Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/k-gdTRyeUzkaGzSAKABZ4BocnOA.roa
File: k-gdTRyeUzkaGzSAKABZ4BocnOA.roa (raw, json)
Hash identifier: i7HvBIsBUySFL4mlSYQJaz9Yymmjc6Yu1csPIGyNyHw=
Subject key identifier: 93:E8:1D:4D:1C:9E:53:39:1A:1B:34:80:28:00:59:E0:1A:1C:9C:E0
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 018C2EC91E91A364FED5D24FE82E3C4DA3D2
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/k-gdTRyeUzkaGzSAKABZ4BocnOA.roa
Signing time: Sun 03 Dec 2023 08:26:21 +0000
ROA not before: Sun 03 Dec 2023 08:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201749
IP address blocks: 212.126.115.0/24 maxlen: 24
2a04:2dc0:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:c9:1e:91:a3:64:fe:d5:d2:4f:e8:2e:3c:4d:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Dec 3 08:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93e81d4d1c9e53391a1b3480280059e01a1c9ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:0b:9d:ba:e9:e4:f1:11:47:95:d5:35:7a:
c2:d8:ff:28:45:85:6b:c7:9e:80:48:f2:e4:c1:2c:
05:ed:4d:55:d3:b3:14:4d:94:1b:60:06:30:83:d5:
c9:00:2f:0b:05:e0:62:c4:07:3b:6e:ee:13:ba:5f:
0d:52:29:ae:87:a0:00:78:b8:f6:39:fa:a3:c6:33:
8a:92:73:d8:1d:f8:c7:1b:15:1c:79:4a:5f:af:50:
3c:81:01:13:94:38:5a:2c:0b:b6:f1:8b:88:50:a2:
08:2f:58:23:de:d2:9a:87:37:6d:8f:24:ab:d2:fb:
65:67:6f:2c:3c:6b:3f:84:40:f2:f7:aa:89:a4:a4:
7f:66:7f:cb:cb:16:0b:68:10:20:d6:f5:e5:f0:bb:
54:5d:8b:c5:fb:62:b5:41:91:fb:97:05:c5:ba:8b:
4c:7d:de:fc:e3:f9:e1:0c:78:40:2b:ba:e4:be:2f:
7b:f9:55:14:11:ab:e9:25:ed:df:1b:51:30:8b:f7:
6e:66:3c:bd:c9:80:ad:05:66:4f:1d:3a:c0:10:de:
f8:50:79:4f:ea:db:bf:47:9e:c9:78:dd:ba:99:e4:
06:58:5e:b5:33:02:5a:95:24:73:17:55:45:89:21:
92:3d:7b:0f:a2:d3:90:04:d1:09:06:28:f1:9f:9a:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E8:1D:4D:1C:9E:53:39:1A:1B:34:80:28:00:59:E0:1A:1C:9C:E0
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/k-gdTRyeUzkaGzSAKABZ4BocnOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.115.0/24
IPv6:
2a04:2dc0:18::/48
Signature Algorithm: sha256WithRSAEncryption
96:ba:27:83:f8:83:46:f8:3d:bb:0c:f6:76:6a:9b:87:95:fd:
d6:51:55:77:a9:0b:b6:a0:87:d2:42:96:1e:83:73:2f:d9:a0:
8c:80:52:90:0d:42:4d:79:73:b4:55:f8:22:dd:52:5e:f4:6a:
25:9d:78:93:e8:6b:50:cc:7d:11:59:a0:23:79:5e:56:a1:e5:
17:73:39:e3:3c:72:6c:54:51:5b:58:68:48:ee:89:c1:7c:3e:
9e:4d:75:42:ef:4a:fb:5a:d3:fc:49:f1:c6:13:48:5c:b2:18:
56:5f:63:e4:c4:e6:a1:cc:4e:47:2b:db:bf:e2:78:a5:d6:19:
98:68:35:36:f8:3a:da:f5:40:7b:ac:a1:60:48:4f:41:c4:58:
01:38:50:65:e2:b8:a0:00:d2:74:1d:8b:28:1c:1c:af:76:8c:
70:8a:46:1e:1c:fa:5b:71:bc:2f:4d:d4:a1:d5:cf:3c:cc:a2:
36:49:ee:50:dc:69:d7:f1:da:f7:5e:24:85:33:e3:4b:08:2c:
b8:d1:fd:da:40:f9:2a:6e:95:38:c2:5d:66:d7:51:40:79:8d:
55:1a:26:c7:1a:31:f1:fb:d0:0b:d2:8b:65:02:4e:e8:c4:f9:
e9:ce:b3:b1:5e:11:6a:81:80:cc:b2:55:61:eb:27:a0:4c:47:
e8:61:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:15:25 2025 by rpki-client