Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/XepOhwSh90WL9FdpWT8Djqv_ecU.roa
File: XepOhwSh90WL9FdpWT8Djqv_ecU.roa (raw, json)
Hash identifier: EK26BADtzmzpDmrNox5qzPPpvkPNVkJCpI5wzN4sIOc=
Subject key identifier: 5D:EA:4E:87:04:A1:F7:45:8B:F4:57:69:59:3F:03:8E:AB:FF:79:C5
Certificate issuer: /CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Certificate serial: 018BF6A61579931B931F72B3B2963A3A6180
Authority key identifier: 3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/XepOhwSh90WL9FdpWT8Djqv_ecU.roa
Signing time: Wed 22 Nov 2023 10:49:21 +0000
ROA not before: Wed 22 Nov 2023 10:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 212.12.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:a6:15:79:93:1b:93:1f:72:b3:b2:96:3a:3a:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Validity
Not Before: Nov 22 10:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dea4e8704a1f7458bf45769593f038eabff79c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:02:ec:4f:2c:fd:c0:eb:cf:b5:f8:b3:68:
37:33:54:3e:91:3d:74:37:01:ab:72:50:de:11:0f:
47:a6:3e:38:af:c3:b6:02:6d:91:6a:db:1d:d5:68:
fe:18:29:46:9e:eb:17:91:45:a4:f6:45:57:72:19:
57:da:4c:7f:9b:75:9d:91:07:30:4c:3b:86:41:ea:
dd:ba:41:40:f8:ed:d7:d0:2b:3e:de:b9:df:02:ab:
3d:d6:78:81:a9:c7:30:a9:b6:02:42:5b:ee:87:9f:
ba:8e:3e:a8:59:04:b8:ca:67:e5:78:ce:34:ec:86:
80:5d:32:ee:05:99:a7:c3:07:81:7b:4e:50:18:3e:
8a:ce:31:df:fb:fa:c9:77:c6:48:14:4b:03:6b:31:
1f:47:2f:e9:bd:e6:10:02:e4:71:c0:52:9c:01:8c:
10:98:1d:f5:3b:5b:09:45:a5:b8:fd:6a:03:5a:09:
a6:ef:4a:5f:fd:af:1b:dd:9f:e9:18:30:11:a6:f4:
78:6f:d2:cc:2e:70:2a:35:14:47:fd:e4:7e:91:b5:
1d:8f:7b:a6:5a:76:0e:ac:b1:06:6c:b0:29:0b:67:
99:98:95:f3:c9:77:04:2d:73:1a:6b:26:90:8a:c5:
c4:ed:1a:f9:26:e9:0c:01:3f:d8:0f:f4:8a:88:bf:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:4E:87:04:A1:F7:45:8B:F4:57:69:59:3F:03:8E:AB:FF:79:C5
X509v3 Authority Key Identifier:
keyid:3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/XepOhwSh90WL9FdpWT8Djqv_ecU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.12.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d8:53:e1:0e:48:1c:c2:f7:31:2c:04:25:3d:a8:f9:a2:63:
2e:5f:e6:c4:08:af:ee:5b:b2:da:f2:a3:44:ef:72:1e:be:cf:
1b:81:5f:4e:99:20:56:11:43:fa:5e:3b:92:29:74:47:28:0f:
37:cb:5f:fd:b2:59:df:48:1a:51:a3:79:09:68:86:a2:16:e0:
c4:0d:f3:4f:c4:80:dc:6f:06:80:19:dc:8b:f8:c7:56:49:ec:
df:f8:48:80:1a:a7:bc:97:03:cd:08:c1:59:d4:5e:ae:c4:4d:
15:05:ff:08:74:56:6c:b6:97:67:03:55:7a:6e:74:4d:44:e1:
92:99:4f:a8:76:75:b5:47:c4:5f:91:8f:87:32:d5:d3:af:e4:
17:ae:24:45:c0:04:dd:e0:0a:f5:c4:c8:67:f5:56:dc:64:75:
63:31:fd:18:9a:f6:0c:a2:90:ba:99:91:e4:e9:b2:d0:96:aa:
f4:6d:97:e9:7a:69:67:06:17:63:07:8d:cc:d9:f7:2e:dd:6f:
34:94:6c:2c:d0:29:bb:5a:49:fa:0c:ee:13:c7:8d:84:03:47:
82:49:cd:b1:35:ef:9a:ed:c5:9e:12:af:61:85:db:96:e7:b6:
8a:7f:ba:c6:ad:a6:22:7e:9d:38:46:19:6c:c9:32:1c:c9:8a:
2b:a1:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:28 2025 by rpki-client