Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/uWKpFyUp9m1lJISZvB13av-vkm4.roa
File: uWKpFyUp9m1lJISZvB13av-vkm4.roa (raw, json)
Hash identifier: c2WqlmyLYcAul2dxO3KSeHGdGqmEs1Mi3LQFV8PYmLY=
Subject key identifier: B9:62:A9:17:25:29:F6:6D:65:24:84:99:BC:1D:77:6A:FF:AF:92:6E
Certificate issuer: /CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Certificate serial: 91553A
Authority key identifier: 3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/uWKpFyUp9m1lJISZvB13av-vkm4.roa
Signing time: Sat 01 Jan 2022 02:52:17 +0000
ROA not before: Sat 01 Jan 2022 02:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.18.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9524538 (0x91553a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Validity
Not Before: Jan 1 02:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b962a9172529f66d65248499bc1d776affaf926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:17:53:70:84:f9:bc:fb:49:97:0f:d3:93:
15:a8:a3:30:9a:c7:66:bf:51:15:2f:b2:e3:7c:50:
04:55:e8:73:18:b2:15:b5:08:c6:16:1a:60:37:e8:
16:99:05:47:d7:6a:6f:81:cd:1f:1c:8c:c3:63:cf:
9a:1d:f6:0b:2c:8d:cd:e2:7c:fc:89:d2:39:6d:af:
1d:9b:e1:02:8e:ea:25:31:8c:f5:a7:65:83:ab:ef:
98:93:06:53:e9:9c:95:05:6d:46:bd:3b:ce:a1:e6:
dd:69:7f:36:81:ef:46:77:20:80:01:68:17:02:e9:
26:9d:2a:86:6e:92:4a:f6:4c:5a:3e:b3:0e:39:62:
a4:45:cb:98:36:e4:ed:d2:76:e0:48:3f:57:9b:d4:
9d:1c:f7:4a:8f:99:6b:2a:5f:6b:fe:7b:4f:09:4a:
ec:91:45:f7:bf:65:15:be:d0:4d:50:c3:9d:14:0d:
d3:f3:50:24:d5:0c:d5:81:79:60:ea:a3:85:dd:1c:
b9:6c:6f:c6:90:b8:52:82:95:5e:13:8d:75:3c:eb:
bb:50:9c:93:59:ff:9f:89:3e:ec:70:07:b8:92:08:
b1:33:23:7e:7b:ec:d5:e5:fb:bb:50:14:b9:cb:54:
bd:65:6b:c8:bc:23:55:74:56:17:ce:74:0e:8d:4a:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:A9:17:25:29:F6:6D:65:24:84:99:BC:1D:77:6A:FF:AF:92:6E
X509v3 Authority Key Identifier:
keyid:3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/uWKpFyUp9m1lJISZvB13av-vkm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ca:94:18:97:3c:d0:3d:56:9b:71:75:f3:dd:3e:e1:eb:ac:
b8:15:bb:08:f9:a1:e4:44:80:31:54:df:d1:89:88:59:a9:06:
67:dd:4e:cc:27:d0:8b:d1:59:08:80:43:16:c6:96:e2:ee:af:
b9:2a:28:ff:e2:af:d5:bd:7b:b1:ce:e7:94:e8:91:14:08:2d:
ff:a1:af:55:78:57:cb:1a:2c:9b:b5:5f:6b:af:08:8e:23:2c:
1c:1d:8a:a2:db:91:16:f6:f5:75:fb:b9:14:12:97:13:a1:ce:
a7:02:75:6e:01:c6:e1:dc:fa:2d:af:e0:c4:b3:d6:5b:cf:77:
81:67:27:0f:ae:89:46:2e:72:93:18:39:ae:60:9a:bd:9d:3d:
fe:cd:ee:03:85:11:28:8e:7b:3d:d3:db:fb:0f:67:9f:fb:bb:
64:87:ff:38:e6:b9:b3:da:86:75:29:08:e9:15:f4:cf:eb:c8:
35:e0:79:ff:15:2c:93:21:6e:8d:2e:80:d7:a6:c7:0e:d9:89:
c1:54:97:8e:98:76:5b:f8:4a:fc:16:a2:29:53:f3:30:68:ad:
04:d5:f2:47:b8:5f:f5:d9:70:b7:38:04:44:2d:3f:d7:26:f0:
2e:70:2d:ce:77:f5:93:37:31:f4:e9:ca:98:bc:92:54:ea:0b:
83:53:de:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:07 2025 by rpki-client