Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/aGu_-0k0Nxvwscw56XY1-4GJ5-o.roa
File: aGu_-0k0Nxvwscw56XY1-4GJ5-o.roa (raw, json)
Hash identifier: SxufLVUyOfbJFYpU2zE77iTnMqieXFs3VkCchv0DBTM=
Subject key identifier: 68:6B:BF:FB:49:34:37:1B:F0:B1:CC:39:E9:76:35:FB:81:89:E7:EA
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193F404F57B678133AFCEAFA4406DF7A189
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/aGu_-0k0Nxvwscw56XY1-4GJ5-o.roa
Signing time: Mon 23 Dec 2024 14:56:25 +0000
ROA not before: Mon 23 Dec 2024 14:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 212.23.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:04:f5:7b:67:81:33:af:ce:af:a4:40:6d:f7:a1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 23 14:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=686bbffb4934371bf0b1cc39e97635fb8189e7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:2f:6a:32:b2:84:12:7a:ad:49:12:00:ea:
8f:75:02:d2:1c:71:cc:3e:2e:a0:f8:3c:8b:a3:1e:
65:6f:a0:93:f6:7c:d2:65:3d:72:4d:62:db:3b:10:
91:fb:44:cf:24:6f:68:f5:8a:64:6e:27:6a:e1:4d:
a2:bf:6c:3a:16:98:16:0a:db:da:d5:7c:16:55:cd:
21:d5:08:24:ad:bd:45:ab:c9:58:95:39:d4:ee:f6:
ef:9a:4f:10:c4:89:3e:09:d8:0d:93:8c:0e:99:8f:
93:f2:88:b3:34:c8:f8:cc:2f:80:7e:a6:a8:33:95:
21:44:0b:4c:fb:d3:19:51:93:e2:70:4d:24:89:ee:
bf:1c:44:e5:31:c4:56:ef:8a:2a:43:1c:a7:0e:c2:
a2:d9:31:12:26:d5:34:9b:7e:6d:45:e5:b2:e0:0b:
a8:0c:64:e4:07:e0:db:ae:ba:97:1e:5c:cd:1b:35:
25:bc:e5:82:9f:6f:f9:8f:36:a8:dd:ae:09:1c:7f:
ed:a2:43:76:d5:b9:8f:0c:7e:9c:be:0b:c7:17:4e:
27:4d:50:95:51:b4:6d:cb:30:95:8b:43:92:7e:8d:
69:1e:88:e3:e0:49:e4:06:70:6a:42:48:03:f1:ae:
83:cb:ea:85:1d:6a:60:7d:9c:81:e2:b4:9a:c3:c8:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:BF:FB:49:34:37:1B:F0:B1:CC:39:E9:76:35:FB:81:89:E7:EA
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/aGu_-0k0Nxvwscw56XY1-4GJ5-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.196.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c3:e5:28:15:00:6c:fd:09:ab:be:43:49:7a:93:80:be:ec:
f9:d4:2e:5a:90:98:9a:b3:c3:45:d5:2d:e0:93:66:28:d5:34:
9a:fa:23:60:fe:16:4b:2b:9c:7c:2a:ec:97:01:d0:77:d8:de:
5b:18:eb:59:82:d9:92:0d:42:94:12:e5:48:c9:a7:7e:ee:8a:
e8:e2:e6:61:3c:a8:13:34:cf:05:69:08:67:59:fb:b8:03:66:
20:37:b3:ba:a4:6f:1f:3d:bc:ae:4e:1d:ea:74:b3:d1:fc:d4:
61:3e:96:f8:24:0d:77:3b:c1:93:9e:84:e1:ac:e0:70:39:ee:
d2:f9:cc:86:30:28:81:4a:71:ed:1a:b8:3c:8a:ec:e5:51:b9:
bc:1e:0b:56:3e:0d:e3:63:c0:43:d8:14:0c:1c:5f:30:55:b8:
2b:12:52:14:96:77:8f:ef:8a:1d:ea:69:83:ba:61:ca:c4:d8:
6c:55:b5:73:b9:3b:4a:89:a6:c8:c5:b5:87:c4:81:f4:23:c2:
e4:c7:42:2d:34:5e:61:96:d8:b8:1b:b9:99:a1:c9:e9:40:c3:
ec:75:ab:ae:74:2d:81:37:a1:c0:91:94:8a:bb:5f:14:91:b0:
51:e4:c9:a0:d1:2b:46:e6:e4:ab:f7:3e:ba:3a:e8:dd:32:86:
14:01:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:47:37 2025 by rpki-client