Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/DOVWU_Mcu8oKJRBmlOXfLktGFsY.roa
File: DOVWU_Mcu8oKJRBmlOXfLktGFsY.roa (raw, json)
Hash identifier: wdQLNyNKhT1ERnVrNZSK3dauXWT7d4Py63vwUkTyDRk=
Subject key identifier: 0C:E5:56:53:F3:1C:BB:CA:0A:25:10:66:94:E5:DF:2E:4B:46:16:C6
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 018FBADE4FD003FA9168763C13D4EBA7C604
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/DOVWU_Mcu8oKJRBmlOXfLktGFsY.roa
Signing time: Mon 27 May 2024 16:24:42 +0000
ROA not before: Mon 27 May 2024 16:24:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
2a12:bc0:2::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
2a12:bc0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:de:4f:d0:03:fa:91:68:76:3c:13:d4:eb:a7:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: May 27 16:24:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ce55653f31cbbca0a25106694e5df2e4b4616c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:15:65:01:1c:2b:80:90:2f:af:f8:a1:84:3d:
50:9f:f3:e6:a9:02:8f:74:4f:b4:fe:f3:cd:56:a1:
1a:3a:16:96:05:8c:e7:f4:db:c5:a8:6d:6c:f5:53:
a3:54:25:af:2b:63:e3:90:1a:76:6f:76:d0:61:2a:
47:e7:93:b8:40:db:29:28:6b:21:7d:4e:e0:33:22:
84:78:b9:0f:2d:97:a6:83:3a:83:25:c8:49:c8:4d:
88:90:10:29:7d:0a:55:cf:b1:b5:95:a8:16:24:07:
fb:93:e4:41:c5:bf:b9:1b:55:e5:c6:70:b5:b5:38:
06:04:c2:99:55:e8:b4:7a:78:35:ab:b6:14:39:76:
44:02:a2:af:27:1e:8f:41:3f:41:2e:f5:10:ad:e4:
f1:f8:2c:69:c9:7b:9d:bb:a8:bf:b9:0d:ec:a7:aa:
b0:f4:e5:1a:f5:8e:26:db:d0:16:a3:f1:66:f3:53:
b5:75:8c:a1:6d:23:52:0d:78:b0:34:0b:99:bd:cc:
dc:72:1d:da:80:8b:05:4e:0c:9d:ba:b4:d9:fd:07:
d2:86:77:73:c4:7c:da:c2:d4:cf:3d:bb:21:d9:cd:
31:85:1a:76:d3:54:70:c4:df:51:9c:45:85:b5:d3:
da:d4:e0:ec:f0:b3:cc:85:1c:77:6a:d9:85:5d:c4:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:56:53:F3:1C:BB:CA:0A:25:10:66:94:E5:DF:2E:4B:46:16:C6
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/DOVWU_Mcu8oKJRBmlOXfLktGFsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:d3:ee:86:88:82:d8:d1:48:5c:09:3a:7e:1a:6d:14:b8:52:
8d:13:32:d8:ab:08:62:cd:8c:bc:b1:cb:b4:bb:bf:21:24:94:
04:29:34:33:a2:61:f9:16:45:c6:10:1e:ba:20:71:d1:84:e3:
cf:d7:10:f2:0d:9e:3b:98:bf:e6:c4:72:e5:cb:a9:a1:ce:41:
14:99:cd:75:2e:fb:8a:91:7d:b7:28:cc:ff:08:e2:cc:98:63:
2d:da:fe:bb:76:05:16:1a:e4:e4:19:ba:78:cb:4b:86:83:9c:
1d:18:10:bf:b2:ce:08:5c:f0:eb:9a:87:02:12:a7:c4:a9:87:
f2:64:63:2e:ed:38:bd:8e:a8:33:ae:ec:b6:dd:9b:f4:aa:06:
f5:1f:1e:7a:36:06:99:ab:35:8f:f9:14:4d:8c:9c:69:c3:63:
91:33:56:b8:0f:b5:4d:14:a4:63:b8:f9:c8:06:ef:e5:3b:b0:
7a:5e:9f:60:0e:7c:47:4d:4a:13:e5:92:3f:14:e2:2c:52:6b:
5a:0d:ee:c1:0b:bb:c9:4f:d8:fa:68:29:64:39:d2:f9:5d:22:
f9:90:81:b3:b4:65:9c:f9:76:76:88:84:2e:89:95:5b:63:62:
b6:b2:e4:51:a9:9f:cc:03:31:5f:a6:53:07:f1:94:39:c2:c2:
28:bf:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:41 2025 by rpki-client