Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DXM6TNyFoAVb6hiQzqeaeruKML0.roa
File: DXM6TNyFoAVb6hiQzqeaeruKML0.roa (raw, json)
Hash identifier: fEch+vcLFVIIy8b8LpAyDub1Ky8IVhkKN0GalgQBDA8=
Subject key identifier: 0D:73:3A:4C:DC:85:A0:05:5B:EA:18:90:CE:A7:9A:7A:BB:8A:30:BD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FB44786AE4590011E061234982FD5
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DXM6TNyFoAVb6hiQzqeaeruKML0.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214677
IP address blocks: 212.115.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b4:47:86:ae:45:90:01:1e:06:12:34:98:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d733a4cdc85a0055bea1890cea79a7abb8a30bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:79:f5:7b:2d:b8:c1:68:e6:81:46:2a:60:
0b:96:79:b5:9f:76:16:bb:0a:56:5d:f5:b1:cf:a9:
1a:49:85:20:c2:bb:e7:c3:92:0e:29:6d:b5:58:99:
43:65:4d:19:df:ff:4d:56:51:7c:7f:03:86:8d:93:
e1:e9:88:0f:a4:f7:ff:99:4e:85:10:be:c5:91:85:
b1:a6:1a:7a:f9:c1:d7:c9:e0:7b:c1:86:11:f1:8a:
93:09:ae:4d:f7:53:20:5f:10:db:74:d4:84:26:b9:
0b:62:99:8c:f4:39:6b:55:05:73:5f:27:68:5c:88:
06:c9:2b:69:1c:1e:a1:61:74:01:04:43:68:de:b2:
8a:b8:ba:4c:96:6f:db:e1:cf:26:54:a1:6d:6f:85:
c7:34:27:79:8b:fa:b9:b0:22:67:04:2d:8b:9f:e1:
7a:3c:5e:74:3d:58:b7:ae:2f:fe:fd:00:39:b9:a0:
7c:ae:43:f6:17:d4:79:61:6f:dc:63:ad:01:64:45:
cb:b6:77:dc:09:03:d7:a2:f6:71:cb:27:34:c9:3d:
09:ea:79:8f:15:27:25:7d:7c:3c:1d:9f:e5:3f:5d:
71:f7:22:56:bf:aa:66:82:fe:c6:26:eb:50:12:a4:
ad:52:4d:22:3e:5b:84:29:5c:20:55:45:56:94:72:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:73:3A:4C:DC:85:A0:05:5B:EA:18:90:CE:A7:9A:7A:BB:8A:30:BD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DXM6TNyFoAVb6hiQzqeaeruKML0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.124.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b5:4f:ce:a1:94:36:03:37:b8:bb:02:df:75:ae:3f:fd:a4:
cb:bc:13:df:06:2b:ec:48:7a:7e:59:1a:e6:e5:93:52:18:23:
55:4c:9d:13:9e:42:14:78:27:9f:f8:8e:ee:80:88:56:cc:2f:
08:08:a6:4c:92:1e:df:2c:16:4d:f8:2d:76:46:24:68:43:d4:
d8:9e:59:fb:01:d2:66:a4:15:48:f3:e6:d0:d7:ad:6a:22:19:
cc:f6:4b:03:25:02:f6:3d:3c:94:f4:e9:a0:65:af:29:c4:57:
f4:33:17:74:06:0c:50:bf:14:bb:4c:2f:1a:a5:28:d3:7d:55:
28:46:74:af:67:c3:c0:48:ea:6e:a9:e7:e6:05:65:ab:c7:dc:
c9:29:be:bb:87:8b:6c:4e:b3:65:a7:e4:fd:57:ed:eb:0b:6c:
98:ce:62:2b:2c:c3:ac:05:73:7b:54:19:b5:9a:ea:13:3d:17:
2a:eb:65:77:08:6c:db:80:2c:78:c6:49:14:b4:5e:0f:8e:8f:
f8:e0:60:cf:75:af:86:86:cd:61:5e:92:51:bf:2c:56:25:ea:
22:ec:ca:c0:23:12:b1:62:19:db:45:ea:af:d7:fb:39:fb:59:
fe:f9:0a:23:16:81:b3:76:2b:f1:07:d1:c9:f1:25:85:37:50:
1e:eb:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net