Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/Xy34Y67fgH5fQjATePDptc_DR6w.roa
File: Xy34Y67fgH5fQjATePDptc_DR6w.roa (raw, json)
Hash identifier: Vu8OFOQot7n3so3z47mMDG3wFi72aJIyqq9C2RaYjHQ=
Subject key identifier: 5F:2D:F8:63:AE:DF:80:7E:5F:42:30:13:78:F0:E9:B5:CF:C3:47:AC
Certificate issuer: /CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Certificate serial: 018CC86FB9CF556CD5D53047167994D9D753
Authority key identifier: BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/Xy34Y67fgH5fQjATePDptc_DR6w.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.23.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b9:cf:55:6c:d5:d5:30:47:16:79:94:d9:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f2df863aedf807e5f42301378f0e9b5cfc347ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:dc:d8:c5:74:7d:b8:d7:3a:60:0e:b6:b1:
96:97:a3:52:dc:10:f6:e3:57:cd:62:7b:22:fe:a9:
f5:24:dc:10:5c:cc:26:9c:81:96:50:8d:78:81:26:
fd:0c:d0:96:aa:19:88:48:aa:4d:6b:3a:4a:d1:4e:
99:95:11:49:01:b5:00:7e:70:5c:bc:a1:94:0d:9f:
52:e3:b7:bc:ec:da:eb:7f:4d:2a:90:3b:1b:b1:f3:
25:86:f1:87:76:96:54:5d:81:53:01:ce:1e:e4:76:
e3:36:e1:15:74:aa:af:9f:3e:1c:18:b5:2b:fd:88:
85:2f:7d:b0:60:b5:5c:18:9f:64:6f:ed:9e:ed:c6:
6e:55:80:d4:88:30:7b:44:28:f7:d6:e5:40:36:54:
b6:21:3a:5a:0e:3a:33:46:be:99:5b:26:15:c2:ce:
17:bf:a2:9a:eb:e8:39:b6:31:7e:d8:51:af:16:da:
56:a1:7b:0f:c2:e0:0d:64:de:8c:76:13:cf:b8:07:
8f:4d:8e:ad:8b:0b:38:d2:75:70:4a:1a:9e:75:a6:
f3:3a:b3:2d:66:d1:43:25:12:bf:18:a6:86:0d:e0:
04:8a:64:8c:55:3d:6c:cf:c3:90:1d:01:9a:5e:48:
cb:72:48:ac:d6:6a:34:31:53:8b:b5:bc:ca:98:31:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2D:F8:63:AE:DF:80:7E:5F:42:30:13:78:F0:E9:B5:CF:C3:47:AC
X509v3 Authority Key Identifier:
keyid:BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/Xy34Y67fgH5fQjATePDptc_DR6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9e:df:88:9b:25:a3:a4:8b:3c:d5:bf:33:2e:85:5f:b8:fd:
1a:d1:2e:65:30:e3:61:cc:e0:26:02:48:be:c9:94:38:04:d8:
ba:d0:08:5f:2a:b8:27:02:7c:d0:8c:c0:55:59:a8:39:63:b4:
d1:46:ab:10:58:84:4d:81:b4:99:af:00:73:b7:e5:93:fa:83:
38:7f:04:d9:f5:1a:09:8f:1e:12:fe:9a:21:b9:41:71:dc:d1:
69:d9:29:fb:d8:b6:23:d3:98:d6:47:a4:fc:85:0b:ec:f7:6e:
3c:2d:60:fe:59:75:8d:66:74:ca:6c:b0:ec:98:22:7d:ce:16:
9f:40:d3:0d:aa:45:4c:1a:e1:95:17:c9:6e:75:62:dc:c5:7e:
a1:7a:55:0d:e0:11:48:e8:e0:b5:89:73:93:ca:53:d0:bd:6d:
46:6a:1b:39:a9:06:38:ed:b4:40:5f:7a:65:c1:21:20:f1:d0:
9b:87:03:8f:3a:3b:20:82:2e:3e:a0:a2:9e:47:74:4f:7c:1d:
4e:35:8d:ee:ff:9a:7e:8c:44:eb:2d:c3:10:bc:e8:f1:af:46:
42:ad:4a:b8:73:78:08:af:ac:0e:2b:a9:e3:eb:dc:6a:d4:98:
9c:32:ec:79:f8:c8:99:d1:92:88:e8:19:35:67:47:54:e9:89:
a3:a6:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:30 2025 by rpki-client