Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/OAdvYHvMjZ6rj0FXROT9Nndg2r0.roa
File: OAdvYHvMjZ6rj0FXROT9Nndg2r0.roa (raw, json)
Hash identifier: DCz5f/1xqpLR3RYxAsViC/NKqDc1yFPzrOzP48snxeQ=
Subject key identifier: 38:07:6F:60:7B:CC:8D:9E:AB:8F:41:57:44:E4:FD:36:77:60:DA:BD
Certificate issuer: /CN=bc9db8e90293cfe75894cb01a88908d40a96c805
Certificate serial: CB1C8C
Authority key identifier: BC:9D:B8:E9:02:93:CF:E7:58:94:CB:01:A8:89:08:D4:0A:96:C8:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ246QKTz-dYlMsBqIkI1AqWyAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/OAdvYHvMjZ6rj0FXROT9Nndg2r0.roa
Signing time: Sat 01 Jan 2022 05:57:48 +0000
ROA not before: Sat 01 Jan 2022 05:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56962
IP address blocks: 212.24.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13311116 (0xcb1c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9db8e90293cfe75894cb01a88908d40a96c805
Validity
Not Before: Jan 1 05:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38076f607bcc8d9eab8f415744e4fd367760dabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:10:42:02:61:8a:cd:81:01:76:56:d5:62:
d0:e6:67:9e:8c:53:3d:9a:6b:68:c0:c7:11:4b:8d:
c3:a6:7a:72:80:38:e8:b0:12:9f:7b:51:02:df:50:
3f:49:7a:ed:3b:12:1c:93:fc:4b:d0:37:95:4d:63:
b9:9d:91:7d:fb:9b:88:69:44:d5:8e:27:c6:08:16:
fa:c3:98:d1:6b:71:23:cd:d0:a4:37:d9:fe:6c:5a:
51:f8:a7:af:5e:d3:bb:fa:4f:30:e2:ab:68:fc:3b:
30:f4:df:c1:c7:c7:5e:f2:7c:95:16:6f:f2:cd:c9:
35:10:f9:72:12:4f:61:61:6c:aa:67:1c:08:ec:0c:
b0:f2:76:9e:f3:99:78:35:be:68:c9:ed:e5:06:9f:
25:49:d4:55:5d:e8:6d:28:41:a5:7d:91:ec:8a:31:
0e:e1:cc:64:28:80:b4:40:b4:60:2b:d6:60:c2:81:
f0:22:ee:53:89:6c:bc:14:ad:ac:91:63:40:3a:c8:
2d:c0:81:9d:1e:fc:02:71:f6:e0:36:b1:c6:4b:67:
e0:20:79:2a:cb:d9:21:5b:45:5c:e8:1b:03:7d:fb:
2d:4b:34:75:66:01:24:3a:60:74:7e:5b:cc:90:fd:
47:98:31:41:65:70:84:d9:1f:b8:f8:b2:43:e3:74:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:6F:60:7B:CC:8D:9E:AB:8F:41:57:44:E4:FD:36:77:60:DA:BD
X509v3 Authority Key Identifier:
keyid:BC:9D:B8:E9:02:93:CF:E7:58:94:CB:01:A8:89:08:D4:0A:96:C8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ246QKTz-dYlMsBqIkI1AqWyAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/OAdvYHvMjZ6rj0FXROT9Nndg2r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/vJ246QKTz-dYlMsBqIkI1AqWyAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.121.0/24
Signature Algorithm: sha256WithRSAEncryption
62:5e:85:e2:cd:de:40:80:8d:1e:ad:cd:ce:b8:f3:73:c1:45:
f2:9c:e1:68:20:29:ef:d9:b8:51:6a:63:86:65:f6:66:34:e3:
52:91:2d:fe:1c:2f:33:1c:55:33:b8:c2:d7:8d:24:1e:a0:7c:
05:a7:c1:d1:79:0a:48:4e:da:cd:49:d2:43:42:f5:58:f5:b9:
cf:39:48:cd:7c:7d:bf:9d:3d:47:84:a5:7a:89:62:a1:69:a9:
6c:ac:3b:84:1e:76:7c:7c:a0:07:a9:68:f7:53:29:b3:42:c9:
ac:64:7a:20:e5:3d:3a:a8:84:b9:fb:66:2b:2b:7a:4c:8e:46:
55:1c:ea:f6:3d:5b:dc:38:9e:af:6d:ec:f9:92:18:a1:76:97:
06:fb:0c:fe:a6:02:15:2f:31:57:0d:26:72:d5:f0:8d:79:0e:
2a:70:8d:5c:52:33:80:06:31:65:cb:18:12:c9:12:69:4e:7a:
29:42:40:de:55:a5:c0:60:e2:4f:ec:ff:9c:8e:28:f4:ca:0d:
25:e2:23:cb:6c:c7:03:ee:df:0d:4e:75:15:c9:09:7c:4c:ad:
5f:51:94:23:f3:6f:08:b9:63:1f:2d:1c:4f:49:1b:4a:03:d8:
19:5a:ec:a2:28:2b:8c:7a:67:e1:7c:1e:22:fa:ae:63:b9:34:
5d:68:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:53 2025 by rpki-client