Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/mRecpb9R48mVxMH7jfNfWs149Z0.roa
File: mRecpb9R48mVxMH7jfNfWs149Z0.roa (raw, json)
Hash identifier: t9S+0CItWksoaKGUIL31JPQ3A5wQ4h3In9mYoe6q7A4=
Subject key identifier: 99:17:9C:A5:BF:51:E3:C9:95:C4:C1:FB:8D:F3:5F:5A:CD:78:F5:9D
Certificate issuer: /CN=3b0508405e9bf3522e8f58ad775ec506b157d713
Certificate serial: 018571D7B87D572C41E880DF5732E40A1E44
Authority key identifier: 3B:05:08:40:5E:9B:F3:52:2E:8F:58:AD:77:5E:C5:06:B1:57:D7:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwUIQF6b81Iuj1itd17FBrFX1xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/mRecpb9R48mVxMH7jfNfWs149Z0.roa
Signing time: Mon 02 Jan 2023 09:37:20 +0000
ROA not before: Mon 02 Jan 2023 09:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209288
IP address blocks: 212.18.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:b8:7d:57:2c:41:e8:80:df:57:32:e4:0a:1e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0508405e9bf3522e8f58ad775ec506b157d713
Validity
Not Before: Jan 2 09:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99179ca5bf51e3c995c4c1fb8df35f5acd78f59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:bd:1d:dc:a7:0d:8a:54:f8:3f:f1:b5:9c:
8d:bc:36:d9:22:92:88:ec:4d:10:63:63:4d:ee:3a:
27:b0:05:69:17:e5:b0:59:e2:1f:4c:13:45:a2:ed:
cf:e5:50:28:77:18:37:7e:59:44:7a:f7:67:30:2a:
84:b4:7b:3b:da:ee:1e:a7:ab:4b:f7:c4:a4:bd:f8:
14:91:c1:ea:8e:55:fc:6d:c8:b7:df:82:8d:5a:78:
da:d1:64:80:9c:d5:21:d3:94:d2:35:c1:c9:01:b3:
49:9a:0e:44:1d:fc:6a:2a:ec:2f:6d:ae:40:7a:8b:
76:77:65:bd:d8:77:12:b9:2c:09:2b:e6:31:c4:1f:
4e:b7:37:30:17:04:d9:96:fc:e3:e3:fa:10:92:49:
82:64:0e:03:84:c0:ee:7a:64:1e:ad:2a:01:01:32:
ab:d6:87:bc:cb:9c:7a:d9:96:5b:1e:61:92:8f:f7:
3e:88:52:54:90:e1:04:8b:88:bd:b8:0c:bd:6c:f3:
82:88:ca:fc:fe:89:23:28:2f:d7:65:56:17:50:ee:
9c:92:e5:2c:9c:a4:93:53:49:54:35:53:28:5f:d2:
03:94:8c:e9:67:f7:e5:6b:ec:cd:54:1c:35:c3:73:
4d:d5:27:ad:05:7e:4a:ac:58:c9:37:cf:5b:c0:26:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:9C:A5:BF:51:E3:C9:95:C4:C1:FB:8D:F3:5F:5A:CD:78:F5:9D
X509v3 Authority Key Identifier:
keyid:3B:05:08:40:5E:9B:F3:52:2E:8F:58:AD:77:5E:C5:06:B1:57:D7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwUIQF6b81Iuj1itd17FBrFX1xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/mRecpb9R48mVxMH7jfNfWs149Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/OwUIQF6b81Iuj1itd17FBrFX1xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.105.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e2:66:dd:d0:19:86:c5:f3:70:29:a4:72:6c:23:10:23:71:
5d:95:0a:f9:92:d2:78:35:83:7c:e5:f5:36:4b:05:24:d1:02:
14:46:1a:e7:c9:9a:71:18:71:3b:d7:c0:58:48:49:b2:2f:2c:
ff:bd:66:12:48:a0:40:49:93:84:a4:2e:44:43:75:47:02:11:
55:c2:b9:67:06:13:bc:54:ec:c0:df:e3:3e:f8:0e:95:35:4f:
96:47:60:cb:5d:e9:56:2d:15:77:82:6b:3a:96:49:7e:08:dc:
27:6a:ec:7f:b5:b4:1c:fe:1b:a5:27:29:97:e9:11:ec:19:ef:
2c:bd:cb:fc:49:49:79:5a:4d:27:d2:8e:2d:83:45:9b:16:c5:
e2:d2:08:cb:c7:d2:9a:70:5b:af:d2:1d:98:38:3e:87:5c:bd:
c0:8d:f4:aa:c9:26:42:d7:67:5e:59:7d:c6:54:a5:b2:57:da:
44:a6:fd:05:a6:8b:65:68:4f:92:4b:8e:9b:a9:b8:83:08:21:
ff:39:df:52:f9:a9:78:4d:74:89:fa:d3:eb:8a:c3:41:83:57:
62:5d:56:d2:34:a0:4f:c1:f5:4c:f2:b4:0a:34:b7:db:66:97:
83:4b:75:12:fa:e8:1c:ec:65:76:da:44:63:2b:e3:14:58:fb:
09:63:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:42:19 2025 by rpki-client