Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa
File: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (raw, json)
Hash identifier: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=
Subject key identifier: BE:D3:5E:4F:16:67:1E:E3:2C:17:7A:E5:DD:94:8F:94:CA:20:EC:5D
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F622E9425B2ECFEEE7B969701921A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204356
IP address blocks: 212.30.32.0/24 maxlen: 24
212.30.34.0/24 maxlen: 24
212.30.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:62:2e:94:25:b2:ec:fe:ee:7b:96:97:01:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed35e4f16671ee32c177ae5dd948f94ca20ec5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:8a:cb:3f:35:9b:0f:c1:e3:b0:e1:95:0f:
90:2d:e5:94:a3:93:a1:87:0a:99:11:18:08:bf:d5:
49:e3:19:59:52:f7:01:b5:58:df:bc:bf:85:09:8f:
b4:20:91:0c:78:93:9d:ba:36:5e:48:93:56:50:84:
11:8f:59:02:5b:31:08:84:e9:2d:38:22:ec:16:cb:
59:36:06:14:a1:31:43:53:06:99:1b:bc:f2:6d:ad:
97:a1:6b:33:be:9a:76:3c:fa:b2:81:d8:eb:73:72:
39:55:23:ef:87:78:16:89:f3:f5:75:5d:6b:35:7f:
ad:36:e1:02:8c:51:95:d5:e0:7e:e7:db:0e:59:b9:
61:79:a3:fb:be:f5:d0:a5:3f:e9:66:63:2b:06:83:
d7:96:89:85:94:26:e2:ab:d9:14:87:9e:e8:36:66:
00:27:ff:90:98:51:fb:e7:4e:f1:cb:87:a9:92:47:
17:2f:5d:63:ec:50:1a:8a:d5:9b:57:ac:e2:4d:a4:
61:5f:e6:35:d5:bf:bd:51:4d:ce:49:ec:c5:8e:53:
c5:36:5e:c4:ff:73:01:11:a3:cf:f5:1f:9d:86:e8:
14:7d:41:2d:24:90:4e:a6:c9:45:eb:fa:a7:a8:fb:
39:96:59:5d:c0:f6:12:77:d0:93:a0:e2:e5:59:a0:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:5E:4F:16:67:1E:E3:2C:17:7A:E5:DD:94:8F:94:CA:20:EC:5D
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.32.0/24
212.30.34.0/24
212.30.39.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7f:22:ae:2e:4b:25:72:9a:73:2b:3f:3f:0f:68:e5:57:ec:
c7:7a:35:bf:fb:6c:78:41:a4:d2:50:fb:34:b2:07:a7:23:51:
b2:78:76:80:aa:90:de:8a:c8:33:ca:c6:94:7a:f1:af:89:d4:
56:db:49:1f:17:aa:15:ae:30:57:4c:00:41:dd:b6:4f:26:09:
ed:b8:8c:67:ec:46:c2:8b:55:74:4e:43:d5:30:a9:19:6b:13:
04:f3:1b:64:28:08:02:9a:bb:18:a2:2c:e4:86:6e:04:5d:fe:
ff:f0:4f:04:65:c5:a0:3b:3f:7b:65:d8:eb:6d:32:90:ee:0e:
fd:e2:c0:b7:73:be:b4:f1:c0:34:c3:30:fb:02:22:97:a4:dd:
70:83:0c:46:f7:3d:5c:6d:54:79:09:a0:00:1e:ec:4d:91:4f:
80:16:d1:bf:c6:4a:c3:0d:e4:66:9c:24:a2:a1:86:50:23:ff:
63:b1:fc:63:a9:47:1e:0c:86:37:f7:1a:7f:58:34:e6:8f:af:
bc:33:00:8f:91:7f:f3:c9:10:c1:12:5a:07:80:e6:86:c3:e5:
96:85:3b:94:04:e6:eb:0b:ee:93:eb:c7:63:d1:25:d2:b3:f4:
c9:a7:dc:bb:0a:3d:a9:6b:bb:5c:b5:9b:c3:70:bb:e0:41:79:
46:ff:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net