Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/TtHjZgr8XkGrd3xJhFjIzfGzkdw.roa
File: TtHjZgr8XkGrd3xJhFjIzfGzkdw.roa (raw, json)
Hash identifier: byf94/ItfKyeVdaJgaE5agX7uWhHCZE+P+KX+v3SdU4=
Subject key identifier: 4E:D1:E3:66:0A:FC:5E:41:AB:77:7C:49:84:58:C8:CD:F1:B3:91:DC
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 018F71E2E36C485FF637F283940956B46295
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/TtHjZgr8XkGrd3xJhFjIzfGzkdw.roa
Signing time: Mon 13 May 2024 12:17:25 +0000
ROA not before: Mon 13 May 2024 12:17:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20792
IP address blocks: 212.237.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:e2:e3:6c:48:5f:f6:37:f2:83:94:09:56:b4:62:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: May 13 12:17:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ed1e3660afc5e41ab777c498458c8cdf1b391dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:d8:25:e4:c0:94:57:13:1f:bf:9d:63:24:
03:40:49:f7:9d:6a:16:e6:85:7b:37:9f:a5:cc:f4:
3c:24:8f:50:a9:2c:c8:7f:89:53:36:1d:ae:c4:d8:
e8:4f:b4:c3:7e:8a:08:f3:26:44:cd:5f:88:3e:34:
47:ef:18:9d:a2:42:27:9c:37:f7:3f:f0:4c:e6:5b:
57:45:39:cd:66:e3:2b:b2:08:40:a5:68:60:4c:e4:
fa:a7:35:03:9e:1b:d5:fa:72:33:11:c2:ae:d5:06:
38:c7:36:43:32:22:73:7d:b5:3c:62:15:9c:ef:e1:
08:02:4c:b6:7f:42:ce:fe:91:19:00:19:2f:47:05:
6d:b7:04:03:f6:60:cb:70:e9:44:fc:3a:1a:27:1f:
22:18:d0:94:9b:2d:86:03:a4:13:7f:8f:32:be:3b:
59:48:a5:7f:35:d2:99:4a:96:ef:fc:b0:25:f6:42:
62:7f:69:45:71:42:ba:16:0c:53:ce:66:15:b0:2b:
73:50:ad:a8:7b:a1:6b:57:1c:c7:45:70:f2:a5:5e:
11:32:ef:9a:04:54:80:27:2c:06:7a:4f:30:77:15:
d5:8a:78:16:69:9e:42:e8:5e:d0:2e:a0:54:8e:e2:
37:d5:c8:5f:1a:2d:e6:ca:90:c7:f9:c3:8d:5b:f2:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:E3:66:0A:FC:5E:41:AB:77:7C:49:84:58:C8:CD:F1:B3:91:DC
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/TtHjZgr8XkGrd3xJhFjIzfGzkdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.237.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0a:40:56:95:a3:ff:30:0f:9b:25:2a:25:80:01:dd:92:fa:
e1:52:cf:8c:d0:d5:5f:2a:3e:a2:76:94:60:d4:76:ec:3a:d7:
60:24:b1:37:9a:b3:99:c4:a7:db:20:cf:52:bf:35:32:7e:45:
45:84:39:45:78:41:c5:d4:97:7e:1a:7b:c4:52:68:c8:0c:88:
b5:d2:72:f2:c7:c0:72:4c:12:ad:7f:66:b6:ab:75:65:ac:1c:
bb:c6:e0:34:92:60:d5:b4:88:98:6f:58:c1:4c:95:85:e7:b3:
78:bb:e6:25:37:67:f3:7f:05:c6:f9:a8:ea:73:3e:60:74:79:
ba:81:60:4b:5b:03:c1:3f:f2:8a:02:c7:2e:cf:28:82:c4:90:
80:98:1c:98:f8:c4:81:57:ee:41:13:0b:c9:df:e5:bd:5d:b1:
ba:13:8c:f0:12:b5:b7:2b:e2:39:bd:74:8f:bf:05:1d:87:56:
f1:57:0b:4a:bf:1a:13:27:9e:10:92:6b:72:4d:34:5a:30:0d:
30:62:e7:61:14:3a:e7:6e:5d:dd:34:8a:e1:51:67:1f:d6:1e:
d1:59:54:a4:18:16:99:02:da:93:9e:ef:05:38:81:17:ae:3a:
f1:c2:78:fb:1e:1c:2b:4d:2c:a6:9c:ad:5a:26:7e:a2:22:fa:
e9:36:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:34 2025 by rpki-client