Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/o6XRYqAwljzltLILmMOwH87qrs0.roa
File: o6XRYqAwljzltLILmMOwH87qrs0.roa (raw, json)
Hash identifier: 6UDxdeZ3tWQLXapkLlv60DB4/cJJTV9uqCnIHkuJkJc=
Subject key identifier: A3:A5:D1:62:A0:30:96:3C:E5:B4:B2:0B:98:C3:B0:1F:CE:EA:AE:CD
Certificate issuer: /CN=46cfa7079c143a17ed590262bac7868fcbc842ba
Certificate serial: 018570FBDF286DBF9B8F5DD7FE938C057A4E
Authority key identifier: 46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs-nB5wUOhftWQJiuseGj8vIQro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/o6XRYqAwljzltLILmMOwH87qrs0.roa
Signing time: Mon 02 Jan 2023 05:37:12 +0000
ROA not before: Mon 02 Jan 2023 05:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57866
IP address blocks: 212.18.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:df:28:6d:bf:9b:8f:5d:d7:fe:93:8c:05:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfa7079c143a17ed590262bac7868fcbc842ba
Validity
Not Before: Jan 2 05:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3a5d162a030963ce5b4b20b98c3b01fceeaaecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:c4:42:60:72:09:fb:34:3a:97:34:b2:2a:
b7:dc:03:7a:c3:43:7b:4c:b7:95:0b:0a:7d:d4:f3:
d2:a7:b6:4b:be:0e:a1:43:2d:78:00:3e:0b:53:ec:
ae:8a:b6:a3:bc:d4:a0:eb:fe:ec:c0:02:d3:f4:ff:
56:57:54:88:ee:4b:19:b3:47:41:9b:12:c5:30:38:
7c:0e:d7:37:ad:5f:40:a6:35:e6:8b:36:3b:26:c9:
7d:ca:d5:f1:78:8c:42:0d:7c:8e:53:38:ea:b5:95:
75:6d:90:0d:8f:ca:a8:fd:84:3b:4b:8d:85:84:74:
67:19:22:c6:ab:28:2c:b2:a2:23:33:24:7d:08:91:
be:ae:3f:96:bd:da:52:01:f7:bb:b5:88:98:d9:bb:
d7:79:ba:c8:57:2a:11:e7:a7:7f:83:b7:77:33:9b:
1c:a6:a7:1a:b2:f7:c6:41:ea:5d:a7:b7:d9:73:52:
84:a9:63:c4:70:af:1e:f8:50:d9:f7:86:e2:66:b4:
a5:5c:2b:6c:a8:a7:a4:28:1c:4b:5b:07:20:56:4c:
18:42:0b:c5:92:8f:36:5a:23:83:6d:73:d0:77:35:
ed:69:d0:5d:5f:e0:e9:2d:8c:30:9c:14:e1:c1:a5:
eb:9d:58:49:7c:88:5e:e8:43:1a:77:26:a4:dd:4a:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:D1:62:A0:30:96:3C:E5:B4:B2:0B:98:C3:B0:1F:CE:EA:AE:CD
X509v3 Authority Key Identifier:
keyid:46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs-nB5wUOhftWQJiuseGj8vIQro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/o6XRYqAwljzltLILmMOwH87qrs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bc:20:44:68:b7:1b:a1:4d:2c:7a:3f:60:20:28:59:d8:37:
b0:c7:e0:a8:0a:8d:3a:43:57:33:58:7f:8c:fe:9b:05:b3:3a:
74:44:0f:cd:e8:d3:df:03:24:c0:54:04:b2:f0:d7:b3:a7:27:
c1:53:5a:14:a7:4f:83:18:ec:09:8d:35:ca:e5:26:cf:0a:74:
73:99:a1:86:44:0a:5f:f6:12:43:1a:95:62:7b:d9:e1:be:d0:
a5:44:ca:e7:df:97:f3:e9:db:7e:e6:a8:e9:f5:f3:3c:af:83:
f3:6c:4e:e5:c1:5f:29:67:a5:a5:d3:26:09:e1:76:4f:66:72:
65:b0:3a:15:de:4b:c6:a0:46:0c:6f:1f:f5:a6:82:fd:d8:f9:
6d:bc:2d:cb:2b:d3:6a:6a:88:16:06:84:f7:98:ab:95:41:b3:
3d:9d:14:8e:2e:ef:f1:b2:67:8b:a1:e0:ea:d9:99:3a:d5:29:
35:c8:ec:68:58:11:5f:61:e9:c6:8a:cf:52:ef:8d:6c:8c:4f:
84:cb:41:5c:28:ac:d9:f6:a2:55:07:93:2a:6a:d7:d8:4a:45:
ff:c9:d7:3c:6a:76:d8:18:a9:34:b6:6a:80:bd:46:d8:bb:68:
51:ee:b5:af:99:d7:9e:99:c6:f5:e2:a4:1a:b6:67:10:98:4a:
9d:b5:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:28 2025 by rpki-client