Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/rrWx_KVK0nRTRlZQQB4TJRqTC28.roa
File: rrWx_KVK0nRTRlZQQB4TJRqTC28.roa (raw, json)
Hash identifier: BETaqE0/0r4sYx0mpie4wQWJFL1T5S0trn7rIn0+6Eg=
Subject key identifier: AE:B5:B1:FC:A5:4A:D2:74:53:46:56:50:40:1E:13:25:1A:93:0B:6F
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01941FFA6473F289E8A6FD505989B7D3193B
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/rrWx_KVK0nRTRlZQQB4TJRqTC28.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51456
IP address blocks: 212.107.248.0/21 maxlen: 21
212.107.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:73:f2:89:e8:a6:fd:50:59:89:b7:d3:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb5b1fca54ad27453465650401e13251a930b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:5f:ad:00:4f:2e:16:16:82:aa:24:eb:4a:
a1:85:71:95:d4:9f:a6:a3:ee:91:53:08:3a:8c:51:
f9:80:41:83:1a:4d:e7:9e:4e:2e:30:d3:f2:9e:1a:
10:f5:70:d7:e1:85:56:b9:a1:1f:a5:5a:78:8a:ae:
10:9f:79:ee:ca:d2:9a:59:b1:85:1a:d8:48:18:e0:
a1:51:29:84:75:a8:82:cb:7c:62:b5:1d:b5:2b:06:
d2:e2:fb:ba:ba:31:4c:df:d5:6d:cb:83:ca:ef:a0:
a5:2e:79:b5:76:bf:e6:f0:90:9a:17:6c:c8:8f:bb:
c1:7f:e1:43:72:1a:11:07:fc:23:8b:cf:a1:e7:9d:
6d:5b:e7:87:c4:76:52:0c:46:25:86:0c:6c:6d:32:
dd:4c:db:75:36:63:57:4e:47:88:b9:32:e1:06:e6:
cb:8b:bb:38:4d:0c:f3:9f:d4:3a:72:cd:22:c7:a1:
28:f5:f7:07:b7:6b:34:42:64:0c:06:be:8a:82:69:
9c:86:f0:36:db:67:36:df:4d:05:07:9f:66:06:bd:
ed:e6:22:8e:76:7e:2d:1e:11:5e:1a:52:0c:25:b1:
40:89:83:cb:42:3a:91:cd:f0:b6:f2:72:5e:cf:00:
2d:35:91:d4:8c:1f:83:0e:b6:ce:09:2a:70:b4:c4:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:B1:FC:A5:4A:D2:74:53:46:56:50:40:1E:13:25:1A:93:0B:6F
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/rrWx_KVK0nRTRlZQQB4TJRqTC28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.248.0/21
Signature Algorithm: sha256WithRSAEncryption
38:61:79:5b:20:6a:c5:e2:0b:72:f2:28:45:41:f7:f0:63:71:
da:d8:6e:c8:05:62:ac:6d:e1:7d:6e:ce:6a:a0:56:70:2c:0e:
0b:27:cd:eb:2f:6d:4f:a3:68:09:56:a4:81:56:30:74:46:f6:
43:cf:3e:70:7b:74:36:d1:49:21:b3:11:06:76:54:ac:1f:2e:
24:e9:d1:5f:1b:61:e2:7a:56:44:f3:c2:39:2b:01:89:60:53:
04:57:89:2b:e1:8e:d2:46:a0:ab:84:c5:21:bb:19:f3:ba:f6:
87:00:c8:bb:49:44:68:26:1e:a4:31:9e:61:c8:bb:5b:31:22:
92:48:17:db:f7:12:db:7c:81:17:25:bf:bb:d4:de:44:c6:ef:
ef:8d:7f:6a:15:48:22:54:65:e7:6a:85:d0:fa:3e:d3:ee:38:
6d:3d:69:74:1f:1b:c8:1c:2b:4c:68:af:06:0e:e1:88:78:76:
10:39:6e:e2:e4:b2:66:8b:f9:d1:cc:9d:18:13:21:9b:a4:e3:
a2:ef:55:90:9b:46:37:93:c2:af:02:f5:3e:22:b4:bd:48:f5:
2b:c5:8e:69:ec:bd:07:91:95:cf:31:16:70:6b:ff:78:6b:a9:
a7:25:27:a2:c5:06:c2:c4:15:09:4f:b6:af:09:89:b9:26:99:
a9:29:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:38 2025 by rpki-client