Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/gblVtIBn8mlQxz2yiWejH0FdMyM.roa
File: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (raw, json)
Hash identifier: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=
Subject key identifier: 81:B9:55:B4:80:67:F2:69:50:C7:3D:B2:89:67:A3:1F:41:5D:33:23
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 01941F8C707590DDA1775CD6CAC8B39323CC
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/gblVtIBn8mlQxz2yiWejH0FdMyM.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42487
IP address blocks: 212.102.121.0/24 maxlen: 24
2a0f:c540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:70:75:90:dd:a1:77:5c:d6:ca:c8:b3:93:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81b955b48067f26950c73db28967a31f415d3323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:de:0e:39:bb:71:03:bf:02:33:0c:83:4e:
14:4f:c6:a8:0d:9f:ba:a9:50:75:06:2b:2a:60:27:
7e:b5:da:6c:97:88:0a:04:b2:b7:a2:a7:37:c9:ee:
64:24:b4:47:85:da:8a:86:c6:f6:c0:34:9e:e2:9f:
63:c2:42:27:03:9c:86:51:ae:6d:86:f1:bc:6a:87:
e8:8e:a6:4e:bc:c6:fc:ec:97:95:5b:41:43:19:14:
79:8d:f0:dd:4f:f9:74:46:53:f2:45:3b:0a:f1:58:
b7:6d:27:f1:80:e9:64:54:4c:e8:de:8a:0a:15:05:
25:47:d6:e7:af:44:ac:1a:85:21:c4:33:8d:4b:62:
45:ce:10:8e:3f:a0:c4:96:96:84:cd:f6:26:f3:bc:
17:3a:53:f3:c6:8f:2e:4b:59:25:28:2f:d4:bc:b1:
1e:b3:32:b1:2e:de:87:03:d3:c9:79:9e:82:8d:41:
05:a0:d0:8f:9a:2c:88:1f:50:d3:ee:7b:f3:dc:ab:
25:b2:39:57:6c:0b:cc:4e:d2:bf:63:2e:3d:cd:de:
f8:b2:96:35:92:17:e1:ad:d5:03:63:a2:76:74:59:
94:ad:12:ce:65:d9:82:f0:bc:62:c3:16:46:55:98:
63:5f:2a:35:85:01:09:61:0a:6c:4f:53:c5:af:c1:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:55:B4:80:67:F2:69:50:C7:3D:B2:89:67:A3:1F:41:5D:33:23
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/gblVtIBn8mlQxz2yiWejH0FdMyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.121.0/24
IPv6:
2a0f:c540::/29
Signature Algorithm: sha256WithRSAEncryption
57:4a:02:0e:f7:4b:d2:2e:df:bf:52:3e:d9:3a:db:d3:5f:09:
b6:30:e0:fd:0c:7f:b1:ff:3c:de:14:c1:8e:9d:73:b8:d8:48:
2f:47:ee:6a:0b:af:e6:d3:33:d2:44:f7:40:f8:02:64:ea:f5:
10:fa:e3:5e:dd:18:8e:19:38:9d:a5:6d:b0:c2:c3:2e:ad:69:
06:ff:34:c7:70:c1:e7:e3:5b:f5:22:4b:ff:48:20:33:4f:88:
59:76:58:bd:cc:63:e6:5f:f5:ab:58:63:a6:33:43:81:94:b9:
27:a7:18:98:cf:3f:92:16:48:51:45:08:a5:61:87:b7:2f:de:
c5:d9:55:8f:83:8a:da:b0:76:8f:70:13:34:1f:8e:73:bb:54:
66:d2:32:65:74:31:26:b1:77:9c:32:a0:f9:03:93:c4:c7:6f:
09:23:50:6a:c3:3c:26:ef:13:bf:18:af:b3:d1:dc:13:9b:0a:
e1:99:40:08:00:87:40:03:61:d0:56:a4:3b:ee:74:30:fe:f8:
7f:5c:a2:50:69:6d:c0:35:88:1e:8e:cb:08:97:bc:9b:67:39:
74:9d:f2:9f:5b:12:71:7f:fa:d6:07:ce:52:ea:cd:18:42:8b:
61:e7:32:60:d7:7b:6e:e4:54:b5:ab:6a:39:77:79:45:39:ff:
09:ff:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:06 2025 by rpki-client