Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/WRJMUYeRixw27CAPxZImqPYkDlU.roa
File: WRJMUYeRixw27CAPxZImqPYkDlU.roa (raw, json)
Hash identifier: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=
Subject key identifier: 59:12:4C:51:87:91:8B:1C:36:EC:20:0F:C5:92:26:A8:F6:24:0E:55
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 01941FFA755255BF63DD65C8257B08ACEBFB
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/WRJMUYeRixw27CAPxZImqPYkDlU.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8982
IP address blocks: 212.120.0.0/19 maxlen: 19
212.120.0.0/23 maxlen: 23
212.120.2.0/24 maxlen: 24
212.120.3.0/24 maxlen: 24
212.120.4.0/24 maxlen: 24
212.120.5.0/24 maxlen: 24
212.120.6.0/24 maxlen: 24
212.120.7.0/24 maxlen: 24
212.120.8.0/24 maxlen: 24
212.120.9.0/24 maxlen: 24
212.120.10.0/24 maxlen: 24
212.120.11.0/24 maxlen: 24
212.120.12.0/24 maxlen: 24
212.120.13.0/24 maxlen: 24
212.120.14.0/24 maxlen: 24
212.120.15.0/24 maxlen: 24
212.120.16.0/24 maxlen: 24
212.120.17.0/24 maxlen: 24
212.120.18.0/24 maxlen: 24
212.120.19.0/24 maxlen: 24
212.120.20.0/24 maxlen: 24
2a03:2560::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:52:55:bf:63:dd:65:c8:25:7b:08:ac:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59124c5187918b1c36ec200fc59226a8f6240e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:53:ec:ed:ff:49:54:eb:03:31:45:ab:80:
de:30:15:87:94:af:d2:4d:57:93:7e:80:4c:d9:73:
46:6e:91:bc:50:1d:07:37:6f:74:72:2a:58:5f:b9:
ff:8a:d4:ab:0b:0d:b2:30:7d:d0:4e:c8:20:79:8e:
92:42:1c:42:18:39:91:a8:af:df:7e:0d:12:bb:17:
99:94:fc:62:bd:83:4c:b4:3f:5f:a8:67:f6:c9:e3:
5e:6a:30:06:bb:03:ca:d7:85:9a:0c:f1:3f:ec:cf:
81:e8:a3:04:00:71:ae:5f:42:3b:e6:c0:bb:f2:b7:
c0:fa:c6:48:62:85:11:c7:34:e6:9f:52:43:8f:2c:
0e:df:3c:d5:90:35:1f:58:f2:ea:85:cb:e0:ee:f0:
ff:44:f0:ab:8c:77:6f:10:55:41:1e:4e:4d:fc:88:
22:47:c7:44:ee:74:7d:69:b2:6d:e2:09:03:fb:5e:
df:be:1f:9a:54:b1:25:4d:4f:88:e7:8b:d9:6d:aa:
71:5d:7c:4e:7b:53:dd:f6:86:66:c6:9d:04:54:dd:
35:33:27:f1:49:55:e9:d3:36:51:d4:86:c2:13:e4:
dd:9a:f5:2d:33:92:10:30:49:5b:9a:90:c5:d0:ed:
9c:df:dd:cb:08:fc:c1:89:cd:a4:5e:a0:da:fe:9e:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:4C:51:87:91:8B:1C:36:EC:20:0F:C5:92:26:A8:F6:24:0E:55
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/WRJMUYeRixw27CAPxZImqPYkDlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.120.0.0/19
IPv6:
2a03:2560::/32
Signature Algorithm: sha256WithRSAEncryption
e5:ac:6e:b2:90:a2:5b:34:9d:f9:02:fa:d2:5c:ff:b4:49:5d:
f9:db:37:7e:36:57:26:9e:2d:a0:22:3a:14:5c:84:25:a2:ac:
4a:5e:92:44:5c:8b:66:ba:25:de:f9:fc:6c:c5:81:ef:b5:42:
75:67:4c:80:6f:ac:9c:36:74:36:0b:55:83:e1:62:b8:ad:6b:
44:79:23:6c:a4:ba:1f:53:9e:49:4b:c6:89:7a:64:be:eb:5f:
42:cb:3b:de:91:37:2b:9c:9b:18:40:79:82:c2:8c:c2:71:7f:
17:15:dd:94:96:50:8c:b1:45:fc:92:f4:93:ef:66:7b:7b:85:
8b:82:f8:07:54:5f:6a:0f:af:c7:a2:8e:f0:82:2a:17:aa:72:
bd:ac:f3:6c:56:32:74:c2:e4:51:3a:63:ca:ce:4a:ab:13:de:
d3:9b:f6:4a:3c:f1:88:e6:c8:c6:c1:59:24:d9:2c:ed:94:b0:
11:58:e5:38:9f:1f:25:e6:9d:28:42:4f:24:5e:a7:8c:c5:95:
e0:fc:0c:de:79:df:1d:fe:11:9f:bb:b1:96:93:c3:2c:d6:1a:
1d:68:ba:8a:31:26:64:6a:92:43:cb:8a:34:bf:6f:e8:61:e7:
84:32:89:a0:3e:a5:9a:af:49:5d:43:97:13:4a:47:7a:87:8e:
30:dc:d7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net