Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLFJharwPrQMIKdRDdZ6OxB8HEY.roa
File: cLFJharwPrQMIKdRDdZ6OxB8HEY.roa (raw, json)
Hash identifier: 91AubIWBE6O36fM/eB9a87PE8NjFi5eRtQtiesTlp+g=
Subject key identifier: 70:B1:49:85:AA:F0:3E:B4:0C:20:A7:51:0D:D6:7A:3B:10:7C:1C:46
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0188E3AD2D0E7E389BBD32AFD35C13C6EE28
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLFJharwPrQMIKdRDdZ6OxB8HEY.roa
Signing time: Thu 22 Jun 2023 15:15:57 +0000
ROA not before: Thu 22 Jun 2023 15:15:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13830
IP address blocks: 212.116.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:ad:2d:0e:7e:38:9b:bd:32:af:d3:5c:13:c6:ee:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 22 15:15:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70b14985aaf03eb40c20a7510dd67a3b107c1c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:ef:2d:1a:5d:94:82:35:0a:f9:c7:52:13:
49:81:de:39:7f:92:46:8c:45:eb:1c:80:84:94:a2:
58:37:99:dc:ac:eb:38:54:6f:16:78:73:9f:dc:54:
12:6d:cc:92:fb:19:8a:77:04:3a:84:3b:35:bd:1e:
ae:17:28:6d:d1:8a:d6:ad:ee:06:e2:5f:4f:48:29:
29:8e:84:99:2d:60:c3:bd:ed:a3:65:27:47:04:8f:
a3:14:7f:00:79:76:b4:e7:ad:c3:92:d2:d0:09:17:
21:da:ff:8b:88:29:66:2b:43:c2:f8:88:31:a9:69:
0d:1a:ff:0e:c0:01:4c:b5:9a:b5:5e:a3:74:b5:6f:
23:ca:4a:c2:5f:1b:c5:34:35:81:bf:20:af:b4:30:
d2:4c:20:c8:15:bb:9b:6c:8b:51:bb:6d:27:8e:e2:
d5:56:bc:fa:5e:d6:5e:0e:4f:28:23:18:b9:ad:5c:
1a:f5:a9:5b:28:f2:8d:8d:9f:18:8b:8c:a8:cb:0a:
de:2e:aa:0f:54:92:b6:45:a6:89:07:e8:74:1c:8b:
97:4b:a0:f2:14:88:65:68:89:e8:60:c2:1b:4b:e1:
0d:96:23:51:da:a4:b8:9b:3c:1b:72:54:04:e5:94:
82:4e:eb:72:8d:c3:7a:0f:35:c2:6f:40:ba:2f:0c:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:49:85:AA:F0:3E:B4:0C:20:A7:51:0D:D6:7A:3B:10:7C:1C:46
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLFJharwPrQMIKdRDdZ6OxB8HEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:57:6f:f6:c9:ef:e7:0b:52:19:ff:0e:ae:2b:db:38:ad:87:
c3:ff:06:44:51:44:28:67:ae:fb:40:58:36:15:f7:a1:42:fc:
0e:d0:2d:42:d6:dd:55:1a:1d:26:21:1b:7f:1a:df:72:7e:d8:
17:76:35:b8:87:c4:80:16:c0:1d:c8:c6:21:c3:17:8b:8c:11:
f5:b5:a2:53:91:ea:5c:28:40:7c:60:60:f9:1c:0b:c0:28:ad:
12:1f:04:a9:ef:4e:c0:3b:10:93:05:2e:e7:a0:92:3e:66:3c:
ef:a6:29:cf:01:25:4a:33:b4:a4:05:c0:cf:1e:42:1a:cc:bb:
bd:70:7a:b7:47:0c:2c:6f:c2:9b:90:68:58:a1:4c:80:da:eb:
74:6f:e1:cd:a0:25:4e:12:0d:84:5f:fc:fc:b2:18:53:58:8e:
96:23:d5:c4:02:87:41:e2:f7:fa:3e:0c:8b:1d:0a:e4:4b:a2:
c8:b6:1a:ed:59:42:26:d6:ec:0f:83:f5:b3:f7:71:4e:33:14:
56:9a:95:b8:24:29:42:a2:5d:17:29:7a:03:5a:d3:93:9e:73:
d3:ed:76:66:9a:a8:1b:b6:2e:86:2e:93:ee:3c:02:c0:11:f2:
31:c2:cb:22:b9:65:86:56:25:81:79:1f:44:35:8e:2f:39:e6:
56:fa:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:09 2025 by rpki-client