Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fAvwb98RJNbypSYhT1In6qklQfI.roa
File: fAvwb98RJNbypSYhT1In6qklQfI.roa (raw, json)
Hash identifier: CqLbyiVkY1rCzOIUenJfSmIn5afTXx0AWNnEe3vNPx4=
Subject key identifier: 7C:0B:F0:6F:DF:11:24:D6:F2:A5:26:21:4F:52:27:EA:A9:25:41:F2
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0193643DC5B50778EECB4A5D1F852D723A91
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fAvwb98RJNbypSYhT1In6qklQfI.roa
Signing time: Mon 25 Nov 2024 16:53:09 +0000
ROA not before: Mon 25 Nov 2024 16:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:3d:c5:b5:07:78:ee:cb:4a:5d:1f:85:2d:72:3a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 25 16:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c0bf06fdf1124d6f2a526214f5227eaa92541f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:d8:d5:8f:78:bf:2b:f4:53:e8:b8:fa:e5:
7e:1e:8e:de:08:96:da:c5:80:40:c9:26:f8:53:fd:
ef:5c:0e:2b:13:55:1b:67:4a:87:af:92:32:ce:4e:
ea:6e:35:c3:79:b2:0a:5d:90:46:c2:6d:42:7a:cb:
ab:19:49:d5:b4:7b:b9:54:06:aa:71:fe:a4:8c:a0:
19:2f:61:21:fe:55:ce:45:55:bc:83:80:e0:14:a0:
6e:18:d5:20:35:de:22:cb:0b:e6:f7:66:e1:37:19:
88:21:cd:26:1e:c7:38:9a:81:09:47:83:d9:44:26:
cc:f4:63:cc:36:09:ad:09:1c:47:25:3d:7b:65:4e:
e1:b8:24:3b:3b:56:5e:51:74:84:23:26:70:c7:87:
91:19:90:6f:e2:86:ab:4c:62:4e:31:7b:1d:f6:66:
41:5d:67:73:bb:8c:89:b5:8e:9d:cc:57:27:19:2b:
12:4b:74:40:e6:c8:7c:cf:22:fe:3e:70:50:20:48:
ca:ca:29:b7:53:2c:cc:05:2c:84:f6:87:00:ba:11:
bc:a9:6b:64:f8:30:62:96:a9:1d:02:a8:cf:d2:05:
97:ec:06:d7:b5:41:2c:bc:a9:e4:fd:9b:65:27:e3:
0d:18:b4:9b:c0:da:52:6f:5b:b9:e7:23:33:48:ec:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:F0:6F:DF:11:24:D6:F2:A5:26:21:4F:52:27:EA:A9:25:41:F2
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fAvwb98RJNbypSYhT1In6qklQfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
57:29:7b:14:3b:85:7d:2f:41:76:a8:8d:77:c5:12:f0:10:b7:
4a:88:cb:55:68:6d:c1:f6:c5:8e:7b:ab:97:5e:b3:6b:a3:d1:
66:eb:77:b9:c2:86:8e:6b:3a:f1:5b:0f:56:3a:d1:7d:95:e5:
ac:39:cf:a4:d0:a5:19:18:33:72:0a:07:9d:a4:99:70:b7:cf:
76:1b:f9:ea:cb:13:34:3c:bb:a8:50:6d:df:a4:ed:4f:c2:cb:
e5:91:7c:29:48:60:1c:81:c3:bb:bc:f0:45:f0:42:4f:cf:6b:
e6:2d:02:e6:06:a3:6c:7c:20:7d:76:dc:42:00:84:26:09:94:
63:4d:0b:57:bc:17:82:2f:52:b1:4a:e0:e0:99:04:85:dc:3c:
4a:32:7a:d1:56:19:ec:a2:5b:93:41:b1:d1:6a:e6:6d:2f:2c:
fb:2a:fd:62:17:db:f7:45:60:3f:c8:e0:f8:d1:33:38:ce:5f:
ed:22:d8:16:2d:70:a8:bb:4d:1c:21:8c:9b:52:78:60:7a:17:
74:7b:25:15:f7:9b:6e:51:7a:de:c9:4a:6f:0a:6e:b2:0d:80:
15:63:de:92:81:23:30:22:5c:6d:36:01:88:4b:95:e7:24:1d:
e9:e5:2e:8b:a2:36:44:74:56:24:67:03:45:a3:40:27:ad:27:
7e:59:a7:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNkPcW1B3juy0pdH4UtcjqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjQxMTI1MTY1MzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzBiZjA2ZmRmMTEyNGQ2ZjJhNTI2MjE0ZjUyMjdlYWE5MjU0MWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QDY1Y94vyv0U+i4+uV+Ho7eCJba
xYBAySb4U/3vXA4rE1UbZ0qHr5Iyzk7qbjXDebIKXZBGwm1CesurGUnVtHu5VAaq
cf6kjKAZL2Eh/lXORVW8g4DgFKBuGNUgNd4iywvm92bhNxmIIc0mHsc4moEJR4PZ
RCbM9GPMNgmtCRxHJT17ZU7huCQ7O1ZeUXSEIyZwx4eRGZBv4oarTGJOMXsd9mZB
XWdzu4yJtY6dzFcnGSsSS3RA5sh8zyL+PnBQIEjKyim3UyzMBSyE9ocAuhG8qWtk
+DBilqkdAqjP0gWX7AbXtUEsvKnk/ZtlJ+MNGLSbwNpSb1u55yMzSOxxWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwL8G/fESTW8qUmIU9SJ+qpJUHyMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvZkF2d2I5OFJKTmJ5cFNZaFQxSW42cWtsUWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HTiMA0G
CSqGSIb3DQEBCwUAA4IBAQBXKXsUO4V9L0F2qI13xRLwELdKiMtVaG3B9sWOe6uX
XrNro9Fm63e5woaOazrxWw9WOtF9leWsOc+k0KUZGDNyCgedpJlwt892G/nqyxM0
PLuoUG3fpO1PwsvlkXwpSGAcgcO7vPBF8EJPz2vmLQLmBqNsfCB9dtxCAIQmCZRj
TQtXvBeCL1KxSuDgmQSF3DxKMnrRVhnsoluTQbHRauZtLyz7Kv1iF9v3RWA/yOD4
0TM4zl/tItgWLXCou00cIYybUnhgehd0eyUV95tuUXreyUpvCm6yDYAVY96SgSMw
IlxtNgGIS5XnJB3p5S6LojZEdFYkZwNFo0AnrSd+WafQ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:50 2025 by rpki-client