Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/gRGtwC6wQkqSwZdfgIJJyc_T9vQ.roa
File: gRGtwC6wQkqSwZdfgIJJyc_T9vQ.roa (raw, json)
Hash identifier: pR773tohe1zLoB1TDXOvywtcglMP3QvT0b3m6G7/FKM=
Subject key identifier: 81:11:AD:C0:2E:B0:42:4A:92:C1:97:5F:80:82:49:C9:CF:D3:F6:F4
Certificate issuer: /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial: 018CC8011B76A3708A9EC6D581DFEFBB63EE
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/gRGtwC6wQkqSwZdfgIJJyc_T9vQ.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213357
IP address blocks: 212.25.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1b:76:a3:70:8a:9e:c6:d5:81:df:ef:bb:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8111adc02eb0424a92c1975f808249c9cfd3f6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:3b:c9:f7:f0:9c:fe:52:b7:3f:1b:2f:5e:
96:df:74:39:ce:b3:f7:2f:0c:c4:80:a5:b2:05:df:
14:07:3e:02:e4:96:3f:9d:ea:66:c0:db:2e:3a:b2:
5b:fe:5a:39:ca:3c:33:d4:c0:48:81:98:a6:cc:c8:
a4:6b:c3:59:17:a0:2b:ed:dd:f7:99:ae:38:61:ff:
f3:f3:76:95:c5:64:bf:28:e0:9e:7d:a8:d6:33:44:
da:c3:b1:34:26:32:d1:8a:86:9e:74:e7:5c:50:83:
05:65:fc:61:67:dd:ea:df:7b:20:9f:17:55:20:a2:
89:39:5b:c7:6f:e3:ba:d2:8a:01:59:db:48:db:c0:
5f:02:66:6a:15:be:4c:83:ff:bc:51:37:c7:b0:4b:
d4:d5:b0:04:b4:05:3b:0c:cc:7d:69:ae:74:3c:30:
ee:12:84:3f:54:b4:73:ca:dd:37:41:0c:07:b2:88:
7f:a1:10:92:50:88:66:1a:7d:18:8c:ec:41:a3:28:
a9:4b:33:e4:43:52:96:11:27:3b:11:d0:c8:92:cd:
f5:2c:be:4f:fa:b8:bc:39:57:9c:cc:0a:1b:06:07:
ac:92:7e:97:74:52:b9:76:24:74:bc:46:d1:e5:5a:
71:38:4f:16:12:bd:36:a1:83:ec:ed:90:e1:0f:9d:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:AD:C0:2E:B0:42:4A:92:C1:97:5F:80:82:49:C9:CF:D3:F6:F4
X509v3 Authority Key Identifier:
keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/gRGtwC6wQkqSwZdfgIJJyc_T9vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.25.56.0/24
Signature Algorithm: sha256WithRSAEncryption
51:72:3a:76:f8:f3:cc:be:bf:49:53:29:84:b5:3f:46:bf:8d:
b9:cf:e6:18:87:51:89:f1:5e:fa:0b:99:3c:ca:d5:d8:96:cb:
4b:7e:3b:23:7b:4d:95:61:0c:f6:d6:1b:89:f4:87:c4:30:77:
0d:d1:fc:9f:e4:43:dc:26:d5:0c:b9:e7:1d:f4:89:f1:b4:fe:
bf:ec:7b:69:46:51:39:a2:81:bc:a2:fb:3d:6e:c8:eb:bf:41:
c4:c9:23:de:9c:10:4d:82:c5:49:d8:f5:8c:de:a5:87:f9:2d:
81:47:0b:20:ce:4a:38:c0:3a:54:22:6a:d5:14:69:5f:de:b8:
a9:ed:6a:da:21:b7:10:d1:98:46:82:c2:7b:35:da:39:79:28:
1e:d0:da:a6:34:b8:cb:f6:1e:df:bd:fd:d7:a5:0f:70:05:36:
25:20:b6:92:cf:3b:90:ea:30:98:bb:e9:ba:7b:6d:51:3a:25:
70:b0:30:81:ac:ab:5f:6f:08:75:40:ff:2c:ed:5c:ad:73:58:
8c:71:72:08:3d:1c:49:6f:03:d6:aa:8a:d5:32:9d:a5:fa:16:
3c:6c:c1:07:08:b8:6c:fd:86:14:81:cd:f1:9c:7c:28:75:f9:
4c:01:4f:c4:f3:a8:84:56:dc:eb:f1:18:2e:e6:49:16:b5:e6:
4d:ac:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 13:24:41 2024 by rpki-client on console-fra.rpki-client.org