Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/_H31n0VX0qjA9cl9U_c9mZ2xI1E.roa
File: _H31n0VX0qjA9cl9U_c9mZ2xI1E.roa (raw, json)
Hash identifier: 9x5PNhcIWt5ORofTPwWxEuoMULwiuxPd2nsCtzIW4tE=
Subject key identifier: FC:7D:F5:9F:45:57:D2:A8:C0:F5:C9:7D:53:F7:3D:99:9D:B1:23:51
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B67AE77A531630AEE4EFB0B267CF8B
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/_H31n0VX0qjA9cl9U_c9mZ2xI1E.roa
Signing time: Thu 02 Jan 2025 15:50:57 +0000
ROA not before: Thu 02 Jan 2025 15:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41269
IP address blocks: 212.110.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7a:e7:7a:53:16:30:ae:e4:ef:b0:b2:67:cf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc7df59f4557d2a8c0f5c97d53f73d999db12351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:04:67:0f:24:d7:fb:77:1e:20:9f:52:55:
6a:52:47:50:de:05:a2:ed:9c:31:67:e3:02:79:59:
db:84:28:59:66:b5:af:fb:c0:c3:cc:7d:76:f3:1c:
47:29:0f:46:d9:0d:16:a8:73:09:59:a7:c6:a5:4e:
bd:79:c7:4c:8e:8b:20:85:fc:f8:d5:bb:72:99:fa:
9b:42:01:01:71:af:f3:10:28:7a:aa:33:60:4a:1d:
ab:a0:78:83:87:6e:5e:7b:c2:e5:e7:c0:5d:d4:d9:
9d:fb:fa:fd:6c:99:ef:8d:ad:97:d1:c0:a3:23:d4:
0c:93:9e:5d:31:e2:4d:eb:1c:d7:4f:ce:e5:31:fd:
bb:2b:f0:2c:92:83:72:86:30:2b:78:a8:31:78:bf:
c3:bd:1b:58:76:2c:9d:7a:e0:fe:d7:d6:0b:d2:58:
e9:17:44:3c:10:44:fb:3d:c9:d3:d6:73:c6:de:11:
34:f9:64:16:dd:b7:83:a5:a3:97:1b:d8:81:c4:64:
d7:75:ff:95:d7:02:1c:27:14:ca:a5:4b:07:49:03:
3d:3e:d4:58:34:fe:8d:d2:9a:ab:43:9a:55:b3:60:
b1:c3:84:c6:64:c6:8f:16:d9:fb:c3:9c:c6:85:f5:
28:d1:a1:97:93:e2:b7:d4:4c:5f:26:19:ff:1f:f2:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:F5:9F:45:57:D2:A8:C0:F5:C9:7D:53:F7:3D:99:9D:B1:23:51
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/_H31n0VX0qjA9cl9U_c9mZ2xI1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.158.0/24
Signature Algorithm: sha256WithRSAEncryption
35:76:6e:47:73:b2:cb:40:c9:b4:ee:01:b4:ad:1d:b1:5d:03:
cd:08:ee:a5:43:88:0a:b9:b2:9b:37:84:ae:35:3a:ef:97:0f:
f2:14:38:ba:4c:e6:30:4f:2b:a4:83:66:01:5b:7a:27:b9:12:
00:ad:df:ed:3a:b0:f7:4d:1a:4d:a8:9e:f5:9d:a8:70:20:96:
51:47:7a:69:56:00:96:e7:9f:5e:99:39:52:d4:f0:43:ba:02:
fb:84:2c:df:45:c4:ae:d6:1b:31:e3:3a:1b:07:93:83:67:0b:
7e:55:97:50:f0:be:e3:4a:a5:22:a0:48:81:60:a9:0e:8f:4c:
cb:99:1f:35:ec:b7:95:42:67:bb:3c:c7:34:9e:f3:26:68:53:
ab:f4:6d:a3:10:96:f5:b7:0b:80:06:98:45:55:1d:ec:13:d8:
11:36:55:d3:77:9f:8f:51:38:14:6b:e7:d1:06:73:25:8e:03:
4c:0f:b2:b1:e9:83:b4:09:a9:7e:9d:d7:82:58:15:5a:b4:f0:
bb:a1:10:d1:c0:4c:75:7d:7c:ba:dc:ab:0a:c7:5c:bf:6e:b4:
97:59:dd:0d:43:5b:1f:fb:f5:e9:56:62:c9:3a:a5:b7:66:75:
82:74:ca:99:a6:da:e7:54:a5:e7:ba:53:7b:07:5a:20:0b:1d:
eb:66:90:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntnrnelMWMK7k77CyZ8+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjUwMTAyMTU1MDU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzdkZjU5ZjQ1NTdkMmE4YzBmNWM5N2Q1M2Y3M2Q5OTlkYjEyMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6oEZw8k1/t3HiCfUlVqUkdQ3gWi
7ZwxZ+MCeVnbhChZZrWv+8DDzH128xxHKQ9G2Q0WqHMJWafGpU69ecdMjosghfz4
1btymfqbQgEBca/zECh6qjNgSh2roHiDh25ee8Ll58Bd1Nmd+/r9bJnvja2X0cCj
I9QMk55dMeJN6xzXT87lMf27K/AskoNyhjAreKgxeL/DvRtYdiydeuD+19YL0ljp
F0Q8EET7PcnT1nPG3hE0+WQW3beDpaOXG9iBxGTXdf+V1wIcJxTKpUsHSQM9PtRY
NP6N0pqrQ5pVs2Cxw4TGZMaPFtn7w5zGhfUo0aGXk+K31ExfJhn/H/L9yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPx99Z9FV9KowPXJfVP3PZmdsSNRMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvX0gzMW4wVlgwcWpBOWNsOVVfYzltWjJ4STFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G6eMA0G
CSqGSIb3DQEBCwUAA4IBAQA1dm5Hc7LLQMm07gG0rR2xXQPNCO6lQ4gKubKbN4Su
NTrvlw/yFDi6TOYwTyukg2YBW3onuRIArd/tOrD3TRpNqJ71nahwIJZRR3ppVgCW
559emTlS1PBDugL7hCzfRcSu1hsx4zobB5ODZwt+VZdQ8L7jSqUioEiBYKkOj0zL
mR817LeVQme7PMc0nvMmaFOr9G2jEJb1twuABphFVR3sE9gRNlXTd5+PUTgUa+fR
BnMljgNMD7Kx6YO0Cal+ndeCWBVatPC7oRDRwEx1fXy63KsKx1y/brSXWd0NQ1sf
+/XpVmLJOqW3ZnWCdMqZptrnVKXnulN7B1ogCx3rZpDj
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:23:45 2025 by rpki-client