Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mQdPu3hwrStVpzhQmHMetiWorkQ.roa
File: mQdPu3hwrStVpzhQmHMetiWorkQ.roa (raw, json)
Hash identifier: xnn8MjfCOgCkJehSP+r5lr1XMJ4T2QXMMxYF9HRFpeQ=
Subject key identifier: 99:07:4F:BB:78:70:AD:2B:55:A7:38:50:98:73:1E:B6:25:A8:AE:44
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FA994B81D764C71DBA20CAFDB2BA0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mQdPu3hwrStVpzhQmHMetiWorkQ.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 212.115.126.0/24 maxlen: 24
212.115.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:94:b8:1d:76:4c:71:db:a2:0c:af:db:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99074fbb7870ad2b55a7385098731eb625a8ae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:40:1b:a3:2a:be:78:d5:27:c5:8b:db:b0:
eb:8a:ca:1e:66:10:64:3d:86:d6:a9:22:0a:10:1b:
77:d0:82:c0:67:63:a5:54:57:11:6a:93:77:03:5e:
10:0c:eb:0e:8e:5d:ee:78:71:8a:f3:d4:ae:93:a7:
60:c5:eb:c2:6a:f3:9d:19:be:36:52:ac:f8:48:95:
2e:c7:66:7c:11:8b:5f:c2:f0:57:74:f8:a7:f8:34:
63:09:52:bc:7e:a7:59:7f:c0:b0:26:0a:cc:26:86:
73:73:db:fc:64:de:9b:c1:56:9e:c6:fa:66:4e:40:
18:75:79:b9:0d:48:45:75:d5:69:5a:86:a7:5a:bc:
94:4c:58:36:40:ac:28:ac:72:e3:f6:f8:fb:be:ea:
65:a7:de:d3:4c:99:a0:76:b6:6f:af:b6:8e:54:64:
07:bb:a0:33:f1:21:2b:72:30:73:4d:97:eb:5a:5b:
c5:83:49:c9:1a:7e:d1:05:ad:75:2c:4d:13:b8:76:
6f:b9:b3:c0:79:4e:b3:ec:0b:de:54:eb:4e:5f:e8:
6b:4b:75:4f:de:8b:b4:56:28:69:01:4b:4b:11:c3:
39:f1:11:fd:bf:a2:ac:24:17:7e:37:59:00:c0:c4:
15:0a:50:2b:1a:6c:33:c0:70:2f:a8:6f:bb:99:a5:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:4F:BB:78:70:AD:2B:55:A7:38:50:98:73:1E:B6:25:A8:AE:44
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mQdPu3hwrStVpzhQmHMetiWorkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
37:c9:22:fe:cb:17:df:82:81:ac:60:67:c4:ea:41:9a:58:f8:
90:38:3b:68:4e:1a:73:0f:b7:c1:31:39:f2:c5:f9:47:85:0c:
f9:8b:a6:ba:02:76:b5:44:85:fd:46:b0:cf:cb:32:f8:7a:31:
df:94:8d:b4:2d:25:23:49:77:b8:ea:8d:3d:b8:dd:d0:ae:82:
73:e7:81:b4:51:18:0b:34:7a:a9:ce:ff:69:a4:09:28:01:d1:
1f:4f:44:a9:0f:63:f6:31:20:dd:1b:58:53:d4:4b:96:a3:fa:
19:d4:51:46:aa:4f:b9:c5:95:23:5f:57:2b:cf:0a:bd:9a:ab:
84:89:26:43:dc:62:ab:00:11:24:7e:60:30:0e:34:ca:00:74:
93:07:b3:f2:d4:ef:2f:f3:e7:e2:2c:1f:05:7e:07:b2:00:43:
0d:2f:62:2f:43:83:cb:95:58:77:cb:13:c4:a8:c9:1d:1f:5c:
0b:15:8a:78:6e:dd:d4:20:9a:9e:2c:aa:03:97:43:04:3f:0b:
92:fd:9e:a8:2e:17:bd:18:92:6c:07:89:a9:d7:ba:6f:3c:5e:
fd:ea:14:15:1b:d8:20:0f:e4:aa:3f:2e:d0:cb:a3:63:45:a3:
a4:27:fd:58:6f:04:cc:85:39:f1:c3:82:73:3f:f7:b1:56:e9:
3c:e7:2a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net