Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/uCVMnpO-Hj65BfcslB9XiiT3OZY.roa
File: uCVMnpO-Hj65BfcslB9XiiT3OZY.roa (raw, json)
Hash identifier: PzR0lvTj8dj5lwGU9nUgqAiAna9BE8UjI95z0XyUDKE=
Subject key identifier: B8:25:4C:9E:93:BE:1E:3E:B9:05:F7:2C:94:1F:57:8A:24:F7:39:96
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 018D44A79BFEC0B7A8A950A2FB0BC8303A67
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/uCVMnpO-Hj65BfcslB9XiiT3OZY.roa
Signing time: Fri 26 Jan 2024 07:24:11 +0000
ROA not before: Fri 26 Jan 2024 07:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13250
IP address blocks: 212.117.192.0/19 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:a7:9b:fe:c0:b7:a8:a9:50:a2:fb:0b:c8:30:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jan 26 07:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8254c9e93be1e3eb905f72c941f578a24f73996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:6f:47:d0:d3:16:fe:b6:27:d7:42:59:03:
ea:31:60:04:aa:61:e0:99:41:c3:17:4c:cb:00:80:
c7:73:ad:67:c6:62:d8:db:a9:a9:e5:87:25:e0:77:
86:b5:45:49:66:cb:39:08:18:fa:68:f6:76:49:99:
5e:72:83:21:a6:f6:35:b0:8e:d7:fd:c5:8d:f1:77:
8f:74:35:a6:6e:2b:f6:4a:20:23:64:ca:28:36:f8:
33:4a:61:ad:09:21:74:ef:79:ac:47:9b:3d:12:2c:
f1:7c:a0:50:c5:a4:a2:b3:c1:34:5a:ab:fb:c9:9b:
9d:32:d9:68:b6:6c:f2:7f:b6:7e:0f:b9:6a:9e:5e:
b1:d2:68:80:af:69:fe:88:d6:1e:42:49:4b:d6:42:
d3:cd:c6:21:5a:2d:b6:9a:8e:be:43:e5:ee:39:80:
29:15:a5:94:1f:a1:5d:96:8a:ed:6c:67:0a:1d:43:
44:03:f3:31:47:ed:5d:27:4b:9d:cb:bf:b9:d2:e4:
5f:62:1a:9f:b3:b9:69:cf:95:35:ee:e7:56:31:a0:
45:aa:ef:a9:2c:0f:5e:5b:40:e4:cb:e8:41:32:a5:
f7:48:05:df:61:1b:ba:8d:71:c2:a8:86:7b:96:eb:
be:d7:e5:0e:b7:83:d4:7e:4f:53:69:8c:ad:27:0f:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:4C:9E:93:BE:1E:3E:B9:05:F7:2C:94:1F:57:8A:24:F7:39:96
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/uCVMnpO-Hj65BfcslB9XiiT3OZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.117.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:47:e6:81:76:c5:38:e9:28:46:b6:21:71:1d:02:b8:50:e9:
32:60:e5:d2:d1:15:e7:94:e9:02:0f:8a:9a:b3:50:a7:9b:6f:
69:94:15:20:40:50:de:d4:5b:6b:04:ec:da:2c:7a:a2:a6:e1:
85:cb:46:8e:b2:9a:c6:2c:f0:e1:de:ab:a4:cf:b3:b2:03:6a:
fd:9e:70:ed:fb:20:0c:96:af:cb:9a:91:b2:37:40:38:3a:e0:
df:91:dd:c0:93:34:09:e7:17:d2:6f:9a:84:9b:52:da:f4:1f:
c9:6b:90:ef:4e:30:8e:64:c7:e4:0f:56:42:b2:c1:1d:0a:43:
73:28:bd:3c:a7:c1:1b:45:87:bb:57:0f:9b:be:91:50:28:e1:
f6:55:89:55:a4:08:0d:3a:69:df:4c:a5:97:ec:24:1b:18:4a:
38:dd:64:5f:39:96:04:cc:c5:b9:4b:1c:41:0a:2f:1c:03:61:
62:39:6f:56:eb:09:9e:27:88:d8:9d:23:08:55:94:f1:79:be:
c9:59:79:1e:ae:1a:a7:32:70:1c:09:2a:06:58:3d:7b:76:4b:
df:f1:fb:37:d4:86:fe:9d:04:fd:8c:e1:c3:bf:dc:07:b9:66:
9a:7a:07:99:ad:d9:42:ec:30:68:a8:5b:e7:42:96:4e:f4:42:
c3:fc:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:02 2025 by rpki-client