Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/u89KnzApRWyGhcPTLdgZ7ML8tNU.roa
File: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (raw, json)
Hash identifier: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=
Subject key identifier: BB:CF:4A:9F:30:29:45:6C:86:85:C3:D3:2D:D8:19:EC:C2:FC:B4:D5
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8B10ACFB2C55EF837A6BBF27ECB7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/u89KnzApRWyGhcPTLdgZ7ML8tNU.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212343
IP address blocks: 212.111.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:10:ac:fb:2c:55:ef:83:7a:6b:bf:27:ec:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbcf4a9f3029456c8685c3d32dd819ecc2fcb4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:ff:a2:fb:e9:18:03:87:7e:1f:02:c3:43:
70:f5:be:24:12:fe:48:ed:fc:9d:97:b9:1a:5a:e7:
c0:d5:49:ad:6f:a9:47:40:10:8f:94:07:dc:d4:82:
34:18:f4:2c:0b:a9:95:c1:e1:5a:2b:54:2f:53:8c:
57:29:6e:2d:4f:b0:1d:45:5d:73:f8:dd:05:25:4e:
fa:f3:77:56:a4:e0:e9:35:af:f7:c2:33:cd:fd:3e:
2e:4d:60:00:b6:c7:99:fa:d1:3c:37:4a:1d:f5:6e:
cc:e0:ee:d8:1f:99:cc:a5:6c:79:ea:68:83:76:62:
36:3f:37:49:81:8a:62:1b:b5:9c:4e:09:b7:c2:8c:
0b:4f:80:00:9e:ff:91:96:0b:95:24:87:9e:98:a3:
8e:00:f9:b8:01:13:6d:46:82:b8:df:9b:da:a2:62:
c2:da:00:df:ac:1c:3e:30:cb:c7:ec:88:ca:f8:83:
eb:4b:67:da:30:3b:4e:71:b5:26:72:2e:78:2a:f8:
6b:68:07:01:11:a8:57:7c:f9:a7:73:11:f4:d9:c3:
b0:ab:bf:7b:52:6c:0c:1b:3e:f0:60:21:e6:88:0b:
ae:d1:ba:72:09:a8:a3:46:91:bc:e8:3c:ae:ee:e5:
8f:35:ee:68:8b:83:52:34:64:6c:4f:68:ae:ad:ae:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:4A:9F:30:29:45:6C:86:85:C3:D3:2D:D8:19:EC:C2:FC:B4:D5
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/u89KnzApRWyGhcPTLdgZ7ML8tNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.204.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f2:05:30:cf:2a:bc:e9:84:06:e0:8e:e6:c3:e0:65:a1:22:
36:58:37:ee:79:88:89:fc:9d:b1:f9:98:7b:a8:b0:18:eb:c1:
48:96:e9:a4:1a:1c:eb:3a:c2:1b:45:81:0a:5c:8e:8f:2a:dc:
e4:8c:2a:90:e2:b3:7d:49:a0:a2:3b:72:21:ba:1e:33:32:27:
75:89:9d:28:4b:49:b0:f0:13:47:8a:b4:11:b5:5c:8c:23:4d:
b2:cb:08:8a:c2:3d:29:2b:51:59:93:fd:3e:97:59:7d:41:32:
86:9b:ef:12:e7:9c:77:a9:85:cd:ef:c9:c2:45:01:96:6f:b9:
0b:7c:6b:5f:54:7e:ee:44:a7:4d:29:d5:3c:29:91:d7:3e:91:
a0:90:13:6f:f2:e8:9a:04:85:35:2c:57:18:43:74:11:31:6c:
a7:94:c2:77:6a:82:95:51:2d:c1:7d:eb:f9:47:3e:d8:10:64:
0a:a9:03:1d:3b:ef:70:68:74:a9:42:1b:7e:36:85:04:ea:4f:
02:9a:64:70:22:14:f4:af:20:c9:4a:b4:de:3d:14:02:8e:c1:
3f:bd:ef:4c:f7:5b:01:9e:80:fc:c0:02:fc:e4:f5:7b:73:a6:
5a:8a:a9:f1:b5:58:14:8a:d0:c8:f2:0a:20:22:08:17:7d:e4:
cf:d9:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:59 2025 by rpki-client