Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/CuOdLbIHQkiNNkZE4RI5OX2ChUI.roa
File: CuOdLbIHQkiNNkZE4RI5OX2ChUI.roa (raw, json)
Hash identifier: iQFWxByvq8WmjKSPpyQ0oau39UHFiBtlOwWOS2//3bA=
Subject key identifier: 0A:E3:9D:2D:B2:07:42:48:8D:36:46:44:E1:12:39:39:7D:82:85:42
Certificate issuer: /CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Certificate serial: 01856F39189C58CCF199F479AE78DB251D2B
Authority key identifier: 3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/CuOdLbIHQkiNNkZE4RI5OX2ChUI.roa
Signing time: Sun 01 Jan 2023 21:24:50 +0000
ROA not before: Sun 01 Jan 2023 21:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 212.18.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:18:9c:58:cc:f1:99:f4:79:ae:78:db:25:1d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Validity
Not Before: Jan 1 21:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ae39d2db20742488d364644e11239397d828542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:db:05:a2:ca:6f:df:4d:18:f3:ed:5c:08:
ef:95:3f:2a:ea:18:d3:68:12:81:aa:3c:e9:e7:84:
b6:1a:4d:40:b0:37:e5:73:8d:85:22:3d:ef:21:77:
9e:96:5e:f1:73:9b:62:e7:fc:fc:9b:89:02:3c:01:
5f:d0:3e:2d:5e:0d:c3:7c:1a:e8:f3:05:e2:1c:d3:
e8:c9:dc:b4:63:25:fd:f5:55:07:da:2c:a8:5d:43:
d0:c2:25:4a:dc:b6:ac:d9:50:08:4f:02:f7:e5:33:
b7:40:2d:00:c8:bd:39:f7:aa:9a:49:64:f2:69:c9:
fe:5c:c5:88:1f:c5:63:25:fe:ba:24:18:2b:ad:26:
ab:41:65:9e:f4:82:75:bc:ee:5c:e8:92:f2:28:d9:
12:49:e5:8e:2b:ea:33:09:3b:41:f1:dd:1f:03:71:
cd:3f:7f:ac:99:66:e9:a8:70:d9:47:f6:76:e8:c9:
db:00:a6:40:b4:5a:1f:cb:d9:75:5f:01:f4:a0:75:
00:b7:13:4f:75:eb:4f:2e:b8:87:45:7a:7b:e3:42:
6c:fb:2f:01:75:c9:36:f8:48:e7:e6:c2:ed:91:00:
05:a0:02:f1:40:37:1e:2c:2d:b6:25:05:fd:7e:6c:
4f:e8:df:6b:b9:34:25:cb:b7:33:33:87:f1:d0:ac:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:9D:2D:B2:07:42:48:8D:36:46:44:E1:12:39:39:7D:82:85:42
X509v3 Authority Key Identifier:
keyid:3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/CuOdLbIHQkiNNkZE4RI5OX2ChUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d2:27:65:d8:85:50:9b:88:22:ff:c4:fc:39:12:3a:36:8c:
89:1f:0f:dc:39:ce:7e:52:f7:f8:70:26:89:38:af:05:fb:91:
13:17:88:b0:c6:04:f7:0c:8e:aa:61:77:4f:17:3e:dd:58:a6:
ae:49:4f:5e:ea:59:08:e5:a5:5f:e1:6c:29:3e:55:f8:36:05:
f8:47:e5:4d:16:09:32:c2:70:0d:71:03:28:14:54:b3:1c:0c:
7e:12:31:ef:7f:b5:9b:fd:8a:bc:be:7b:78:eb:01:28:66:df:
5b:9c:90:8a:b3:01:71:fb:52:30:e4:b5:4a:02:08:fb:ce:9c:
6f:a5:ba:a4:fd:97:5b:d1:e3:6e:c5:c2:47:7c:7e:4c:35:ec:
f1:4e:55:56:76:68:25:ad:ed:3c:0c:da:7a:5b:66:74:44:78:
cd:20:75:11:c5:0c:4a:cd:c1:af:32:b4:30:91:d8:6e:26:97:
76:20:66:2b:b0:53:1a:ef:25:df:43:20:f1:62:8c:5d:57:99:
cb:98:a8:63:c1:b8:73:cf:00:c0:26:2d:72:63:e3:08:0f:58:
c5:63:ef:88:81:5b:b6:80:c1:b2:6b:7d:23:72:2b:bb:7c:6c:
e6:cd:b3:61:af:f1:65:42:10:f7:0c:5c:d8:d4:73:92:0d:b5:
fc:79:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:55 2025 by rpki-client