Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_dz7AKmXRK_6Sj1SlTp-QY8gURY.roa
File: _dz7AKmXRK_6Sj1SlTp-QY8gURY.roa (raw, json)
Hash identifier: ZIW2+49VJVHdvjUozJJaCsrOB6qQ9o5tTcb6674TBb0=
Subject key identifier: FD:DC:FB:00:A9:97:44:AF:FA:4A:3D:52:95:3A:7E:41:8F:20:51:16
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0183CA1E71F2895707E9A24BEB7B7CFF696D
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_dz7AKmXRK_6Sj1SlTp-QY8gURY.roa
Signing time: Wed 12 Oct 2022 02:55:36 +0000
ROA not before: Wed 12 Oct 2022 02:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 212.116.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ca:1e:71:f2:89:57:07:e9:a2:4b:eb:7b:7c:ff:69:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 12 02:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fddcfb00a99744affa4a3d52953a7e418f205116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:76:27:f4:75:83:9c:bb:79:0e:8a:9e:9f:
a7:f4:73:f1:6b:f8:e4:30:46:83:f7:a9:02:d9:71:
93:d2:b5:6a:fd:85:35:fa:ed:e0:05:24:e9:1e:b9:
d4:72:b2:e7:0a:30:7a:62:21:06:87:34:60:f6:df:
32:3b:9d:61:f1:1c:16:9e:7a:2d:fb:4c:73:a6:cf:
86:ac:55:07:37:6b:65:51:65:36:93:b0:fd:b5:8a:
fa:e9:99:97:b0:f7:38:b5:0e:26:97:cb:75:aa:5c:
07:70:4e:ac:69:d6:3a:0d:9e:24:c0:0b:ff:6e:e6:
6d:cd:88:ed:c0:ec:73:f6:04:6e:bd:41:bb:d1:9c:
b4:8e:bb:c2:98:42:84:44:e7:00:ff:15:cb:e3:7c:
65:20:04:46:ef:ce:c7:c5:e6:dc:98:e1:af:94:8d:
7b:f8:b1:f2:48:1c:70:24:72:8c:8d:61:de:1e:1b:
ce:a4:c6:20:8f:c7:89:ad:14:d7:49:99:c2:f0:cf:
15:f3:8c:24:3e:0f:ec:04:37:a0:6a:a5:ee:82:4e:
3f:4d:50:2b:7b:34:64:c4:df:92:cf:5d:e7:32:31:
a3:78:01:b3:48:3d:eb:55:cc:77:30:2a:46:d8:f2:
1b:85:0d:27:d3:0f:8a:42:4c:f5:aa:cf:76:ce:20:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:FB:00:A9:97:44:AF:FA:4A:3D:52:95:3A:7E:41:8F:20:51:16
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_dz7AKmXRK_6Sj1SlTp-QY8gURY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b1:40:32:b9:40:1b:24:a2:9f:99:1c:07:95:1d:60:30:f2:
cc:7d:b8:8b:da:5b:29:d7:49:5d:45:53:81:50:fa:1e:91:c1:
0d:bb:d0:4e:3f:52:f8:e8:c6:ce:a1:3d:17:c7:f0:1c:53:97:
99:b0:3f:97:34:9e:5d:1e:db:fe:e3:ff:1e:33:41:8c:78:e1:
75:4f:2d:e8:c1:02:bb:e2:59:02:f6:f3:ec:b2:e5:44:f8:88:
fc:88:8d:ad:be:9d:01:cd:4d:6a:96:2f:c8:91:c2:1e:c5:73:
4b:ef:4a:92:86:f0:cf:27:7d:62:7c:03:9a:84:c5:c0:8f:76:
b2:01:64:49:79:45:01:75:ac:e9:ff:45:f9:95:9a:45:2f:8b:
bf:7d:0d:fa:7b:8d:1a:f1:49:56:e2:78:f4:83:95:b0:1b:a0:
e4:f4:f8:fe:49:1a:71:62:a9:76:3c:4e:d2:7e:38:15:61:2d:
c3:4d:74:b3:6e:6c:a4:74:18:af:29:58:6b:b5:34:d3:7b:51:
9c:71:bd:0c:5a:78:b1:5c:cb:a9:43:71:ba:f0:79:eb:4f:fd:
90:14:f5:c7:bd:9f:23:2e:35:65:12:7b:de:c4:bd:d9:20:9e:
86:1d:e4:71:d6:64:e9:8f:43:12:97:5d:0b:8d:f5:c8:aa:24:
7e:ed:ab:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPKHnHyiVcH6aJL63t8/2ltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjIxMDEyMDI1NTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGRjZmIwMGE5OTc0NGFmZmE0YTNkNTI5NTNhN2U0MThmMjA1MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/t2J/R1g5y7eQ6Knp+n9HPxa/jk
MEaD96kC2XGT0rVq/YU1+u3gBSTpHrnUcrLnCjB6YiEGhzRg9t8yO51h8RwWnnot
+0xzps+GrFUHN2tlUWU2k7D9tYr66ZmXsPc4tQ4ml8t1qlwHcE6sadY6DZ4kwAv/
buZtzYjtwOxz9gRuvUG70Zy0jrvCmEKEROcA/xXL43xlIARG787HxebcmOGvlI17
+LHySBxwJHKMjWHeHhvOpMYgj8eJrRTXSZnC8M8V84wkPg/sBDegaqXugk4/TVAr
ezRkxN+Sz13nMjGjeAGzSD3rVcx3MCpG2PIbhQ0n0w+KQkz1qs92ziD1TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3c+wCpl0Sv+ko9UpU6fkGPIFEWMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvX2R6N0FLbVhSS182U2oxU2xUcC1RWThnVVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HT4MA0G
CSqGSIb3DQEBCwUAA4IBAQA2sUAyuUAbJKKfmRwHlR1gMPLMfbiL2lsp10ldRVOB
UPoekcENu9BOP1L46MbOoT0Xx/AcU5eZsD+XNJ5dHtv+4/8eM0GMeOF1Ty3owQK7
4lkC9vPssuVE+Ij8iI2tvp0BzU1qli/IkcIexXNL70qShvDPJ31ifAOahMXAj3ay
AWRJeUUBdazp/0X5lZpFL4u/fQ36e40a8UlW4nj0g5WwG6Dk9Pj+SRpxYql2PE7S
fjgVYS3DTXSzbmykdBivKVhrtTTTe1Gccb0MWnixXMupQ3G68HnrT/2QFPXHvZ8j
LjVlEnvexL3ZIJ6GHeRx1mTpj0MSl10LjfXIqiR+7avd
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:10 2025 by rpki-client