Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/0tgEYA-NcmjkAW1-Sv7Ijgkt9Ao.roa
File: 0tgEYA-NcmjkAW1-Sv7Ijgkt9Ao.roa (raw, json)
Hash identifier: oy/IB6vkFwF0cZ/2NL8lhieEW2KeLjiJJ+RRaj0ucCE=
Subject key identifier: D2:D8:04:60:0F:8D:72:68:E4:01:6D:7E:4A:FE:C8:8E:09:2D:F4:0A
Certificate issuer: /CN=c03297625f85d5dc18f04cb7b3ed528c760d95de
Certificate serial: 4EA46B
Authority key identifier: C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/0tgEYA-NcmjkAW1-Sv7Ijgkt9Ao.roa
Signing time: Sat 01 Jan 2022 02:52:55 +0000
ROA not before: Sat 01 Jan 2022 02:52:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211166
IP address blocks: 212.23.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5153899 (0x4ea46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03297625f85d5dc18f04cb7b3ed528c760d95de
Validity
Not Before: Jan 1 02:52:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2d804600f8d7268e4016d7e4afec88e092df40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:9d:96:14:0b:c4:48:dc:4f:c4:ae:5e:2d:
6c:60:8f:09:e3:09:02:ee:1c:0e:42:36:4f:c8:af:
06:6a:15:b8:fd:ac:a8:6a:88:a5:19:90:1b:40:aa:
c4:eb:26:63:b8:cd:bc:f8:8e:4c:39:27:56:94:ba:
c7:ba:55:d7:84:54:69:85:32:0c:50:27:83:c9:d9:
c4:0e:c4:d6:58:3f:e3:59:ee:b3:4f:ac:4b:d4:25:
8e:8d:aa:00:23:bb:92:30:df:e8:a2:0a:32:e4:36:
0b:df:61:26:4f:70:b8:37:4b:9e:f5:9e:62:0d:f4:
0b:c8:fa:25:95:33:3d:6e:45:57:84:d7:8b:7c:32:
70:18:ac:a3:90:0d:64:98:40:24:84:9d:9b:d1:d9:
db:24:ef:95:1f:93:29:5f:4a:68:ed:53:62:82:ab:
ad:5f:1b:b3:0c:86:84:4e:e6:74:91:6a:07:76:52:
1e:9f:2d:6b:9f:4e:c6:b1:cf:38:9a:9e:bf:cd:0e:
f7:31:f8:61:a4:6c:9d:20:57:22:e9:5d:21:62:97:
39:f4:1f:cd:d6:6e:91:19:e7:17:1e:28:a1:b3:5b:
cf:ea:8a:56:34:38:aa:51:c3:10:3b:8f:50:cc:c5:
19:27:57:ad:15:e6:59:6b:05:32:4e:20:c3:7d:b0:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:04:60:0F:8D:72:68:E4:01:6D:7E:4A:FE:C8:8E:09:2D:F4:0A
X509v3 Authority Key Identifier:
keyid:C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/0tgEYA-NcmjkAW1-Sv7Ijgkt9Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.204.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f5:eb:3a:eb:cb:8a:2a:50:88:5e:e9:6a:62:7a:a3:81:95:
c8:ed:3d:21:e0:d4:ec:d4:12:fc:55:f7:5a:4a:d3:5e:ad:56:
76:85:f8:8a:36:7e:70:19:0f:b5:ac:2d:cf:e2:d8:b9:76:2e:
73:87:b2:47:49:c1:52:cf:cf:72:aa:05:1d:1a:ae:eb:f3:23:
47:f3:07:2a:47:dc:db:22:68:f4:33:db:4f:51:39:e9:de:fe:
54:47:4f:0d:74:0a:c1:91:34:c4:fb:62:ae:51:35:a6:46:7e:
aa:e6:e5:50:43:5f:93:35:a6:8c:79:2d:9b:3e:aa:0b:38:fb:
b3:a7:ed:7a:65:b2:44:8e:26:13:5f:da:ad:4e:d2:c5:f3:8b:
e4:30:e6:91:ec:3f:d8:bb:4f:a9:05:ad:02:cd:a5:6c:b5:c6:
f1:17:2f:3d:8a:6e:dc:c3:f4:42:e2:90:4e:e4:ab:cd:15:f7:
54:cc:62:89:2c:5b:55:af:e9:84:51:b9:13:3a:d2:ad:07:79:
66:a2:2b:87:8e:69:96:ef:e4:67:0a:12:7f:9f:b7:ac:f0:bd:
21:cb:f4:ce:e5:b0:f8:62:5e:63:80:4c:d3:e3:4e:70:6e:9a:
84:43:bf:de:66:29:a7:17:a8:02:9f:d3:88:d1:f4:76:76:28:
3e:ea:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:43 2025 by rpki-client