Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/VSRXBhhauWxRUcP8zqvK0TZVOOU.roa
File: VSRXBhhauWxRUcP8zqvK0TZVOOU.roa (raw, json)
Hash identifier: cuESRYkq+KPAzEQp1VlaKdXRUKC2BaJsFrmLy2dLqmE=
Subject key identifier: 55:24:57:06:18:5A:B9:6C:51:51:C3:FC:CE:AB:CA:D1:36:55:38:E5
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0190A6AE3A33135CD3F4541B0C3DDD0818DB
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/VSRXBhhauWxRUcP8zqvK0TZVOOU.roa
Signing time: Fri 12 Jul 2024 11:22:34 +0000
ROA not before: Fri 12 Jul 2024 11:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 212.116.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:ae:3a:33:13:5c:d3:f4:54:1b:0c:3d:dd:08:18:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 12 11:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55245706185ab96c5151c3fcceabcad1365538e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:f1:5a:99:b5:ba:bb:96:ac:89:de:7e:43:
10:23:d4:b9:2c:c3:b8:e4:50:26:e2:e3:1f:66:de:
7a:41:08:88:f7:fa:38:6d:92:c7:43:58:79:ae:0e:
ee:35:84:cd:e3:38:3b:60:26:59:8e:70:95:eb:ae:
eb:1a:e7:5f:43:e1:f1:87:d5:b4:32:82:6a:be:d3:
4a:f7:e2:cb:48:f8:ca:10:f7:9e:e7:84:52:70:3d:
6c:95:89:17:f7:a7:37:42:5e:87:fc:dd:0f:e0:01:
60:fa:69:fc:eb:86:0b:25:f5:7e:1d:ab:9c:be:d0:
78:a3:15:13:42:aa:50:f4:c0:7b:ee:15:cd:e7:85:
4f:fd:e4:a4:31:1b:92:7c:a6:15:2b:42:ac:46:55:
50:6c:54:14:bc:bb:36:05:83:fc:be:1e:39:b8:dd:
78:6a:bd:a0:ad:82:38:78:6c:4b:20:77:9d:eb:36:
ec:6e:bb:38:d6:ea:f2:b4:39:21:4b:87:46:f8:ca:
ab:53:d1:cf:d4:b2:ea:cf:d7:c5:4c:18:06:60:42:
24:40:92:2f:6d:9a:ea:cb:16:74:13:d4:a9:55:2c:
64:c1:c4:35:46:5b:98:19:9a:e0:97:7b:8f:83:aa:
6b:d4:82:8b:0a:bb:c1:59:89:a8:c1:4a:90:07:18:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:57:06:18:5A:B9:6C:51:51:C3:FC:CE:AB:CA:D1:36:55:38:E5
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/VSRXBhhauWxRUcP8zqvK0TZVOOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:a5:13:14:5d:a4:93:66:bc:0b:3e:22:f3:0c:0e:44:32:ed:
81:15:eb:2d:9a:2b:d2:f1:b9:37:96:51:6e:a0:52:7f:ce:67:
9e:fa:96:01:6f:31:a7:80:d8:e7:07:2a:d5:94:0b:0a:b8:17:
d9:3f:5e:3f:8a:40:de:b2:16:18:7b:ef:30:ef:cf:6e:5b:a0:
b0:a1:33:ca:e4:69:32:05:57:b1:5e:c4:ec:99:c4:40:12:f6:
96:c3:28:ee:91:82:c1:aa:35:93:37:79:2d:80:e3:b3:b8:c2:
3e:56:d9:dc:4a:2f:c9:3a:b8:53:5f:5e:d6:b4:28:e9:de:63:
20:41:80:f3:09:5b:4e:0b:a3:6e:92:b0:a4:fa:ea:4f:d1:1d:
f4:26:4d:79:55:c3:f0:ad:0a:ae:9a:a1:9b:60:95:64:9b:ff:
34:e0:e1:99:70:58:be:cd:99:71:0d:84:5d:5b:e8:50:14:a0:
23:21:7b:de:5b:13:a5:6b:55:33:f8:bc:48:9c:1d:c0:9b:63:
cd:17:45:93:60:8c:86:78:db:a8:9f:bd:69:17:43:ba:f3:b2:
77:79:23:7a:07:59:71:31:3d:d5:2a:e8:d3:85:83:aa:0e:5f:
82:30:ab:83:45:57:84:97:76:b8:b5:e9:1c:b4:9b:cd:ac:e2:
79:a9:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:57 2025 by rpki-client