Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/L0c51cjfdUuOyDE9oQeYN7mlzyc.roa
File: L0c51cjfdUuOyDE9oQeYN7mlzyc.roa (raw, json)
Hash identifier: Olb4cm8KjPtA3YtAP/bSmQA7SKT5crXW+59oq0ZVqF0=
Subject key identifier: 2F:47:39:D5:C8:DF:75:4B:8E:C8:31:3D:A1:07:98:37:B9:A5:CF:27
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0190BC2D7743140BB5871A66FEACC8C35C7B
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/L0c51cjfdUuOyDE9oQeYN7mlzyc.roa
Signing time: Tue 16 Jul 2024 15:33:34 +0000
ROA not before: Tue 16 Jul 2024 15:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 212.116.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bc:2d:77:43:14:0b:b5:87:1a:66:fe:ac:c8:c3:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 16 15:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f4739d5c8df754b8ec8313da1079837b9a5cf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:a5:1a:39:e2:1e:46:4a:7d:af:23:44:c6:
05:47:15:61:df:3b:20:d6:93:c3:c4:8c:2a:3b:05:
d3:a3:c6:c1:16:d3:9c:68:ac:06:6a:9f:6c:98:67:
c6:de:0e:fe:da:7b:94:ae:cd:e6:eb:0c:68:de:bf:
7f:18:dd:8f:42:5d:d3:26:d5:1d:a1:a1:ee:bf:71:
fa:11:27:52:cd:24:2e:19:bb:9c:b6:11:5b:d4:de:
2e:16:98:9f:92:68:e1:75:de:a8:0b:d1:81:75:9a:
55:1f:ff:ee:25:c1:0d:d2:f7:f7:b8:8b:f9:5a:49:
ae:e4:d6:7b:79:6a:e0:6a:55:cc:76:76:04:50:df:
10:42:e3:aa:e3:72:27:2c:28:7b:5a:3d:7f:cc:b2:
8b:51:17:9e:84:13:c7:c0:72:2b:16:d5:16:54:67:
f3:cd:7b:c0:58:04:1d:41:06:ff:e4:05:df:9c:08:
55:3b:e3:a1:da:07:66:e9:2b:82:4c:00:67:89:3b:
e2:de:a3:42:48:89:a7:41:9a:0b:c5:b9:74:17:bd:
28:d9:73:21:95:d7:98:02:bd:5e:4f:ea:80:12:1b:
f5:e7:7c:40:c6:8e:85:2e:fe:6f:3f:14:6a:26:2e:
20:3f:24:13:3c:3a:21:b5:43:d5:ee:34:e6:dd:6b:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:39:D5:C8:DF:75:4B:8E:C8:31:3D:A1:07:98:37:B9:A5:CF:27
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/L0c51cjfdUuOyDE9oQeYN7mlzyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.240.0/24
Signature Algorithm: sha256WithRSAEncryption
75:33:09:d0:fd:a1:8f:aa:f1:59:c9:3b:b2:4b:e9:9f:93:b6:
30:cc:8c:0a:d8:3f:45:86:c5:ec:5d:0d:ce:42:0c:17:af:b8:
25:66:5f:f5:17:56:f6:0c:c7:da:f3:96:af:14:8b:b5:0d:35:
c3:f8:8f:d6:a7:2e:2f:eb:57:be:c4:e0:b8:85:f0:7a:17:f3:
cc:b4:0d:05:7c:f9:6c:44:0c:7b:2a:88:85:17:d2:17:30:4d:
31:13:79:87:6c:5f:c5:b1:fc:b8:1a:97:27:62:42:7c:93:9a:
78:78:f5:11:9e:b8:ff:20:68:2f:ff:d5:80:db:70:46:7d:f2:
c9:bb:e3:6b:f0:ee:ba:9b:3e:36:ff:79:83:de:a4:3a:be:dd:
b1:6c:5f:7e:c5:cd:c0:62:db:c4:8a:ec:17:a2:c6:57:f7:c4:
34:33:55:d4:31:b9:18:3a:0f:a3:02:8c:2a:df:79:3d:ae:76:
d7:a6:e5:ef:60:cd:7f:7c:96:08:3b:90:aa:ce:a2:f9:c2:de:
02:4c:5f:11:da:49:0d:e8:92:77:c1:98:80:7a:9d:a3:79:c9:
83:96:ed:60:c0:7e:85:cd:f3:d8:9d:65:94:ce:a1:37:ac:f8:
15:7c:05:0f:48:37:35:81:64:c3:3b:bd:39:5d:b4:e4:74:ca:
c8:46:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:03 2025 by rpki-client