Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/8UJJGtq_kUeMGpA_LxLMvT6KUOA.roa
File: 8UJJGtq_kUeMGpA_LxLMvT6KUOA.roa (raw, json)
Hash identifier: scssOWu2Z8G04tK1VSokYhRpEIxnZd24NU6YQjvW3tc=
Subject key identifier: F1:42:49:1A:DA:BF:91:47:8C:1A:90:3F:2F:12:CC:BD:3E:8A:50:E0
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 01942445223DF5D0F2DBE6597E8544E6F894
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/8UJJGtq_kUeMGpA_LxLMvT6KUOA.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9011
IP address blocks: 212.100.0.0/19 maxlen: 19
212.100.0.0/24 maxlen: 24
212.100.1.0/24 maxlen: 24
212.100.2.0/23 maxlen: 23
212.100.4.0/24 maxlen: 24
212.100.5.0/24 maxlen: 24
212.100.6.0/23 maxlen: 23
212.100.8.0/21 maxlen: 21
212.100.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:22:3d:f5:d0:f2:db:e6:59:7e:85:44:e6:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f142491adabf91478c1a903f2f12ccbd3e8a50e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:e2:ba:f8:8d:4b:ae:fc:ad:0b:4a:c1:b6:
8c:05:ce:bb:2b:46:18:b4:71:a1:90:5f:ce:31:e5:
0b:51:d0:1a:8f:6e:d3:4b:3d:a6:38:0f:cf:3d:e6:
31:53:46:ab:b3:4b:ef:a4:40:7f:c2:05:6a:1f:84:
2d:da:bd:a9:2f:cf:99:74:5e:db:2d:eb:01:e6:43:
a8:26:1f:d9:8f:e0:7b:42:36:84:39:01:55:ce:42:
e2:de:98:06:9b:42:6d:88:d3:e9:29:89:58:fe:f4:
2e:92:c3:d2:d2:37:33:fb:f3:28:14:87:71:75:60:
4c:39:f0:74:69:8d:1d:b1:94:b9:b9:77:b8:59:55:
ed:14:29:51:f5:c9:7b:fa:cf:cf:58:26:9c:b6:1e:
cb:73:88:03:1a:e4:72:b0:80:c7:31:81:84:9a:21:
01:6c:dc:ab:de:01:cd:79:50:53:bd:b0:92:3e:2e:
7e:80:d7:41:67:26:f4:3a:1a:85:65:a8:88:5a:3f:
06:60:53:00:6f:4c:05:42:01:5d:68:4e:fb:7e:5b:
6d:6f:bc:f2:f8:32:d4:db:a8:45:8f:d6:83:d6:a5:
f7:73:73:5a:9e:bb:f0:d2:0a:10:03:17:72:b3:dc:
2a:98:23:d7:4e:c2:e0:4e:99:99:0b:51:4f:e6:e0:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:49:1A:DA:BF:91:47:8C:1A:90:3F:2F:12:CC:BD:3E:8A:50:E0
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/8UJJGtq_kUeMGpA_LxLMvT6KUOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:bd:d7:33:f8:a2:ab:d0:9e:12:5d:23:76:fc:cb:2c:ab:0e:
a9:bd:f9:1f:2c:15:60:34:ae:46:9f:49:15:50:0e:b1:a1:5f:
ac:77:ce:1e:a3:74:22:4f:fe:c1:1a:32:7c:0f:26:8c:aa:a5:
98:ac:05:57:76:00:7b:1f:b6:e4:dd:ef:17:75:fa:c1:ec:05:
89:56:4e:f7:7c:99:09:8d:a6:2a:fe:a1:fa:f1:ef:b4:30:2b:
a8:ee:96:ec:c5:52:f1:9b:56:fd:6f:eb:77:31:78:6c:37:db:
3d:30:c7:d8:a0:ac:a6:8a:b3:55:8d:b4:2f:c6:d1:e1:27:0a:
30:04:f6:64:33:6a:20:1c:09:05:67:91:ee:6e:a0:3e:6b:90:
26:6c:08:d8:b1:45:25:f5:5b:a3:21:96:37:ba:27:00:ac:3a:
02:c4:1a:7a:5c:8d:87:d1:aa:45:60:49:aa:32:3f:cc:60:e3:
f0:c0:c9:84:06:85:82:52:db:b4:a9:eb:df:46:f1:06:f5:65:
43:f5:5e:5f:94:5a:23:23:64:cf:c5:39:a0:53:b0:e3:e4:ab:
e4:84:08:88:cb:1b:fb:aa:39:e4:6d:09:11:9f:2f:c1:6e:50:
39:fe:3f:65:04:cf:bc:f5:45:c6:da:fc:c8:ce:a7:ef:1a:7e:
27:6f:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net