Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa
File: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (raw, json)
Hash identifier: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=
Subject key identifier: 20:78:6F:F3:F9:99:0F:1E:80:DA:3F:85:DF:53:DD:BB:49:3C:0A:B6
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01942522368BF582874AE07CBFDE151EBF77
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200178
IP address blocks: 212.126.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:36:8b:f5:82:87:4a:e0:7c:bf:de:15:1e:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20786ff3f9990f1e80da3f85df53ddbb493c0ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:89:0e:a2:0b:de:62:74:92:83:38:3b:da:63:
be:59:46:d6:a1:69:d6:1f:7c:9b:41:bf:e6:03:70:
c3:11:25:36:75:75:b9:ec:68:f6:34:60:d6:3c:83:
c0:f2:2f:35:a7:e3:b0:7c:de:8a:a5:ee:7a:b8:22:
c7:82:15:96:c0:7a:28:e9:f6:e2:5f:c8:19:39:01:
82:70:6d:26:d8:fc:f1:2f:8a:10:bf:5c:07:98:a6:
ce:3b:7e:87:c3:55:e9:1b:c1:d8:be:15:fb:28:e1:
83:90:5a:47:4b:f2:ee:2a:52:00:10:64:5e:7e:6c:
7f:cf:3b:b4:f3:40:7e:1b:7d:b5:f2:c1:3c:d6:fd:
09:9c:3e:3f:8d:94:98:05:04:f1:11:c8:f7:30:9e:
f8:2a:ab:bd:63:90:95:49:31:c2:33:d0:06:5c:f0:
f2:52:44:37:95:ee:ea:1b:00:65:7b:6c:95:25:a7:
79:ac:2a:d1:80:df:86:17:3b:8d:fd:40:ea:20:fc:
46:e2:f1:0b:71:10:f7:9f:c6:04:6d:69:fa:a7:70:
c5:eb:d8:5f:b7:40:f3:ad:ee:b4:2c:95:78:51:a1:
89:54:14:ce:89:44:5d:d6:67:54:04:62:36:47:69:
0d:5c:f6:ff:87:6e:1e:73:55:94:07:11:bc:13:ee:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:6F:F3:F9:99:0F:1E:80:DA:3F:85:DF:53:DD:BB:49:3C:0A:B6
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.112.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d3:82:0b:a9:77:18:d5:eb:6c:80:14:26:b6:da:c0:78:04:
1f:77:2f:7d:77:7d:12:35:07:9c:41:0e:d0:d7:e6:e7:f7:34:
3b:fa:39:4d:04:08:92:eb:3f:30:af:55:17:78:f0:e6:2f:55:
4f:5a:18:c6:e8:87:0d:20:74:38:64:2d:56:1e:10:a7:16:8b:
48:e6:37:cf:08:01:34:c8:c9:b1:f2:5b:64:b4:50:6b:8f:0b:
74:f1:f9:26:05:63:f0:ca:a2:39:6f:5c:a3:24:44:8b:eb:55:
c4:d6:66:ed:8c:e8:6b:ca:93:cc:5c:c7:b4:99:7d:cc:62:4b:
03:8a:f3:da:b4:b3:ae:84:63:fd:e1:19:7c:2b:8d:f2:a1:b5:
86:50:ca:ff:c6:67:21:0a:df:02:23:12:f0:f2:a7:77:c3:90:
8c:91:82:fb:45:bc:29:3e:0d:c5:1a:27:c5:c6:cc:28:8d:e1:
c0:d6:6b:c7:2c:41:63:c4:62:0f:82:aa:d0:25:bb:9f:ad:08:
ee:1a:ab:92:21:b8:fb:7b:7b:03:f2:2d:58:c7:27:2d:de:c1:
d1:3f:7b:71:fd:9a:90:85:31:fb:d0:cf:5d:f0:4a:e4:5e:ac:
65:cc:a2:6a:3d:e0:cd:9f:ef:fc:5f:a8:c6:70:75:0e:c9:79:
95:92:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:39:31 2025 by rpki-client