Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/xZC_xBRdyqTElb8rKCSQViw1QQk.roa
File: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (raw, json)
Hash identifier: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=
Subject key identifier: C5:90:BF:C4:14:5D:CA:A4:C4:95:BF:2B:28:24:90:56:2C:35:41:09
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0194236A10528D21D3D7EF39012A7DFDA557
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/xZC_xBRdyqTElb8rKCSQViw1QQk.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 212.23.198.0/24 maxlen: 24
2a11:5440::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:52:8d:21:d3:d7:ef:39:01:2a:7d:fd:a5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c590bfc4145dcaa4c495bf2b282490562c354109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:9c:b2:64:7c:16:af:e5:03:e1:46:01:88:
c7:d3:29:a1:e1:b1:9a:ba:26:5a:a7:47:bc:e3:a2:
83:6b:76:c8:c7:54:3c:6d:31:7f:1b:b9:74:ff:55:
f1:d9:6b:ae:30:91:62:d9:e3:85:90:bc:b0:be:88:
9a:a9:80:11:e9:29:dc:c4:58:32:85:ec:01:14:37:
07:35:d4:12:ca:df:8f:4e:c4:3c:66:02:f4:b9:ca:
98:9c:2e:bf:f6:de:d2:e1:0c:d6:4a:93:8e:be:b0:
11:c0:00:33:a4:4e:22:b0:65:ef:5f:e8:b0:9a:5f:
df:68:3a:8c:73:b5:09:fb:80:e4:63:eb:fc:19:61:
86:e8:f6:e1:74:f4:a4:68:1f:ba:df:9b:ae:7c:20:
9f:c0:e0:4c:5c:a9:99:73:9e:92:bc:37:b1:6b:1a:
78:c8:8c:4f:af:c6:6e:9f:d0:50:56:44:cd:4b:f3:
4c:8a:10:30:67:2e:23:12:eb:64:b8:51:e6:93:f9:
d2:97:72:c8:ca:43:d9:d4:f4:64:33:18:31:4a:e2:
06:20:07:a4:e2:f7:19:81:08:29:9a:61:b8:ff:94:
2b:08:2f:49:99:ac:ee:ef:18:2a:6e:57:f9:43:68:
7b:f1:cf:27:f5:16:a4:ae:9d:6d:40:d6:da:0d:77:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:BF:C4:14:5D:CA:A4:C4:95:BF:2B:28:24:90:56:2C:35:41:09
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/xZC_xBRdyqTElb8rKCSQViw1QQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.198.0/24
IPv6:
2a11:5440::/29
Signature Algorithm: sha256WithRSAEncryption
4e:58:17:8f:aa:64:c8:f8:66:ac:28:1a:08:20:aa:b9:1b:ac:
97:6f:75:68:b9:81:31:5d:26:92:f4:5c:61:34:a8:af:00:4b:
7e:fb:ee:b8:00:9f:7d:34:7f:98:e7:75:c3:20:90:b9:f7:e9:
82:1b:09:65:63:da:ce:f7:49:b8:60:ab:06:5a:44:ee:97:07:
06:a0:a2:c5:eb:d5:95:bc:f5:45:4a:71:60:0e:bd:41:17:48:
9d:e3:0f:81:af:ad:34:74:b3:b0:9b:fc:23:62:17:0b:81:5a:
56:95:bf:7d:0d:4d:f9:5d:3b:8d:85:f0:54:77:32:1c:39:d3:
d8:a0:89:a5:4d:99:20:d8:3c:05:de:f7:b1:e6:95:47:a3:78:
e3:c0:a2:4c:11:96:c5:5b:3e:25:a5:83:38:d4:33:d3:3c:fb:
d8:c0:e5:28:5b:ea:e8:08:c1:7c:82:4e:f9:ed:2c:b9:8a:02:
af:70:a5:5f:d6:f9:f4:ab:76:88:95:a6:0a:f1:76:e3:47:32:
7a:b0:fb:98:8e:08:00:48:49:87:49:cd:dc:6d:21:fc:13:3f:
57:b0:21:82:cd:e0:d3:9c:39:2a:40:a1:6a:2b:f6:41:47:1c:
57:dd:80:49:ab:55:36:e0:cb:bb:b6:83:89:30:f7:41:1d:54:
96:53:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:52 2025 by rpki-client