Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa
File: wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa (raw, json)
Hash identifier: pKpy02tSACF4gXXOnC0pf4UqBhrOt1/BvJq4Baa5gaQ=
Subject key identifier: C0:55:6D:39:B2:4B:9F:F6:53:18:EC:F8:9B:72:8C:9D:10:98:0E:D5
Certificate issuer: /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial: 019424B31AC765DE917B1C8FD274831552F9
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa
Signing time: Thu 02 Jan 2025 01:48:25 +0000
ROA not before: Thu 02 Jan 2025 01:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151872
IP address blocks: 212.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:1a:c7:65:de:91:7b:1c:8f:d2:74:83:15:52:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92253353ba649debee927998ba02c8614399f961
Validity
Not Before: Jan 2 01:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0556d39b24b9ff65318ecf89b728c9d10980ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:f1:a9:4d:2e:8c:83:2c:6a:75:52:49:2b:
94:2a:ea:9b:e9:56:0f:0c:59:8a:87:70:7b:46:96:
3f:30:9d:3e:b9:31:de:c1:7a:28:4c:15:22:18:1b:
46:ed:af:e8:d6:3b:78:1c:6d:5e:30:61:30:cb:85:
d0:9b:9f:f3:ea:92:ba:05:ba:c0:5b:11:d0:62:87:
a0:17:3f:4b:8c:07:32:75:8f:c2:28:92:68:82:39:
a4:e8:83:ce:43:89:b0:bc:ec:68:cf:17:cb:2d:e6:
a6:16:4c:1e:93:56:ec:d5:59:a3:98:15:30:c8:a8:
2b:2d:e6:71:45:90:cf:ff:5c:10:4f:e3:7e:5e:68:
77:32:7e:d2:07:0f:71:51:aa:02:1f:f3:35:1d:de:
70:1d:82:ce:6f:ed:24:8c:36:38:bf:f1:79:2f:0e:
7e:42:f1:dc:e8:32:c9:25:f7:1a:b2:4a:f2:78:98:
f8:6c:93:67:31:b1:1b:5c:7f:42:ce:85:39:1d:f9:
a0:1f:fc:d7:ae:06:64:7a:21:0d:95:db:da:df:77:
74:5f:0f:37:37:79:8a:67:a3:33:d9:2a:32:62:19:
76:19:74:43:54:3d:57:61:de:ae:c2:b5:04:c7:39:
9d:9f:ca:4a:e5:d8:dd:ec:ac:4f:f5:4e:df:17:04:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:6D:39:B2:4B:9F:F6:53:18:EC:F8:9B:72:8C:9D:10:98:0E:D5
X509v3 Authority Key Identifier:
keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a0:0a:74:b0:a6:94:2a:60:61:78:ca:3b:67:48:8a:f2:cb:
6b:83:c7:dc:83:11:44:33:93:7e:c3:f8:7b:60:44:7c:4f:e9:
48:98:df:4a:d3:84:af:7d:8d:7d:47:f2:3f:ad:20:29:f0:aa:
a0:be:74:5c:0a:10:f9:ec:4f:ff:ea:ae:c9:78:2b:aa:38:77:
23:54:58:62:0b:eb:b3:99:70:93:ac:49:09:47:ce:2b:75:49:
ce:e9:47:1a:ca:27:f5:bf:56:98:3d:83:43:87:48:df:87:6d:
10:b1:8a:13:e5:db:58:8d:00:d7:68:18:b8:1f:aa:d1:b6:36:
63:54:49:60:a8:8b:b5:21:bd:5e:1c:e1:b3:e2:b1:e7:f8:94:
93:69:2e:a5:14:37:d3:c9:12:ac:07:32:02:3d:b0:cf:77:37:
06:49:61:0a:07:06:5d:ff:65:8f:ab:c2:e2:8a:05:82:5c:09:
6a:69:b6:0d:63:63:89:dc:a6:63:af:a2:d7:1a:a7:8e:65:c7:
2f:af:c4:79:65:2d:86:66:33:94:c3:c8:98:35:40:0f:3c:de:
19:1c:0a:f8:b2:61:93:1c:6e:17:39:86:0d:84:73:79:f6:26:
a3:ff:61:4a:13:99:01:18:21:28:e2:49:9c:a7:69:9c:42:a1:
81:6b:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:47 2025 by rpki-client