Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/pRN509rkNJcZfu3E0F_VTmGkPwE.roa
File: pRN509rkNJcZfu3E0F_VTmGkPwE.roa (raw, json)
Hash identifier: 4s3JnTCY7SYnGpiSBYZ+Yb1kz4Dn74qYPL7hN5U4U88=
Subject key identifier: A5:13:79:D3:DA:E4:34:97:19:7E:ED:C4:D0:5F:D5:4E:61:A4:3F:01
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01919C2A97BEF84E852DEBE2B715D4125DB2
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/pRN509rkNJcZfu3E0F_VTmGkPwE.roa
Signing time: Thu 29 Aug 2024 03:25:22 +0000
ROA not before: Thu 29 Aug 2024 03:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 212.116.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:2a:97:be:f8:4e:85:2d:eb:e2:b7:15:d4:12:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 29 03:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a51379d3dae43497197eedc4d05fd54e61a43f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:8b:49:67:3c:cd:c4:c9:38:6a:4a:d2:cd:
c3:46:f3:c9:24:8d:b2:20:41:08:7b:38:dc:8a:e2:
7e:37:17:d2:d8:e3:78:8e:8b:aa:bf:50:a0:c4:93:
2a:1c:59:d2:3b:9d:2b:47:ed:6d:11:0d:d3:28:3e:
23:d5:60:58:41:f5:f7:3a:06:3f:0c:db:e9:ac:df:
61:3d:f1:a6:3c:81:2f:74:f8:ba:de:91:2a:d5:8a:
dd:49:86:d6:f4:43:b5:b3:7d:f4:63:37:0d:09:fb:
d0:b4:6b:1a:25:ce:0e:2e:45:5f:2a:55:16:dc:ef:
99:f0:74:50:bb:77:3e:eb:6e:8f:5b:4f:f1:d4:dc:
b5:fc:0d:f2:f4:34:c2:81:d2:66:2c:cd:3f:34:89:
2f:57:f0:56:3e:ad:b0:f2:05:5e:e9:d8:0f:41:ab:
ec:5f:20:4a:9c:56:d6:f1:cd:45:0d:19:9b:1e:d0:
50:3c:61:6e:74:56:9d:03:61:5a:11:dc:96:b4:a2:
91:fe:4d:42:7d:2d:90:57:29:cc:e5:0d:48:04:fa:
93:07:45:8c:db:b5:45:ce:15:c1:7a:2e:16:22:95:
8c:18:94:b0:d3:7a:86:e1:49:7d:76:df:f2:90:e5:
9f:e4:7a:85:b7:e0:e8:7f:21:c6:87:6c:86:e9:b5:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:79:D3:DA:E4:34:97:19:7E:ED:C4:D0:5F:D5:4E:61:A4:3F:01
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/pRN509rkNJcZfu3E0F_VTmGkPwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:97:90:9a:f9:04:7e:16:ed:3c:5a:ae:9e:05:6b:04:39:8b:
09:0a:3c:c2:a9:52:6c:7f:14:3f:18:e6:34:d6:94:d7:a7:7b:
e3:fd:3d:e1:e4:7d:e9:93:ee:21:bf:1b:71:98:57:52:b2:d3:
13:66:d8:1b:c8:6c:ea:16:05:ba:d1:25:1b:54:bf:0d:b6:d8:
f1:1b:85:ce:80:c7:39:74:b4:6c:be:cf:fa:ac:32:50:b2:6d:
3c:0f:c4:f5:0e:db:50:aa:7a:8a:b5:2d:a1:f9:fa:ad:f6:4f:
97:ea:aa:50:da:b8:b5:eb:2d:ea:c2:4f:a8:ff:6a:e9:fa:7f:
b4:43:78:e3:40:85:72:70:0e:22:93:44:f6:24:18:14:1a:64:
ed:f5:87:71:70:e7:e6:87:30:78:4f:0f:23:14:2e:a7:aa:c7:
b2:f4:e1:d8:28:0d:2c:5b:cc:19:76:64:66:85:2b:90:67:29:
98:74:90:14:ff:85:26:fb:d1:75:db:c5:95:03:55:d8:ca:d8:
95:69:1e:cc:74:0c:ab:0b:ce:a3:eb:ac:d0:d3:d1:d8:a9:cc:
ca:9e:06:80:45:13:de:34:dc:03:30:90:2c:3f:33:b9:a2:c6:
56:0e:0e:39:28:ef:09:2f:40:cb:c3:b6:1a:fd:8d:03:d5:8c:
0e:b0:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:33 2025 by rpki-client