Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/uX23_mzV3I9ZD7Q7zQwf1E3ofQo.roa
File: uX23_mzV3I9ZD7Q7zQwf1E3ofQo.roa (raw, json)
Hash identifier: FeYP7aaDi48jmb8v+wyHZazNXEJBqq9Kz30r2ZHOodg=
Subject key identifier: B9:7D:B7:FE:6C:D5:DC:8F:59:0F:B4:3B:CD:0C:1F:D4:4D:E8:7D:0A
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 019425221F0EFAADA26B67B4BE90B0FA3B84
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/uX23_mzV3I9ZD7Q7zQwf1E3ofQo.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209464
IP address blocks: 212.138.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1f:0e:fa:ad:a2:6b:67:b4:be:90:b0:fa:3b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b97db7fe6cd5dc8f590fb43bcd0c1fd44de87d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:8f:7e:dc:e8:4d:d5:95:c4:9c:75:c2:b7:
bc:9e:99:43:3e:be:7c:52:9c:8d:b9:5f:05:30:27:
b9:9f:81:01:2c:bf:1a:cc:76:16:f0:f3:c2:4b:ec:
47:0d:cc:56:be:fa:e1:1d:04:0d:82:21:72:5d:3d:
36:b5:1e:6b:ad:e5:64:3f:81:ce:e6:e4:68:b6:c8:
0b:bd:44:e6:d5:a9:eb:bd:85:77:f7:1f:1c:35:08:
19:4e:ba:46:ad:c7:78:4e:98:e6:4a:aa:82:79:2e:
63:a1:c1:d8:61:7a:c7:dc:28:8c:81:20:74:7f:70:
4b:5c:27:fe:06:3c:57:87:5d:52:ea:e5:6e:e4:7f:
dd:90:c9:e6:c0:de:b4:1c:de:17:40:12:db:07:51:
73:28:ec:36:33:44:e6:4d:a1:b6:00:74:e9:fe:e0:
1c:e6:38:5f:17:97:cf:9e:f4:52:a5:18:61:09:5f:
74:37:3f:6d:3b:9b:44:73:6d:64:fa:e0:c3:53:ba:
23:ae:54:78:58:dc:b8:1a:d8:a1:12:80:f5:de:dd:
c0:40:05:88:57:d6:c0:a6:10:12:4a:06:47:d1:dd:
07:67:3d:e2:19:b1:5c:de:4d:6b:81:24:18:e2:32:
fc:e2:7b:34:6d:84:cf:c6:3d:c3:f8:be:a9:a1:5b:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7D:B7:FE:6C:D5:DC:8F:59:0F:B4:3B:CD:0C:1F:D4:4D:E8:7D:0A
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/uX23_mzV3I9ZD7Q7zQwf1E3ofQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8e:b8:c8:3f:fb:5a:e5:bd:8b:78:20:5c:a9:aa:c4:6a:64:
82:81:f8:0c:a3:cd:bb:20:c5:db:4c:d1:c1:82:5d:22:14:fa:
ff:bd:46:bd:b9:85:fc:d2:8b:42:7b:f5:a0:97:05:0c:e4:a9:
b9:b6:49:9d:92:76:5b:4d:0d:a7:f9:db:7c:1a:5e:8f:7e:e8:
67:29:7e:29:cc:08:2f:f6:6e:ca:0b:fd:ef:66:7f:9c:6d:3e:
44:51:40:40:98:83:ed:0e:93:98:cc:5a:7e:97:aa:f4:5f:c8:
2f:0e:ef:a1:bc:13:26:fe:d7:29:34:4c:05:55:1b:7e:dc:02:
d6:bd:fb:eb:fc:3c:da:b4:c5:88:b6:21:c1:9c:24:7c:82:b9:
b5:08:b6:88:9b:8c:99:c5:51:56:f7:9b:46:00:42:c7:e5:57:
85:38:54:4c:dc:74:ea:b0:16:ee:b1:cd:a1:7c:dc:4e:8e:f7:
31:74:a2:b8:74:60:69:df:19:78:29:23:7b:89:ff:00:e4:8b:
88:31:20:06:0b:d2:74:a4:2f:c5:f8:00:6a:fd:8f:fa:29:15:
02:16:33:7c:d6:02:39:1f:8c:36:15:75:86:99:d6:bb:41:8b:
14:0d:32:6c:f1:4c:54:7d:35:78:e7:4f:a3:2f:d2:a3:b1:72:
e5:c4:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:32:31 2025 by rpki-client