Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/1-TEAa7vqhDR8MFmfWosBtb41wek.roa
File: 1-TEAa7vqhDR8MFmfWosBtb41wek.roa (raw, json)
Hash identifier: eqiD9H7n4ulTtrxau5diRG8AJtoZzGM451rZtgj6RWo=
Subject key identifier: F9:31:00:6B:BB:EA:84:34:7C:30:59:9F:5A:8B:01:B5:BE:35:C1:E9
Certificate issuer: /CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Certificate serial: 019428262F954BCE92C40019F4268F57F463
Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/1-TEAa7vqhDR8MFmfWosBtb41wek.roa
Signing time: Thu 02 Jan 2025 17:52:58 +0000
ROA not before: Thu 02 Jan 2025 17:52:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214755
IP address blocks: 212.104.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:2f:95:4b:ce:92:c4:00:19:f4:26:8f:57:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Validity
Not Before: Jan 2 17:52:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f931006bbbea84347c30599f5a8b01b5be35c1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:53:30:04:4c:8f:b0:b3:87:d3:6b:a0:15:d5:
8e:90:8a:19:8b:de:1e:9c:bc:a6:43:d7:06:35:a2:
65:d7:2f:fb:9a:d0:e5:aa:5e:13:25:68:7b:5c:91:
32:11:2b:af:0f:47:20:dc:2d:be:13:03:ca:09:cb:
2e:62:13:29:da:a6:21:7f:99:bd:65:be:85:96:ab:
d7:c5:ec:35:45:b1:52:c4:30:97:f9:53:9c:f2:dc:
42:1d:78:20:d7:1c:84:a6:45:fe:ab:d6:db:cf:d6:
c3:53:fa:d7:5b:1b:14:a8:27:61:41:ac:5e:d8:b2:
17:cb:c7:1b:54:e8:4e:6b:63:26:9d:39:6b:ba:58:
82:3b:50:a7:40:bd:80:2e:23:25:1c:b5:fc:4b:50:
f7:be:d3:69:50:19:92:41:9d:08:42:1c:30:54:ad:
58:c3:c5:cf:f4:a2:e1:de:3a:90:53:80:61:87:13:
63:a1:a9:81:aa:1f:af:e8:bf:0b:76:95:43:d0:cf:
d8:c9:e9:69:54:b5:cb:46:25:3a:78:94:ba:b9:8b:
ea:f3:84:3f:fc:ff:c7:3c:d8:6b:14:2b:3e:ea:f3:
d6:ed:32:2a:68:f0:32:05:5d:2b:7a:7b:61:f9:d5:
98:fe:a5:49:bd:aa:62:0c:be:65:da:b6:e6:fc:a7:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:00:6B:BB:EA:84:34:7C:30:59:9F:5A:8B:01:B5:BE:35:C1:E9
X509v3 Authority Key Identifier:
keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/1-TEAa7vqhDR8MFmfWosBtb41wek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.151.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e9:d5:91:d6:fe:8b:1d:86:f5:80:67:0b:5b:10:f8:e9:3c:
5a:17:1e:16:2c:7b:b2:79:c8:ba:c7:16:71:d2:cf:d5:2e:8d:
b7:33:65:68:2b:28:24:71:bb:e4:70:55:4b:03:bb:97:68:5b:
ca:4e:91:2a:5b:8f:5e:f9:fb:1a:d7:7b:66:ab:5f:1d:fe:be:
60:9c:1d:f4:bf:d2:1d:1f:d4:80:2a:96:c5:3a:d7:6a:e5:df:
f7:19:5d:30:8a:c4:8d:c1:9c:98:3a:08:b0:ee:b3:cc:3e:fd:
28:95:0d:30:66:77:37:f9:37:df:c5:21:09:ba:e8:d8:b5:2d:
b4:ca:7f:ff:6f:91:ec:66:dc:e7:e4:54:8e:bf:18:a8:28:a3:
40:02:61:06:b6:a5:15:a8:2d:57:3c:54:1d:b1:3f:e3:01:d3:
dc:3c:b4:3e:5a:28:ad:af:c5:55:4e:dc:35:4d:0e:ee:8c:78:
b8:66:8f:27:68:b4:5d:17:d2:ac:ba:be:9e:d0:85:e4:b2:81:
5c:41:59:df:12:4b:71:e8:25:7d:95:3c:8c:66:4e:0c:5a:c8:
9a:91:e0:84:75:e4:5f:fa:33:80:45:cc:1f:57:46:94:a4:4b:
b2:dd:81:99:df:17:26:75:ba:05:6f:6c:30:c9:b0:13:1a:aa:
f5:fb:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:56 2025 by rpki-client