Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/zCtBNzsS88eiqIGgRpUY9DMy154.roa
File: zCtBNzsS88eiqIGgRpUY9DMy154.roa (raw, json)
Hash identifier: QS7iz+Q6R0fmI/vHu4vdT5FVO+nA1KKysY7PEcWtYxQ=
Subject key identifier: CC:2B:41:37:3B:12:F3:C7:A2:A8:81:A0:46:95:18:F4:33:32:D7:9E
Certificate issuer: /CN=29b29a1c0097a59b475e033d119044e670f8ff15
Certificate serial: 058DEFC7
Authority key identifier: 29:B2:9A:1C:00:97:A5:9B:47:5E:03:3D:11:90:44:E6:70:F8:FF:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbKaHACXpZtHXgM9EZBE5nD4_xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/zCtBNzsS88eiqIGgRpUY9DMy154.roa
Signing time: Sat 01 Jan 2022 00:58:53 +0000
ROA not before: Sat 01 Jan 2022 00:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20810
IP address blocks: 212.102.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93188039 (0x58defc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b29a1c0097a59b475e033d119044e670f8ff15
Validity
Not Before: Jan 1 00:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc2b41373b12f3c7a2a881a0469518f43332d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:73:f0:63:19:e6:81:47:ac:0c:0b:73:f9:
36:91:dd:9f:3f:a7:59:af:3a:fa:aa:b7:89:75:2e:
79:3c:e5:bc:32:9e:9b:df:6c:16:ca:a8:6d:05:31:
bc:62:43:04:68:db:f7:9c:58:74:38:eb:66:43:e5:
dc:19:d9:cc:fe:03:5f:77:ff:25:44:ff:92:f7:d7:
59:10:16:06:8b:44:22:37:0b:0e:ab:8e:5c:65:17:
2f:6d:b9:a8:34:99:36:80:50:fb:df:ba:ac:91:d9:
e8:39:e7:43:c5:6f:d8:cd:28:62:59:e0:79:e9:86:
6d:b5:9a:31:5f:7a:c0:14:50:62:a0:c0:c7:c0:77:
c4:61:22:18:d1:20:5d:dc:b3:84:0d:33:6d:6b:e8:
8a:ff:9f:44:63:7f:d1:b0:e7:19:77:38:a7:15:52:
ad:da:fa:ad:42:4b:cd:69:88:73:25:60:f8:31:a9:
26:96:52:f7:14:b3:cb:c1:e4:92:69:49:8b:d2:28:
e7:55:1d:b0:33:7a:40:1c:76:74:d8:0a:ec:f9:97:
29:a6:ba:79:2d:85:45:48:f7:c5:29:69:d4:c3:78:
b5:36:ef:eb:42:3f:62:c4:fa:b5:c5:45:f9:2b:08:
65:de:57:7c:3c:ad:69:a0:65:a2:3b:bd:1e:c4:8f:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2B:41:37:3B:12:F3:C7:A2:A8:81:A0:46:95:18:F4:33:32:D7:9E
X509v3 Authority Key Identifier:
keyid:29:B2:9A:1C:00:97:A5:9B:47:5E:03:3D:11:90:44:E6:70:F8:FF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbKaHACXpZtHXgM9EZBE5nD4_xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/zCtBNzsS88eiqIGgRpUY9DMy154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/KbKaHACXpZtHXgM9EZBE5nD4_xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.118.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ef:43:df:08:56:fd:3e:de:4b:ba:df:f1:d5:0c:c8:73:f5:
ac:af:a4:50:06:dd:dc:81:a1:be:98:a7:39:da:74:0a:87:15:
00:90:3e:d5:2d:44:6e:82:66:3f:6c:74:39:64:17:42:f3:5b:
4e:7b:b8:85:e9:b5:ac:86:f7:c0:11:63:01:6a:56:24:07:af:
ca:72:33:af:6e:6e:94:3a:40:86:e9:1b:01:2e:35:26:3c:74:
bf:24:34:e8:08:46:a8:b2:cd:d0:b6:85:3b:bd:5c:61:7d:bf:
48:31:73:64:65:cb:f5:6b:91:ce:4b:64:66:da:2c:66:d5:bf:
e3:24:69:3b:2d:4e:e9:9c:b4:a2:bd:6f:16:e1:b2:30:15:e6:
c9:31:4d:d7:0a:99:05:90:e3:f4:c2:aa:28:e6:e2:a9:1d:d6:
79:60:05:cf:20:1d:bc:1e:67:2a:ae:90:7c:df:9e:d7:be:a2:
6a:06:ec:17:c7:d0:d3:68:0a:aa:7a:72:60:ee:8d:62:3e:0a:
ec:0d:fe:2d:6b:4c:9b:0f:a3:6e:cd:c6:53:b7:bf:9a:71:8c:
24:cf:bc:ec:73:81:6b:dd:e9:8f:74:9c:85:c6:3f:d4:73:5b:
2c:2c:6c:24:4c:e3:97:5a:cb:1e:3c:7d:38:09:78:6c:94:40:
01:ea:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:57:25 2025 by rpki-client