Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lSiujhzt1LcGiw8A7B9pK37FaMI.roa
File: lSiujhzt1LcGiw8A7B9pK37FaMI.roa (raw, json)
Hash identifier: h3y9E+Rxf2m/eC6S05hZLxuAV1UPj3+4ZiombPrP5O0=
Subject key identifier: 95:28:AE:8E:1C:ED:D4:B7:06:8B:0F:00:EC:1F:69:2B:7E:C5:68:C2
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FB4A7EC0AFB3EBC0A46EC5B4AED1D
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lSiujhzt1LcGiw8A7B9pK37FaMI.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 212.115.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b4:a7:ec:0a:fb:3e:bc:0a:46:ec:5b:4a:ed:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9528ae8e1cedd4b7068b0f00ec1f692b7ec568c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:ec:0c:b8:18:1c:5f:6d:4b:e0:76:3a:ec:
36:46:88:6c:28:7c:2e:f4:09:05:c2:39:5e:c0:08:
aa:2e:fc:5a:65:34:6c:48:4b:fe:b4:a4:29:24:cf:
55:ad:fb:b4:7d:56:29:82:b9:30:6c:98:38:81:16:
1e:52:68:da:50:04:1b:39:b4:8c:f9:9b:62:4d:ff:
f9:a1:7d:65:36:f6:d8:88:fb:c9:d2:54:46:62:99:
60:62:eb:76:f1:e0:ba:0d:e5:82:f0:7a:43:62:1b:
a9:fa:ea:82:31:ce:99:7c:18:e6:ee:73:b4:24:55:
06:ed:1b:23:bb:f8:7b:03:6c:47:f7:d4:b8:73:75:
30:46:b5:77:c0:8b:1c:02:4e:72:26:7a:1d:94:37:
f8:18:a9:df:e8:36:c8:de:1d:f8:f4:bc:8a:12:5c:
e1:d0:35:07:5e:4b:69:32:29:96:a2:68:09:aa:dc:
f2:38:c3:6b:f0:f1:89:dc:4b:77:76:fb:0c:b2:18:
e6:06:7f:53:ba:4e:63:ef:b0:55:06:e5:ab:b0:09:
65:3b:69:99:67:b0:a6:34:db:49:1e:dd:5a:22:20:
96:1f:14:09:b6:1c:c6:93:82:a0:65:0f:bf:02:20:
93:57:c4:06:5b:a4:ba:6a:ec:f3:26:9b:0a:30:35:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:28:AE:8E:1C:ED:D4:B7:06:8B:0F:00:EC:1F:69:2B:7E:C5:68:C2
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lSiujhzt1LcGiw8A7B9pK37FaMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f9:72:ca:5b:36:b9:e2:0c:8e:b1:25:9b:27:4d:3a:1e:08:
8a:58:7f:18:04:7e:82:74:9d:60:40:37:9a:8c:d0:38:6f:86:
aa:78:8b:69:0a:31:35:2e:7c:7a:e2:fa:d2:b4:1d:ea:be:11:
b8:ab:0b:6b:10:d7:49:bc:7a:56:54:4a:b8:16:b3:4a:a2:b9:
fe:d2:38:bc:b6:62:df:2b:34:c8:85:e7:bf:3b:df:86:25:5f:
eb:b8:05:5f:d2:76:99:63:2b:c1:06:0d:e3:19:71:42:e5:c2:
5d:18:8d:36:69:6f:28:bd:69:e8:da:52:b3:3d:0a:8b:cd:57:
6f:fc:e3:8c:59:93:b6:6e:0a:3c:36:3e:9f:39:9e:5b:8a:05:
29:4d:6e:c8:fe:21:ce:ae:55:4d:f5:04:2c:de:97:52:b3:97:
6e:5d:80:8f:88:5f:51:df:b6:74:df:18:7b:30:81:73:d2:5a:
f3:4a:3f:0f:ed:25:43:f7:78:49:48:59:43:73:1e:81:a0:ec:
10:e5:c9:26:71:ff:26:d6:3b:64:32:f3:b5:b7:78:22:03:5c:
33:37:08:90:b3:58:82:0a:89:fa:6d:68:5e:3b:f2:ba:1d:07:
ab:3b:a1:62:5b:80:58:b3:b6:e6:56:25:81:40:ff:07:4e:9e:
e1:60:4b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net