Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/Ja-T_hEPyyK8X1P731CoKMvV6XE.roa
File: Ja-T_hEPyyK8X1P731CoKMvV6XE.roa (raw, json)
Hash identifier: I8/D2xb73GmKeIPt5mtq2LAG9NZROZeeuJo0rpom2bA=
Subject key identifier: 25:AF:93:FE:11:0F:CB:22:BC:5F:53:FB:DF:50:A8:28:CB:D5:E9:71
Certificate issuer: /CN=9ebdffe0a0641b1096337a63f96cfd4fd38b8a19
Certificate serial: 01856BD371666AA2582F4DC1FA5215086BDF
Authority key identifier: 9E:BD:FF:E0:A0:64:1B:10:96:33:7A:63:F9:6C:FD:4F:D3:8B:8A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nr3_4KBkGxCWM3pj-Wz9T9OLihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/Ja-T_hEPyyK8X1P731CoKMvV6XE.roa
Signing time: Sun 01 Jan 2023 05:34:57 +0000
ROA not before: Sun 01 Jan 2023 05:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207412
IP address blocks: 212.102.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:71:66:6a:a2:58:2f:4d:c1:fa:52:15:08:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebdffe0a0641b1096337a63f96cfd4fd38b8a19
Validity
Not Before: Jan 1 05:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25af93fe110fcb22bc5f53fbdf50a828cbd5e971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8e:c2:e9:f5:4d:c1:d5:c0:df:32:57:32:1f:
ec:ce:21:5e:38:f9:53:66:2c:a9:81:76:4e:1e:eb:
c9:8b:f7:4a:7c:3a:58:ab:a2:ec:26:32:f9:ea:51:
60:5d:46:6d:93:eb:5e:a6:51:65:98:23:29:a9:8f:
1a:4b:e6:29:03:ac:a7:c6:34:79:e1:d2:c6:39:34:
a4:45:d9:b7:01:8c:a1:8a:9d:3d:5c:2a:46:d2:ff:
7e:6f:b3:2e:73:d1:7f:16:29:56:ab:81:38:b8:a8:
da:53:b9:91:84:fb:8a:30:7f:c3:14:62:25:5c:3b:
0e:54:39:5b:18:ec:0c:27:6d:a6:ac:e1:3a:c9:df:
97:7e:3d:48:2d:db:42:eb:74:6b:d1:a7:2c:fc:35:
3a:c4:1b:ca:46:cc:c8:7e:88:c9:6d:5d:3f:2c:07:
55:f7:30:4d:41:a1:52:ca:49:14:9e:f7:4c:44:cf:
d4:6e:57:14:0e:b2:50:c3:72:91:13:c2:14:f6:f1:
47:3b:e8:55:f9:9a:c2:ad:cb:9a:e7:fb:53:5c:8b:
31:43:66:df:60:70:ed:d6:5a:e9:77:ce:b8:dd:ce:
e1:60:56:29:24:43:a7:fa:49:df:71:ef:a9:e5:b0:
a2:ea:b7:d6:44:da:d3:ff:71:bb:e6:96:55:aa:a7:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AF:93:FE:11:0F:CB:22:BC:5F:53:FB:DF:50:A8:28:CB:D5:E9:71
X509v3 Authority Key Identifier:
keyid:9E:BD:FF:E0:A0:64:1B:10:96:33:7A:63:F9:6C:FD:4F:D3:8B:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nr3_4KBkGxCWM3pj-Wz9T9OLihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/Ja-T_hEPyyK8X1P731CoKMvV6XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/nr3_4KBkGxCWM3pj-Wz9T9OLihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.111.0/24
Signature Algorithm: sha256WithRSAEncryption
54:76:99:53:62:33:2c:c2:2f:d7:fb:0a:ef:45:65:65:cf:b6:
16:3f:18:6c:cf:59:46:83:3d:7b:f0:a9:74:8c:e0:e0:e0:82:
25:2d:b9:3d:3b:83:18:e3:c5:45:32:e8:68:b0:a9:76:ae:40:
f2:63:5e:fe:bb:43:53:f7:d2:db:9a:23:af:4d:a1:38:e0:e4:
31:bb:fe:9a:3b:a7:94:07:eb:58:9b:47:de:f9:9f:55:33:a7:
2e:57:29:a9:a8:5a:13:0a:9c:a5:56:63:c2:16:71:b4:00:a9:
20:b3:a6:d2:a7:2f:13:af:bf:21:76:76:67:23:ee:65:1f:4e:
24:ab:79:e0:f4:2e:96:b2:73:89:6f:88:95:c1:c5:73:fc:9c:
28:2b:02:cd:47:bc:cd:4f:0d:35:4b:3a:f6:34:35:c0:8f:45:
d5:ca:96:2d:77:fa:33:8a:f8:21:51:2f:86:fa:e1:1e:59:2a:
5a:fc:ee:09:c1:f2:56:72:cb:26:5c:01:56:d0:00:4b:84:69:
71:22:db:01:af:15:2e:8b:af:46:6d:2b:b2:a9:b3:28:34:42:
1f:7d:6a:3d:08:e7:18:39:f3:af:54:f0:22:60:0f:2f:32:45:
25:9f:e0:d3:71:6a:d8:f5:60:a2:57:8b:ea:7a:0a:53:96:67:
4f:9a:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:12 2025 by rpki-client