Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/OxF-ngX6YGUArZrbAYmh9hpGzkU.roa
File: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (raw, json)
Hash identifier: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=
Subject key identifier: 3B:11:7E:9E:05:FA:60:65:00:AD:9A:DB:01:89:A1:F6:1A:46:CE:45
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 0194252169F56DDD2F1ACE16C1D23C73820B
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/OxF-ngX6YGUArZrbAYmh9hpGzkU.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203878
IP address blocks: 212.54.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:69:f5:6d:dd:2f:1a:ce:16:c1:d2:3c:73:82:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b117e9e05fa606500ad9adb0189a1f61a46ce45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:08:e6:1c:c0:73:b1:a2:41:09:52:ad:40:
98:b7:40:9f:5f:b7:6c:7e:5c:2e:d4:16:f8:07:50:
65:1a:49:46:0e:ff:33:87:c4:67:97:31:e0:21:b4:
09:90:85:96:16:fc:1b:8f:8f:1b:3b:8d:4b:49:a5:
cf:88:40:cd:e8:ff:af:a4:03:e5:40:47:49:9e:9d:
03:57:93:35:2c:81:ce:b6:67:e0:0d:71:dc:87:9b:
d4:bd:e8:14:ad:1c:a2:bc:db:df:4b:9a:2e:cc:16:
c3:b0:48:32:bb:88:a3:7b:9f:01:89:6e:ad:62:ee:
88:ce:cb:9a:56:72:ac:cd:a1:e9:78:c2:82:fa:a9:
41:a5:57:4a:eb:eb:42:3a:d1:72:12:8b:bc:e2:f1:
03:5d:ac:d4:a7:28:35:da:2b:b7:71:a5:74:08:b1:
30:3e:b4:95:19:9e:69:48:9d:fa:e4:7f:cb:2b:6c:
4f:95:b1:cc:3c:67:8d:97:a2:0d:14:16:3b:42:95:
0c:35:1a:6d:87:5c:9d:88:98:cc:73:30:c2:51:12:
d1:5c:b8:ce:9b:28:c4:37:d6:77:6d:fc:3c:c3:42:
6c:63:ee:f7:25:74:7f:b9:7b:35:3f:87:68:9f:54:
34:27:22:d1:c9:1d:f5:19:17:5a:b4:62:a6:e3:09:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:7E:9E:05:FA:60:65:00:AD:9A:DB:01:89:A1:F6:1A:46:CE:45
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/OxF-ngX6YGUArZrbAYmh9hpGzkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.54.213.0/24
Signature Algorithm: sha256WithRSAEncryption
27:05:69:da:5b:49:99:7a:ae:8e:e8:e1:38:35:65:c4:72:37:
35:3a:be:96:77:ed:d6:ae:b7:d5:91:5b:85:3a:10:c0:90:db:
0f:ad:dd:0d:ea:6e:c0:21:f3:41:40:87:b8:ca:87:3f:5f:d4:
bb:6a:f2:bc:d4:95:ad:3f:c5:58:67:91:a3:4b:c5:90:0e:90:
62:45:0a:62:9e:3d:fa:b6:80:d2:77:8f:8c:6d:27:50:50:09:
4b:25:3f:30:87:16:fc:e1:37:fe:e2:d2:39:29:a7:ef:fb:92:
6d:64:70:d0:e7:d5:f7:a0:39:7e:29:01:6e:d2:aa:90:85:8f:
e4:ee:05:30:a5:23:95:c5:30:bc:d5:ea:17:c2:bb:cd:5d:b1:
18:5f:1d:57:95:7c:69:5e:fa:a4:70:01:10:73:90:49:0e:52:
c7:7e:65:b9:a6:71:e2:92:11:f6:46:19:02:5f:2f:f7:6d:06:
3a:b4:ba:8e:4b:05:c2:72:31:6f:b2:88:96:37:4b:75:2c:06:
7f:8b:ab:a4:91:93:e3:c3:f1:3e:c0:0d:7f:d8:1f:4c:59:0e:
24:03:c5:04:58:28:d9:ac:86:5c:ac:d1:84:b9:83:e9:fa:e5:
3b:d6:04:15:13:01:26:4d:b3:b5:65:95:2a:ba:fa:ce:5f:ab:
95:fa:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net