Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/rwZ6jpTAm_ZRHWKYYj7M2LFDbMg.roa
File: rwZ6jpTAm_ZRHWKYYj7M2LFDbMg.roa (raw, json)
Hash identifier: P1FZuevse97L9jR3eornH1YCc2srAhdguPvW85KpUfQ=
Subject key identifier: AF:06:7A:8E:94:C0:9B:F6:51:1D:62:98:62:3E:CC:D8:B1:43:6C:C8
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01960F0DEC04B2896298B72BEDFFE3CE3A06
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/rwZ6jpTAm_ZRHWKYYj7M2LFDbMg.roa
Signing time: Mon 07 Apr 2025 07:01:32 +0000
ROA not before: Mon 07 Apr 2025 07:01:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214143
IP address blocks: 212.102.248.0/24 maxlen: 24
212.102.249.0/24 maxlen: 24
212.102.250.0/24 maxlen: 24
212.102.251.0/24 maxlen: 24
212.102.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:ec:04:b2:89:62:98:b7:2b:ed:ff:e3:ce:3a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Apr 7 07:01:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af067a8e94c09bf6511d6298623eccd8b1436cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:24:e6:ad:ae:6b:9b:d4:b2:13:0c:ab:d4:
70:aa:59:fd:05:64:5e:4c:e3:9b:28:92:e1:6c:4f:
e6:e6:9a:7b:f8:94:be:96:7e:3d:c8:a9:81:a5:e2:
d0:76:8a:d9:5e:44:55:ff:e1:7b:4f:8b:91:2e:9f:
db:af:33:30:35:0b:82:af:01:e9:23:f6:9c:a6:69:
97:8b:41:ef:9d:91:94:2c:e7:96:b1:94:ee:21:03:
6f:e8:08:7a:f9:46:a2:e1:75:3c:f1:fe:d5:5d:55:
7c:61:6a:fb:71:fd:0b:f5:7d:d4:95:61:6c:60:47:
3c:3a:9f:44:e0:b7:3d:83:d1:58:75:a7:3b:68:d8:
27:ea:52:10:01:1a:ac:52:7a:28:6d:78:31:01:9c:
73:66:73:47:20:8f:c5:80:f2:07:03:6c:f1:b4:76:
fb:56:3b:04:cb:70:8c:a4:b4:40:56:b4:17:b1:e5:
51:c6:02:c9:e6:b5:b1:1f:a4:ca:30:7c:8a:f9:13:
5d:ce:ad:46:ab:c4:99:4d:90:2f:19:50:86:f0:29:
9c:a0:04:e1:7a:3a:42:31:b8:bc:81:d9:d3:28:6a:
b3:cf:e2:5c:c9:90:e1:f2:39:2a:d2:ff:ef:a7:44:
c5:66:36:aa:ab:45:86:82:61:de:a4:44:e6:b3:d7:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:06:7A:8E:94:C0:9B:F6:51:1D:62:98:62:3E:CC:D8:B1:43:6C:C8
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/rwZ6jpTAm_ZRHWKYYj7M2LFDbMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.248.0/22
212.102.254.0/24
Signature Algorithm: sha256WithRSAEncryption
73:68:1a:51:34:40:83:a6:98:bb:f0:e6:48:fc:34:36:50:e4:
d6:64:ba:3c:70:90:6b:7e:3a:d4:08:3c:e4:21:33:76:11:f5:
99:33:c5:61:3a:10:cd:ed:06:41:b7:5e:02:f1:18:e3:e1:a4:
00:f2:15:49:3d:b6:35:92:24:1f:34:9f:8c:a4:77:c5:02:ec:
4f:51:99:1c:06:24:f8:3b:82:f1:ec:cf:4f:fb:6d:e0:a7:2e:
1c:b3:b1:a6:ad:1d:f7:97:12:04:af:7d:c6:8d:0c:12:4f:76:
23:64:1c:9e:b2:2b:58:db:e0:3c:4f:16:44:e4:83:6b:6d:01:
d2:ea:0f:9a:6a:79:04:12:23:7f:a7:a9:4e:73:46:01:4a:79:
6e:4c:f1:58:05:cf:a7:06:8c:f2:26:6a:86:a0:a3:41:ec:ea:
b8:85:03:30:fc:28:c0:50:9f:f4:15:1b:fd:c7:1c:b7:d3:9c:
be:bc:ff:c0:b8:fd:7d:75:cb:ae:6d:16:9c:9b:d7:48:38:f2:
75:21:52:00:24:dc:92:80:26:a1:56:62:1c:2c:67:6e:cb:fb:
27:e9:55:00:31:9b:89:3c:5b:63:65:e8:e2:d5:56:55:c0:7c:
77:e5:91:2f:92:b4:89:9a:f5:2f:7c:86:7a:af:cd:a5:d5:05:
5e:3c:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net