Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/mHX0FmbVMRqJAlWCzCmrhY01JJs.roa
File: mHX0FmbVMRqJAlWCzCmrhY01JJs.roa (raw, json)
Hash identifier: lTlxWXxEQJkGJvs557CO0nbvucEpOcbcDj+JEOR5KCA=
Subject key identifier: 98:75:F4:16:66:D5:31:1A:89:02:55:82:CC:29:AB:85:8D:35:24:9B
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019425221DCAD0DC8FBE7D99529E97FB3DB0
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/mHX0FmbVMRqJAlWCzCmrhY01JJs.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203172
IP address blocks: 123.253.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1d:ca:d0:dc:8f:be:7d:99:52:9e:97:fb:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9875f41666d5311a89025582cc29ab858d35249b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:14:db:9c:06:db:e3:05:68:66:83:0d:6f:
08:e2:3f:d9:27:1e:f1:18:e7:f6:61:34:4f:c1:a9:
a0:80:b8:f3:66:af:ec:8e:39:49:03:b0:75:12:aa:
de:19:62:ea:69:94:52:1e:91:98:f1:44:83:a4:f1:
bc:8b:a4:fc:f3:60:66:17:88:ee:cd:f2:7d:87:98:
f9:3f:0b:ff:c9:f1:c6:26:1b:85:52:70:ad:44:ae:
5b:22:48:dd:8b:25:d7:f2:f3:02:45:f5:a5:e5:06:
d1:0c:36:f1:c3:84:2f:6b:2f:e1:74:95:b1:2b:7f:
77:72:ae:61:02:7b:f0:ee:51:82:b6:21:84:6a:32:
d6:4a:ea:da:a6:5d:c8:67:6c:cc:f8:ab:e9:b1:d0:
e8:b1:73:81:eb:d3:27:d0:ba:bf:1b:6e:63:cc:ac:
f9:74:56:bc:16:b1:85:2e:6b:cf:37:b2:db:6c:ec:
7a:9f:06:f7:40:dd:a8:50:86:56:09:8f:bd:82:5f:
dc:75:69:44:99:9b:de:42:47:57:3b:de:34:41:43:
b5:b9:76:c1:09:f4:87:77:f7:19:4f:42:fe:21:04:
28:24:90:a4:ec:88:e6:1d:ba:8d:aa:b9:fa:86:c4:
f9:41:47:db:b9:73:01:26:fb:80:53:2c:bd:69:57:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:F4:16:66:D5:31:1A:89:02:55:82:CC:29:AB:85:8D:35:24:9B
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/mHX0FmbVMRqJAlWCzCmrhY01JJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.212.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:75:65:16:ea:34:34:c9:33:98:c5:b5:7e:3c:46:48:07:2d:
fe:ef:4e:57:14:25:7d:f8:89:8d:09:e1:55:b5:8b:15:22:b8:
6f:99:f8:3a:cb:87:83:c7:a5:20:db:77:db:78:45:a2:4e:70:
2a:98:b8:42:04:a7:11:02:9b:a0:ca:b1:a4:e9:59:d8:ec:82:
08:66:6b:5c:3c:05:08:d1:55:e8:6b:ef:96:08:c3:9d:dd:00:
43:bb:08:59:f5:63:3d:9d:5c:1e:5b:3b:8a:97:03:fc:d8:7e:
8e:cf:8f:56:1a:46:59:55:3f:4f:7d:cf:8c:8f:c2:43:a0:27:
c2:6d:f4:c7:63:d4:2c:3f:ec:bd:68:ae:e7:14:11:73:d0:5b:
91:1f:dd:d0:06:c0:23:8f:f1:1b:72:72:94:59:c4:fc:96:05:
e6:eb:04:8c:01:61:23:fa:0c:b3:09:85:e6:be:33:28:d1:30:
2d:8f:98:db:07:13:a5:54:10:b1:ad:9b:41:21:06:97:90:84:
0c:71:b3:9c:f3:7a:6b:70:3f:e5:9a:78:5a:bb:4d:05:6c:4d:
48:4e:6f:38:54:78:49:23:96:50:21:d4:c7:6f:e6:4b:1c:dd:
c8:89:52:df:43:8e:54:c3:5f:35:9b:f4:62:88:a6:7d:f3:20:
0c:6e:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:00 2025 by rpki-client