Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/c42aAt84R4GqjxActtqPzHClABY.roa
File: c42aAt84R4GqjxActtqPzHClABY.roa (raw, json)
Hash identifier: WbyCnl+hPpkSYVDdbDXQMOvATUdYeHPQBZlJSsSDV1o=
Subject key identifier: 73:8D:9A:02:DF:38:47:81:AA:8F:10:1C:B6:DA:8F:CC:70:A5:00:16
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019372D26139B92C9D9CB2C8E593C16AD8F3
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/c42aAt84R4GqjxActtqPzHClABY.roa
Signing time: Thu 28 Nov 2024 12:50:10 +0000
ROA not before: Thu 28 Nov 2024 12:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:d2:61:39:b9:2c:9d:9c:b2:c8:e5:93:c1:6a:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 28 12:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738d9a02df384781aa8f101cb6da8fcc70a50016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:27:a2:af:ba:50:b8:21:f0:b8:3c:2d:e8:
3c:c7:45:c3:a5:08:ff:f2:eb:06:b0:b6:75:f9:ef:
4f:59:8d:64:0f:02:10:d7:fa:a7:c4:85:53:62:0c:
44:04:40:d9:8c:6c:67:0e:46:66:b8:5e:a7:da:50:
36:e5:97:eb:b5:4a:7c:49:74:80:a4:2a:fe:64:d0:
83:6a:55:c4:cd:7c:02:cb:9d:c9:a3:07:f0:9b:e8:
29:a6:31:ed:13:81:36:5a:e9:45:54:98:8e:9f:f8:
a0:80:e9:83:13:11:09:6c:0f:98:6f:1a:47:a9:06:
80:58:e9:41:71:b6:c1:7d:e0:8e:7c:c7:b7:2a:38:
8d:43:f5:8c:02:5d:1c:4a:9a:e6:c3:34:94:42:dd:
dc:ab:3d:09:e5:7e:bb:21:53:be:e2:5b:c7:2c:7d:
38:67:46:44:23:4b:ea:dd:3f:c6:1a:18:db:24:75:
c1:74:d5:7d:d8:5a:b8:05:f7:cd:86:a4:88:49:a7:
21:55:0f:7c:3b:8c:df:a7:5c:36:c9:10:dc:be:38:
8e:ce:d6:fd:15:9d:59:56:12:93:cd:96:ad:11:c3:
d4:ce:8d:66:fb:5d:c7:66:1b:aa:61:27:63:8d:11:
2d:f4:f3:3b:0b:d3:e5:7e:46:21:5e:ee:31:c0:34:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:9A:02:DF:38:47:81:AA:8F:10:1C:B6:DA:8F:CC:70:A5:00:16
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/c42aAt84R4GqjxActtqPzHClABY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:8f:b7:ff:33:62:70:6e:91:0d:ba:d6:28:f5:a5:ef:02:0b:
1c:29:4a:c6:a0:89:73:ee:c4:dc:3b:c5:d1:ac:e0:47:ee:c9:
89:6e:d8:57:8d:d4:e2:4b:6e:92:81:6b:bd:e3:9f:01:84:9c:
e2:70:df:84:70:76:59:3a:14:ab:c2:e9:e3:79:88:3d:ef:43:
08:11:e3:30:67:0e:ba:43:b8:d6:03:eb:62:31:d2:ce:df:f6:
f6:32:92:48:d5:f2:3f:c7:d8:ad:b1:29:d9:0c:73:c6:99:9d:
cd:f0:d7:c9:0e:9e:83:c7:e8:21:1d:5b:21:9e:a9:09:42:e2:
e3:10:3e:80:0f:10:bb:35:30:51:46:9a:dd:ec:10:4c:43:de:
2f:e4:b5:2f:60:db:24:6f:14:c2:77:44:19:65:ff:5b:50:5a:
3f:71:08:09:59:20:9e:15:80:3b:1f:de:27:1f:25:73:1b:ae:
71:a2:d7:93:e5:08:00:40:a7:e8:63:01:56:d1:a1:ff:1b:7f:
58:e1:50:db:0a:0f:40:0f:4a:7f:0c:a5:34:8d:5f:1f:76:81:
98:59:51:2f:79:52:af:54:3a:3e:9b:89:c1:48:32:ca:c1:4a:
13:24:9f:f5:58:09:cd:2b:cd:b5:0f:2c:4d:7f:6b:ec:3b:18:
f6:46:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:25 2025 by rpki-client