Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/r8pB6OBljZlMvGeFwUgatLrYkjM.roa
File: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (raw, json)
Hash identifier: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=
Subject key identifier: AF:CA:41:E8:E0:65:8D:99:4C:BC:67:85:C1:48:1A:B4:BA:D8:92:33
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 0194221F96C1A30DA0033F92C6EF408578DC
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/r8pB6OBljZlMvGeFwUgatLrYkjM.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209971
IP address blocks: 212.80.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:c1:a3:0d:a0:03:3f:92:c6:ef:40:85:78:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afca41e8e0658d994cbc6785c1481ab4bad89233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:09:43:9d:7f:d9:e8:06:48:a8:22:38:a0:
9d:b7:17:5c:9b:8a:ef:34:85:86:4d:27:63:97:8b:
f1:c6:f9:29:1f:11:4c:7b:5d:82:ec:cd:8b:7f:25:
6c:3b:b8:61:26:81:54:3c:b0:8b:d6:a1:f4:10:d4:
a5:3f:e0:50:8b:5a:bf:e8:63:b8:32:ca:5c:12:c3:
a6:84:a3:ad:49:91:11:2e:bb:f2:77:d9:0a:c9:81:
00:63:bf:3d:12:28:32:e0:a9:40:18:45:f8:5d:8e:
a7:ac:75:77:ad:62:62:03:6a:83:22:e3:93:98:42:
99:85:d9:2c:49:5d:15:95:0c:16:30:89:aa:70:75:
24:37:a2:fd:e2:a1:ed:c8:7c:54:82:e0:70:df:96:
88:9a:a9:46:be:b0:53:aa:e6:ad:70:51:36:ea:c0:
09:c5:43:be:38:6f:31:37:17:c2:e5:d6:03:29:1e:
91:aa:b3:fa:a2:fc:76:40:2d:ec:0f:51:d3:43:99:
e8:6b:4d:e6:7d:f7:56:73:99:b2:a8:50:2a:2d:c4:
a5:d1:3e:c0:0a:3f:2f:62:55:8b:23:0f:87:82:97:
a2:d1:da:1d:48:5d:be:3b:d3:b9:8f:b6:72:56:be:
00:c6:54:47:83:61:58:b5:f7:bd:bb:97:50:f1:eb:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CA:41:E8:E0:65:8D:99:4C:BC:67:85:C1:48:1A:B4:BA:D8:92:33
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/r8pB6OBljZlMvGeFwUgatLrYkjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.196.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:36:9a:3c:c3:7f:35:87:75:cd:a6:5c:06:8a:2d:74:ef:e0:
22:bc:cd:f4:a6:82:a3:26:e6:c3:ba:b2:aa:1e:d9:c9:cb:0c:
94:4e:7c:49:08:eb:dc:b1:88:62:e4:fe:06:9b:34:f7:a5:b4:
3f:9f:a0:54:71:5d:c3:72:ae:53:87:38:e7:35:1a:5c:7f:95:
7f:fd:60:fd:c9:1b:a8:df:80:4e:24:df:15:9c:4a:d9:53:f0:
13:57:fc:cd:8e:a5:6e:55:1b:31:98:93:48:e4:bb:00:bd:a7:
16:92:ed:d2:70:7e:9b:71:5f:1b:6e:19:e6:5d:3f:47:bb:ec:
39:bc:c0:e6:eb:37:9e:68:42:26:48:c3:13:d4:60:16:19:98:
43:f1:7f:23:4e:10:04:4d:47:c6:d4:92:7c:e0:15:29:7c:86:
af:55:1f:1e:74:46:ab:d1:61:8c:51:47:29:29:55:be:6a:cc:
a6:45:3d:4d:40:5a:cd:21:64:4f:53:af:5b:da:f4:7b:b9:23:
07:35:c6:3d:02:3e:28:f0:a9:d6:de:ee:d3:c5:30:2d:7c:8d:
75:72:c3:84:79:16:64:86:f5:d3:fd:97:ca:3f:bc:17:01:2b:
20:68:92:e2:20:7d:f5:ba:2d:b6:dc:b1:4e:c0:e3:40:81:3b:
e0:00:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:55 2025 by rpki-client