Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/UBML9hd7vzxUuPEkDedeqa2KaEo.roa
File: UBML9hd7vzxUuPEkDedeqa2KaEo.roa (raw, json)
Hash identifier: Nfic4un9tYiu+hY8dCe6xNszqFVisz50quJXIVVdIGQ=
Subject key identifier: 50:13:0B:F6:17:7B:BF:3C:54:B8:F1:24:0D:E7:5E:A9:AD:8A:68:4A
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0190A6E6FD07D526A9B32B44F3B73F6CED68
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/UBML9hd7vzxUuPEkDedeqa2KaEo.roa
Signing time: Fri 12 Jul 2024 12:24:34 +0000
ROA not before: Fri 12 Jul 2024 12:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 212.116.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:e6:fd:07:d5:26:a9:b3:2b:44:f3:b7:3f:6c:ed:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 12 12:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50130bf6177bbf3c54b8f1240de75ea9ad8a684a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:d8:1c:82:52:ab:ba:d4:46:5c:06:de:a5:
65:95:a4:b8:b3:17:77:d9:93:b6:ee:10:9d:8b:29:
f7:25:fa:f3:da:64:66:20:b5:f8:c0:b2:49:09:64:
15:3e:b7:27:50:b8:d8:e2:2f:ab:a1:a0:59:d0:60:
48:7d:90:65:2b:bb:55:78:f9:a7:7b:66:a7:8b:8a:
36:0c:49:06:59:b7:e7:ed:d4:97:65:45:9a:df:b8:
2e:0c:77:9e:c0:1c:00:ca:56:c7:62:d5:75:0f:f9:
f8:89:9f:7f:33:78:31:c6:2d:3b:77:15:b0:48:0a:
01:33:96:14:ac:93:ad:82:d1:de:6e:10:96:1c:d5:
75:fb:29:17:48:9d:fc:a3:05:7e:13:d2:9e:07:9f:
d8:b8:e5:00:ab:18:44:13:88:49:08:8d:97:27:16:
96:cc:35:cc:63:e2:fd:f0:7f:16:24:e7:f4:e5:11:
3b:4e:1d:d2:2f:51:ab:0b:d7:64:11:af:98:de:4e:
90:df:73:71:2e:b4:ef:6a:16:bf:7d:ed:f0:cf:55:
80:97:c8:f3:b2:89:12:1b:ce:d8:4d:89:d9:9a:ca:
f9:84:d9:94:62:20:72:55:7f:ad:9d:2c:18:e4:6c:
9e:6b:d2:00:8a:64:f8:18:fa:1f:82:bf:b4:b1:17:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:13:0B:F6:17:7B:BF:3C:54:B8:F1:24:0D:E7:5E:A9:AD:8A:68:4A
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/UBML9hd7vzxUuPEkDedeqa2KaEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:0b:13:3b:d9:49:b1:4a:f4:4b:cc:d3:c7:a6:eb:9f:2c:f5:
85:02:11:6c:4c:57:3e:a2:e7:85:3b:df:f3:f7:71:82:bf:42:
47:d8:7d:d4:30:ac:69:37:b9:6f:1d:aa:f4:7a:24:14:49:30:
1f:b5:c3:94:71:7f:5e:12:22:5b:ce:2f:f7:da:54:dd:7b:e0:
85:fd:bb:18:45:40:1b:21:2c:a6:3f:37:82:b8:62:56:46:f8:
9c:56:60:1a:d2:5a:e6:c8:54:b9:c5:b4:51:7a:b9:cc:15:56:
d7:f3:d7:38:b5:b9:ea:dd:2e:42:31:ea:49:9f:c4:48:c3:7e:
82:07:a0:89:b2:ba:f2:8d:83:bf:ce:0d:4f:80:62:77:0e:bb:
df:2f:1d:1d:ab:ad:5b:0e:63:de:2f:79:bf:35:21:86:e6:fe:
37:37:74:01:08:f1:62:62:91:2c:da:e1:91:27:c3:01:4c:54:
3e:e3:1b:38:77:cf:49:63:fd:f0:b2:0f:22:ee:29:ff:f1:5f:
81:d5:a3:16:46:69:38:48:82:91:72:44:86:f8:99:c8:cc:d1:
10:5c:17:76:2d:41:32:81:14:23:c9:20:09:04:67:09:63:45:
3b:5f:82:99:40:56:a4:db:a8:9a:65:0e:df:7b:03:95:32:0f:
02:4d:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:42 2025 by rpki-client