Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa
File: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (raw, json)
Hash identifier: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=
Subject key identifier: 4A:FF:1C:EB:7C:4D:6A:16:67:11:45:FA:B3:19:19:4B:54:72:D8:CC
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 01942067DEE1803B4AB19C1CB27D0EA14838
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 212.127.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:de:e1:80:3b:4a:b1:9c:1c:b2:7d:0e:a1:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aff1ceb7c4d6a16671145fab319194b5472d8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:20:fe:f9:1f:ce:fe:51:22:8a:37:79:ea:
bd:df:79:df:24:68:16:ff:8c:99:97:93:0c:3a:b5:
72:de:ea:21:05:61:d0:1c:81:18:da:5c:f0:04:04:
47:34:db:89:d7:45:84:3b:5c:46:95:e3:9f:c4:f6:
a1:2e:9b:f1:20:4c:58:9a:07:fe:c1:01:5a:ae:2d:
35:40:d1:d1:2e:fe:5f:ec:e4:8a:44:b4:4e:2d:a7:
d5:88:2c:d3:58:e0:fc:fa:bf:cf:d2:eb:a0:e7:e9:
a2:31:10:2a:44:82:13:7c:6c:22:2e:50:0c:d3:2b:
d9:94:40:00:53:a4:89:ec:67:1d:81:44:2e:eb:c7:
e8:26:93:39:04:cb:99:c1:8c:50:16:14:0b:92:9a:
97:c5:23:6d:b6:09:69:28:45:d7:c8:e2:2d:03:0e:
88:98:52:2b:75:56:22:4c:b0:7a:61:9a:4a:74:03:
7b:96:96:7f:a0:74:85:a7:38:78:b9:64:72:a2:d9:
27:db:f2:d2:0f:76:c6:91:d1:67:52:5c:2a:58:5a:
05:1a:92:6e:64:b7:15:bc:db:71:ec:5f:17:25:14:
ec:b0:33:5a:1f:2b:bc:1d:17:f4:03:0f:42:e6:63:
ba:09:80:9e:5c:af:4c:97:42:fb:7e:98:a6:c0:c1:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:1C:EB:7C:4D:6A:16:67:11:45:FA:B3:19:19:4B:54:72:D8:CC
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.96.0/19
Signature Algorithm: sha256WithRSAEncryption
27:ff:2e:0c:e2:e7:6a:71:9b:d0:bd:25:8d:e9:19:61:1c:0f:
39:fe:d3:a0:0e:62:88:69:24:58:9f:ed:aa:0e:29:a8:b0:de:
3f:36:a5:a9:c0:1c:6e:9b:04:a0:6b:72:86:ae:29:c0:31:df:
3a:93:d2:63:c3:6d:3f:49:13:46:49:88:d7:ec:9a:cd:93:4f:
04:74:5d:ee:a9:dc:55:cd:18:2f:b5:44:a5:38:64:ae:67:1b:
02:b8:25:1f:ec:83:12:72:60:27:22:15:cc:6a:c3:e3:a7:6e:
26:1e:9f:73:36:71:ad:bf:7c:16:3e:4f:7c:df:54:37:33:88:
3c:7b:77:61:5c:88:11:b2:22:58:14:4c:52:81:50:2a:cb:6c:
e1:f0:98:8e:c4:18:26:18:3a:59:28:1b:2f:ce:17:ee:d3:dc:
c2:f8:fb:54:65:df:76:74:44:50:55:cc:cd:60:5a:c8:e2:63:
65:a5:99:f2:da:a9:81:7a:22:14:91:c3:c1:87:6e:3f:53:5c:
83:ca:85:16:53:f9:ee:f3:e3:5f:21:cd:f6:1e:d6:d2:e9:9d:
cd:ea:8e:51:43:72:57:3d:2b:38:69:20:a6:09:af:16:26:04:
07:6e:6d:86:87:37:c5:c4:43:37:7c:ec:b7:ec:db:4a:73:9d:
34:75:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:03:46 2025 by rpki-client