Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa
File: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (raw, json)
Hash identifier: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=
Subject key identifier: 99:49:55:41:54:00:FF:A0:D9:23:45:25:E2:5A:C3:EC:C3:8F:98:20
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 019425FC953BDD4FAE721550AD6CB6351613
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa
Signing time: Thu 02 Jan 2025 07:48:17 +0000
ROA not before: Thu 02 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214649
IP address blocks: 212.102.112.0/24 maxlen: 24
2a10:5e00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:95:3b:dd:4f:ae:72:15:50:ad:6c:b6:35:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Jan 2 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=994955415400ffa0d9234525e25ac3ecc38f9820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:03:ae:39:46:3f:6f:96:cf:b3:7d:3c:79:
17:74:bc:2c:8b:bf:fb:75:16:77:85:1f:06:2b:64:
c0:04:bc:9e:e3:8a:dc:94:94:4f:24:4d:a6:61:62:
2e:fe:3e:69:89:06:fd:e9:c3:62:93:8d:af:be:07:
76:a7:fd:7f:5d:4f:d3:b7:0c:21:d5:5a:68:bf:d6:
a0:7a:50:21:82:6b:fb:ac:1e:87:cd:53:8f:cb:b8:
75:49:5d:3f:30:fe:59:97:cd:4a:c8:70:40:da:d0:
ce:bd:f7:bc:1d:78:50:ac:e4:96:33:5b:3e:66:8a:
5e:8e:30:02:5b:28:46:de:62:0f:e7:9d:e7:ef:98:
63:e3:c8:51:11:48:df:83:01:f1:22:24:9d:7d:fb:
5a:37:09:5f:ef:16:34:64:90:31:d0:1f:82:ce:40:
34:37:0e:f2:16:0c:1c:97:68:69:3e:e2:b7:11:ef:
5a:61:85:76:10:23:e8:bc:d1:a3:f0:56:98:e2:54:
1d:23:bc:44:32:d1:af:b3:6c:98:69:33:b4:f4:16:
a2:a9:94:6a:0e:b2:d7:49:a2:07:5e:d3:58:ec:03:
c2:c2:03:2f:ab:ad:d9:41:07:eb:dc:d8:a5:00:ba:
e7:71:ca:b9:a8:f7:00:5d:3e:16:d8:0a:51:ab:e7:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:55:41:54:00:FF:A0:D9:23:45:25:E2:5A:C3:EC:C3:8F:98:20
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.112.0/24
IPv6:
2a10:5e00::/48
Signature Algorithm: sha256WithRSAEncryption
77:d3:8e:5a:eb:05:82:21:73:33:56:10:59:4e:6e:1f:ca:72:
3c:15:9b:fa:20:45:a9:f3:6b:2c:f8:f8:05:62:0b:5f:91:e7:
51:a4:ad:af:bf:6d:58:4e:84:a1:c8:1d:75:99:85:55:1b:10:
b2:8f:0c:84:18:0d:59:c0:c9:7d:2e:0f:d5:c3:9c:60:d7:de:
84:76:ee:1b:4e:53:a7:38:41:81:a4:d2:67:98:b0:b5:50:e7:
af:ee:51:7e:e0:57:d5:48:c8:1a:4d:3f:e2:0f:0a:c6:ee:a7:
68:c7:a1:a3:92:ea:35:3d:18:2a:25:50:fc:15:31:da:28:c3:
05:32:94:54:2a:64:d9:53:3a:a6:76:6f:3f:54:05:7f:ac:7b:
cc:bd:2f:ef:47:ef:27:80:e2:46:e4:4d:ef:00:26:f3:38:1a:
24:97:4f:25:77:27:e6:17:4f:b2:3d:6b:69:b2:70:45:bb:48:
1a:a4:f1:13:f8:83:3a:ef:5d:e0:2a:34:45:cd:f1:a7:a2:1c:
b9:e2:03:e9:45:73:df:e4:9f:34:1a:54:e5:8b:3b:d3:2f:e6:
84:85:94:3c:c5:25:fc:39:5f:b4:1f:06:83:95:80:9c:d4:d3:
c4:14:1f:0a:62:d7:3b:b7:ea:76:87:9c:60:27:74:60:b9:da:
16:88:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:58:42 2025 by rpki-client