Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/Cy2jPZ7oGwFrymRDIAI634bpPNY.roa
File: Cy2jPZ7oGwFrymRDIAI634bpPNY.roa (raw, json)
Hash identifier: NGOC/n9yJ0aQ9kBU4/uisumT+WUE7FQQaAMFHt0P9jw=
Subject key identifier: 0B:2D:A3:3D:9E:E8:1B:01:6B:CA:64:43:20:02:3A:DF:86:E9:3C:D6
Certificate issuer: /CN=36dbff68370e755d8c7272bdd0d033474ea91e5d
Certificate serial: 01853A94
Authority key identifier: 36:DB:FF:68:37:0E:75:5D:8C:72:72:BD:D0:D0:33:47:4E:A9:1E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ntv_aDcOdV2McnK90NAzR06pHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/Cy2jPZ7oGwFrymRDIAI634bpPNY.roa
Signing time: Sat 01 Jan 2022 11:02:17 +0000
ROA not before: Sat 01 Jan 2022 11:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200148
IP address blocks: 212.102.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25508500 (0x1853a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36dbff68370e755d8c7272bdd0d033474ea91e5d
Validity
Not Before: Jan 1 11:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b2da33d9ee81b016bca644320023adf86e93cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:f4:2a:37:c5:9d:30:38:05:e4:b0:29:02:
3f:cc:0e:47:c1:04:12:60:89:56:79:4e:0b:13:23:
4b:7b:c2:a3:ca:5e:d3:88:da:6b:5c:c8:4b:a4:dd:
2d:99:e8:5c:a5:06:56:25:31:df:12:88:4f:ff:7a:
05:84:72:cb:70:df:5e:6b:b8:4f:fb:90:8f:e7:f1:
65:dc:41:62:76:0b:10:2c:f0:69:21:7d:4b:ae:78:
97:ce:6a:66:53:8c:da:31:e9:a1:77:fe:d7:b1:40:
21:ad:61:80:f0:a2:62:f4:13:9c:c3:9f:b5:6e:71:
67:35:a7:6d:70:2e:d8:54:f9:a0:ec:b2:e1:4d:91:
cb:d4:b5:9a:0a:09:53:0a:53:85:51:3d:be:8e:de:
b0:d5:4a:d2:17:ef:73:83:30:e0:e3:b8:b1:f9:d6:
cf:28:9c:a2:2a:b2:d6:b2:08:f3:c4:cf:e4:7d:d7:
1f:8d:52:3c:83:f6:68:7b:cb:30:ae:37:5a:7f:02:
32:d3:c9:81:66:37:98:ca:a3:b5:1f:f4:df:5c:eb:
bb:f1:ec:e8:cf:67:e9:ae:8c:73:45:09:e6:01:e3:
f0:63:70:48:69:e5:39:0a:e2:25:cb:d8:e3:0f:5b:
91:1d:f3:70:05:60:5b:c3:dd:92:2c:09:cf:92:cd:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2D:A3:3D:9E:E8:1B:01:6B:CA:64:43:20:02:3A:DF:86:E9:3C:D6
X509v3 Authority Key Identifier:
keyid:36:DB:FF:68:37:0E:75:5D:8C:72:72:BD:D0:D0:33:47:4E:A9:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ntv_aDcOdV2McnK90NAzR06pHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/Cy2jPZ7oGwFrymRDIAI634bpPNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/Ntv_aDcOdV2McnK90NAzR06pHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.110.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6a:5a:08:d3:4f:28:75:10:0e:38:1c:ce:dd:63:b0:c3:a8:
6a:63:5c:67:c7:69:93:a1:53:14:c7:d7:54:65:e9:96:d9:3d:
54:fb:aa:74:bd:44:d9:45:20:a9:68:a5:a8:3b:4c:49:ef:d2:
be:42:d9:6a:76:2b:fe:5e:f2:03:64:af:7b:36:d4:3e:c2:c0:
1f:22:41:b4:f9:fd:9d:30:0f:16:c6:cc:35:94:79:10:18:64:
94:ec:1f:b3:d1:8b:0b:a1:94:ef:d3:f7:6e:ce:38:bf:c2:c8:
87:bb:7c:95:6f:34:05:27:e9:fc:af:7b:41:fc:6d:c1:b7:a1:
c4:4c:ac:05:91:7a:c4:46:15:32:6a:ee:4b:e7:e9:d6:ce:bf:
b7:73:32:b9:a3:23:d0:50:49:52:76:a1:12:0f:e4:19:53:0e:
a6:a1:d4:ff:a7:0d:27:45:72:b2:2c:2e:8d:8b:2e:ae:4f:dc:
60:5b:75:13:f9:1e:c4:22:a0:6a:48:79:e1:3f:99:b3:cb:25:
13:46:33:89:f6:4e:9d:0b:d9:3a:b5:e7:a0:28:be:db:48:47:
bf:64:6b:b0:66:48:d5:33:bf:3b:5b:0e:00:52:8a:ec:e9:32:
3d:28:c9:ba:51:f7:a5:26:59:58:17:8c:6d:9c:53:29:42:95:
73:07:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:23 2024 by rpki-client on console-fra.rpki-client.org