:db:f7:aa:c6:df:9c:af:17:b1:f6:0f:
93:34:b1:ed:0a:49:15:34:65:f6:77:fd:c5:c3:c7:22:28:a8:
19:43:dd:a9:51:22:18:5e:fb:9a:44:f4:66:72:07:b4:ea:a5:
f0:ac:c7:a2:d5:82:5d:da:4e:e7:19:42:1d:1c:35:71:12:b8:
49:0a:03:16:e2:17:9f:1c:db:38:4f:4a:07:ec:f3:7f:57:c5:
c4:e2:e5:8f:8c:4e:89:87:d4:8a:83:68:18:6e:a6:07:80:3f:
8c:fd:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:38 2025 by rpki-client