Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/jZC9EYSq9SyBUGX-5WVx9GvaLXw.roa
File: jZC9EYSq9SyBUGX-5WVx9GvaLXw.roa (raw, json)
Hash identifier: Jseu/0PcA9oMIWHKxCIwHR9fu1mxnuvGK6PX9V3w88I=
Subject key identifier: 8D:90:BD:11:84:AA:F5:2C:81:50:65:FE:E5:65:71:F4:6B:DA:2D:7C
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244551785138E88A9CDB53A6AADFA8C8
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/jZC9EYSq9SyBUGX-5WVx9GvaLXw.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31645
IP address blocks: 212.12.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:51:78:51:38:e8:8a:9c:db:53:a6:aa:df:a8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d90bd1184aaf52c815065fee56571f46bda2d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:1f:cd:9c:aa:93:3f:58:14:42:1e:54:17:
dd:a3:09:d9:8c:aa:d6:10:19:5d:1b:dd:13:54:ab:
81:1e:f5:9e:e7:32:71:eb:4a:59:a5:1c:16:90:16:
b4:de:1f:43:72:9d:19:cf:6d:48:3b:27:4e:6b:d8:
2c:c3:2c:d2:28:95:8a:96:a0:54:cc:0c:51:0e:70:
7d:06:ed:1f:94:65:75:45:e5:c1:2b:4c:fd:a5:e6:
28:88:84:43:b2:0a:0e:c7:f7:11:b2:b6:fa:33:da:
e7:9d:0e:ef:7f:16:57:50:ae:2e:15:23:b3:db:11:
79:ed:36:83:fa:93:f4:26:72:5f:df:6a:82:f5:cc:
ea:e7:6c:36:9a:6b:60:0d:e9:2c:e1:db:cc:ec:71:
3c:44:26:77:bc:c2:56:a1:8d:34:90:83:97:90:98:
03:af:27:86:44:df:d7:1d:93:57:61:4a:6d:b2:89:
5f:91:4d:c7:90:b9:4a:ce:6b:9d:60:55:44:b5:b3:
0b:a4:8b:bc:2c:b8:9f:af:9b:1c:2a:3d:ee:92:09:
df:05:f3:73:ca:d7:a1:95:47:0a:4e:39:cf:22:c1:
b1:3a:3c:68:ea:d1:e1:d6:5e:83:80:4f:c1:1e:10:
9b:66:0c:22:47:37:40:05:14:9f:bd:09:05:8a:d6:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:BD:11:84:AA:F5:2C:81:50:65:FE:E5:65:71:F4:6B:DA:2D:7C
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/jZC9EYSq9SyBUGX-5WVx9GvaLXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.12.154.0/24
Signature Algorithm: sha256WithRSAEncryption
02:45:ba:a1:9b:80:f8:97:7d:57:95:21:fd:92:3c:3c:04:ab:
5a:d7:e0:df:12:b6:a9:70:c3:f1:a7:8b:04:03:97:44:54:53:
bb:23:b1:d1:c4:b6:3d:96:1a:c2:23:f7:70:e3:17:cc:8b:b8:
17:01:30:c9:98:90:87:17:a9:c5:78:73:38:70:59:fc:30:fa:
2e:30:2e:81:25:db:93:1c:e8:49:2a:f4:a0:a3:09:ab:16:73:
0a:bd:18:b1:d3:8e:05:73:83:bc:4a:0d:bb:ed:77:4f:6a:8d:
fa:70:14:20:df:b9:c1:34:2c:b9:de:9c:15:bc:3a:a2:79:09:
c4:40:0a:1d:d1:bd:c7:d0:b6:4e:ae:e5:25:19:a0:7b:a2:90:
9f:bb:82:8e:a2:8b:c2:df:51:82:c0:f0:02:b8:3d:3e:f2:22:
d0:33:27:7d:a5:8c:0f:d1:ca:0a:51:31:f4:d3:13:d3:c8:98:
fb:37:8d:ce:04:9f:d0:19:5d:3f:17:d2:e0:df:79:14:84:2a:
84:1c:fc:72:4a:da:c9:51:b2:d7:1c:3d:f9:78:33:78:d6:ff:
e4:3e:22:7f:ed:c2:4b:99:68:ba:36:5f:9b:78:a6:f4:aa:e3:
7d:c3:db:dc:92:c2:3a:a6:e4:5f:c0:81:10:be:01:d4:38:db:
66:57:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:58 2025 by rpki-client