Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0E5pxjPKGty-7Utk-Pv9IA6sELQ.roa
File: 0E5pxjPKGty-7Utk-Pv9IA6sELQ.roa (raw, json)
Hash identifier: 2JTts0dA2azaMsKe10BDoH1iul7B6xVWw7BDZ6UrOqs=
Subject key identifier: D0:4E:69:C6:33:CA:1A:DC:BE:ED:4B:64:F8:FB:FD:20:0E:AC:10:B4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0195D2DFB083C67BB6C69965F51BAADD004F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0E5pxjPKGty-7Utk-Pv9IA6sELQ.roa
Signing time: Wed 26 Mar 2025 14:33:49 +0000
ROA not before: Wed 26 Mar 2025 14:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 212.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:df:b0:83:c6:7b:b6:c6:99:65:f5:1b:aa:dd:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 26 14:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d04e69c633ca1adcbeed4b64f8fbfd200eac10b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:b9:cb:33:fd:31:7f:fd:02:e6:95:1c:9b:
5f:17:f0:7d:6b:cd:52:af:68:e7:f2:39:7e:a3:15:
09:79:74:48:4a:df:6e:fa:b4:d1:87:66:8d:0e:70:
12:7c:74:de:6c:45:3f:68:88:54:33:c2:51:b0:70:
e1:aa:27:3d:57:05:72:1c:9d:e5:ff:72:80:ac:98:
62:84:5b:71:fb:2b:ee:e6:77:db:7a:f2:d9:b5:cb:
72:eb:6f:b3:f6:e6:d3:a7:b3:ef:20:e2:2d:d7:40:
b6:2b:d9:3c:7b:c4:10:31:16:c0:ca:ff:a8:ba:b0:
b2:a3:ad:24:f0:9f:bb:25:f2:4a:18:34:37:19:03:
48:33:66:b2:2d:7e:b2:a0:ba:aa:85:a6:fe:13:1f:
0a:99:66:00:e9:bb:9a:0c:22:af:e8:73:8e:de:0d:
8a:30:af:ec:03:cc:3e:3d:e9:fd:08:1a:08:d5:2e:
7e:e0:4f:6b:d5:c9:1f:b3:53:c0:a4:5a:da:dd:c8:
2b:56:35:92:08:53:9b:73:0a:59:f1:3b:0c:f5:a5:
6c:ca:2b:96:b9:8a:2c:9e:12:6c:46:1d:54:4c:33:
70:34:6c:c5:0e:14:ec:75:14:a4:72:98:8b:c6:49:
a6:a5:77:1e:84:c1:50:58:cc:01:af:d9:54:4a:fb:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:69:C6:33:CA:1A:DC:BE:ED:4B:64:F8:FB:FD:20:0E:AC:10:B4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0E5pxjPKGty-7Utk-Pv9IA6sELQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e9:9b:af:f8:52:a7:6f:8d:1d:92:46:a2:fa:3c:0a:24:bb:
46:bd:cb:e5:6d:8d:44:76:86:93:bb:cc:06:77:04:54:a1:d1:
5c:6a:da:c4:01:7f:b1:c1:d2:22:72:d6:83:75:21:6d:83:e4:
cf:c7:5d:55:e0:55:82:62:ae:de:28:86:86:09:4e:fc:86:07:
d5:45:33:23:0b:c7:99:9c:28:29:97:1d:15:5f:8e:2a:6d:fb:
10:d6:8d:9f:77:07:1a:a9:49:b0:12:40:1e:c5:81:9a:a1:1f:
de:50:92:2c:68:8d:e9:4c:0c:50:24:ae:e7:16:48:9a:55:c2:
38:f6:22:a1:89:27:16:47:6e:53:c9:05:27:24:ce:08:ef:3d:
2e:57:4b:4d:17:0f:20:a9:b6:6c:29:5b:c8:e5:de:ec:34:19:
c9:4f:78:83:5e:4d:3e:f8:f4:e2:4a:69:68:07:f5:03:dc:e0:
e3:9a:b6:a1:fe:02:0d:17:e3:3b:57:30:4b:c9:d8:b0:87:b6:
d9:4f:cf:28:c5:c3:24:94:f3:c1:23:04:e0:91:95:b5:86:58:
61:ac:65:ef:ec:63:25:bd:1e:e0:f1:b0:4e:2c:e7:90:c2:36:
21:89:74:9c:9b:05:c1:85:03:7c:bc:a8:22:86:c9:23:bd:10:
4b:15:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:10:21 2025 by rpki-client