Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5wOPTST3NLbHllN1P7Knj0R04sI.roa
File: 5wOPTST3NLbHllN1P7Knj0R04sI.roa (raw, json)
Hash identifier: OMJlpVtc4d/wtbKew6CSZzD4lZcaLM84sgd6XbZDd9g=
Subject key identifier: E7:03:8F:4D:24:F7:34:B6:C7:96:53:75:3F:B2:A7:8F:44:74:E2:C2
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 018CC5011FF56F40605F95434EB84E6FCD10
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5wOPTST3NLbHllN1P7Knj0R04sI.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212730
IP address blocks: 212.110.133.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1f:f5:6f:40:60:5f:95:43:4e:b8:4e:6f:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7038f4d24f734b6c79653753fb2a78f4474e2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:66:d4:8d:0d:04:d6:1d:1a:52:3a:13:c2:
21:14:93:b6:c2:47:d9:1a:c4:4d:25:17:f7:0e:28:
2a:d2:58:a1:75:98:08:7e:56:a6:33:ad:42:2b:81:
5f:d6:eb:80:5b:b4:2d:33:35:c3:d9:ff:56:ae:b7:
ab:bd:c7:87:04:a0:39:d9:0f:fb:d8:13:63:61:6f:
21:19:d9:31:19:67:45:1c:bd:d4:22:9b:89:11:16:
c8:5a:bf:d7:eb:7e:b4:58:11:ce:df:5c:7f:d3:d3:
4c:df:6f:5c:e7:4f:11:03:ff:57:7d:d8:f8:d3:43:
26:37:01:6e:b6:a4:50:58:eb:0e:b1:5a:70:64:99:
f8:3e:27:24:2e:5a:c2:d1:fd:01:bc:3f:52:20:e3:
fe:da:3d:d7:38:de:e0:ad:22:0b:08:b2:24:3a:70:
d3:36:13:70:11:90:68:dc:bc:d9:7b:9c:74:f2:fb:
d8:8f:af:1f:56:91:7e:67:b7:aa:9a:4a:19:a9:20:
b7:dd:e5:18:ba:7d:ce:9b:4d:74:a7:c6:38:67:09:
5e:f4:df:8e:86:4d:38:db:43:60:66:8b:6e:2a:61:
b3:7d:7d:91:4e:fb:53:72:c9:c8:a5:ca:6e:fe:8a:
c6:e3:f3:a6:02:b1:a6:e5:fb:39:7f:46:a1:56:40:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:8F:4D:24:F7:34:B6:C7:96:53:75:3F:B2:A7:8F:44:74:E2:C2
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5wOPTST3NLbHllN1P7Knj0R04sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.133.0/24
Signature Algorithm: sha256WithRSAEncryption
95:35:a7:79:29:10:e8:35:76:a2:49:70:6a:6f:74:c2:79:fa:
9a:a6:2b:39:0c:06:ea:05:59:12:2f:28:4b:f5:da:e5:43:44:
52:c8:72:44:14:75:45:b4:b2:40:1c:19:e2:02:16:30:ef:82:
32:c7:70:bf:83:ae:26:72:6d:6a:37:1e:16:c1:55:96:4c:84:
53:35:cc:07:40:0a:8d:bc:31:ba:c4:f9:12:5c:5a:f9:24:f7:
71:52:a7:42:a8:6e:3c:1b:6a:09:29:bd:d3:8e:a6:d9:a0:e6:
9b:d9:94:a6:db:b3:d8:d5:23:b4:e3:06:b1:d3:0f:e8:d5:fb:
dc:d3:c9:79:f8:81:e9:b9:2b:ed:34:e1:e4:d9:b7:b0:4b:ce:
21:4c:67:a8:b8:ff:2d:d8:ee:67:ae:1a:a5:f4:70:6a:2c:fd:
45:37:e2:26:8d:f3:2b:25:64:1d:02:ff:59:c1:9e:6e:a7:b7:
08:c1:96:40:05:16:34:19:4c:51:7e:84:87:9f:77:e7:e3:4b:
c6:8d:4f:0e:18:c2:33:dd:65:ca:ce:26:cc:a6:1d:9f:e1:0c:
77:07:1b:d8:e0:fe:10:40:75:fa:64:80:7d:65:f6:7b:53:15:
c5:9e:04:4d:81:64:0e:cd:64:bc:44:5c:ef:d4:4b:50:96:d0:
54:18:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:47:52 2024 by rpki-client on console.sobornost.net