Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/udk-u4Z0Mnq8ETsIWMGGfPD9KIQ.roa
File: udk-u4Z0Mnq8ETsIWMGGfPD9KIQ.roa (raw, json)
Hash identifier: 6lFIx3iFo0RuCcwqu/cKZvgXLJDG7rPGCTVXMdTiSzE=
Subject key identifier: B9:D9:3E:BB:86:74:32:7A:BC:11:3B:08:58:C1:86:7C:F0:FD:28:84
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F6353A06EE7ECDAE8D8CABA70EF04
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/udk-u4Z0Mnq8ETsIWMGGfPD9KIQ.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 212.30.56.0/24 maxlen: 24
212.30.57.0/24 maxlen: 24
212.30.58.0/24 maxlen: 24
212.30.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:63:53:a0:6e:e7:ec:da:e8:d8:ca:ba:70:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9d93ebb8674327abc113b0858c1867cf0fd2884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:2b:a1:c5:72:66:79:35:1d:93:50:4b:78:
53:9e:c1:80:e9:16:87:5b:18:f9:49:4f:c4:79:e0:
89:36:68:5c:1a:88:a2:ec:4e:3c:7e:2e:d1:b1:d6:
93:e0:10:5d:d4:93:f2:e1:05:dc:a1:13:9e:d8:b7:
7e:74:99:8f:a7:26:8c:82:35:da:30:cf:81:e4:73:
36:03:d7:af:26:28:97:c6:92:07:fe:a5:b4:5c:2f:
82:a4:47:21:09:62:3c:50:18:74:26:9a:b2:63:6a:
2d:ae:6c:e2:48:7f:21:81:3a:90:68:5e:ac:bd:2b:
45:83:c0:7e:67:58:81:a8:a3:df:e4:df:34:b3:f0:
8a:53:4f:8b:dd:0c:60:b9:32:09:3a:a2:8e:e0:9c:
74:2e:3d:b5:2e:6b:81:92:61:67:59:6c:f4:bd:2e:
26:d5:a2:4d:55:83:6a:08:5b:00:3f:21:31:fe:93:
5a:27:9e:f5:21:8b:c1:6e:3d:8f:a0:9d:ed:c5:6d:
f9:a9:76:4b:da:ac:72:68:7e:85:74:d6:24:70:5d:
04:c7:37:04:c6:11:fb:54:7c:5c:d0:c1:c6:7d:8c:
ee:b5:a0:79:00:c7:fe:e4:6d:d3:ae:85:16:3e:04:
07:52:44:26:77:c5:9e:fa:0e:e3:3a:f7:f7:f0:61:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:3E:BB:86:74:32:7A:BC:11:3B:08:58:C1:86:7C:F0:FD:28:84
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/udk-u4Z0Mnq8ETsIWMGGfPD9KIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:9c:d2:43:59:a8:84:b2:fd:59:ac:2f:15:99:7e:d8:3d:54:
7f:f8:26:92:5b:87:ac:be:4a:24:b3:b6:4d:21:dc:3b:1b:fe:
29:41:69:90:f5:be:ad:74:b2:d3:ec:a9:67:14:ab:e9:30:68:
1a:ba:4a:70:89:c3:73:20:3d:e3:0f:5b:c0:16:e9:90:55:e4:
e5:00:68:d7:76:2a:b6:9c:4b:fd:91:11:23:72:f7:17:c5:67:
fa:a2:d7:b4:17:49:14:9d:ea:a7:cc:25:49:63:9f:e5:f5:84:
dd:da:45:c4:30:e3:91:2d:1d:95:fe:ed:ec:1b:71:33:7b:04:
04:10:5e:d5:17:03:09:b5:d9:92:68:73:be:69:77:1c:13:1e:
aa:0d:4a:29:b0:37:8a:e3:22:24:24:a5:6c:de:c3:fa:b2:70:
c1:c3:66:22:a1:44:68:d2:69:c5:48:3b:e2:5e:ba:57:aa:c3:
00:11:79:2f:31:db:22:08:cf:94:bb:ed:e8:05:b6:17:45:8a:
f5:77:c1:e2:c8:3c:b6:81:91:77:02:c5:18:ac:ce:8b:67:ea:
12:6f:3d:ae:af:f9:fb:c6:69:34:bf:ed:7b:5c:0d:cf:d9:54:
d6:95:04:19:26:cd:f3:0e:e1:36:89:c2:c2:15:ec:e0:c3:5a:
0e:0a:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:13 2025 by rpki-client on console.sobornost.net