Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa
File: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (raw, json)
Hash identifier: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=
Subject key identifier: EF:0D:58:3F:2C:E5:04:46:4D:30:EC:84:50:21:64:35:CD:04:08:F4
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F6730362D8AF6C9828E19B815E686
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212435
IP address blocks: 212.30.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:67:30:36:2d:8a:f6:c9:82:8e:19:b8:15:e6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0d583f2ce504464d30ec8450216435cd0408f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:86:55:07:bc:cf:81:54:9e:a1:5a:54:72:
83:0c:ef:7e:a5:d9:06:50:8d:ae:da:05:21:0e:fa:
fb:81:1e:ce:4c:ce:8d:13:6d:8d:bb:3b:4a:8c:e3:
9c:2f:7b:af:cc:40:3f:13:43:40:e7:bf:41:3f:4d:
51:da:58:4b:f6:dc:a6:77:53:e0:bc:1e:f7:b7:a2:
47:25:32:ea:5b:ee:b8:80:e4:04:10:b5:f4:8a:61:
0f:36:a9:fe:dd:3d:34:bb:3f:33:68:1d:ab:f9:97:
9b:b0:c1:1e:c2:99:37:0d:52:61:21:30:b6:ce:4b:
7f:69:a8:3b:37:a1:8b:d3:0e:22:5e:db:b1:d3:6d:
ae:75:7a:ac:ff:04:25:77:9c:97:a6:48:11:5e:97:
39:e5:93:96:7b:d1:ae:1d:40:69:d8:8b:e0:8b:db:
04:d1:74:96:f8:8d:97:c3:29:9a:66:0c:86:b8:a4:
8b:4b:d4:79:a7:52:e5:d7:9e:dc:2c:38:34:3f:46:
8f:8e:11:1b:b9:d6:06:45:1e:13:28:d6:9c:b0:c4:
23:0a:c8:4a:24:3d:3e:79:a3:68:c0:03:28:9f:16:
fb:b3:d6:02:01:aa:10:b7:e8:6a:a0:d0:ba:74:d9:
38:5d:41:3f:9e:dc:28:aa:40:f2:b3:60:70:5a:19:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0D:58:3F:2C:E5:04:46:4D:30:EC:84:50:21:64:35:CD:04:08:F4
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.62.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b4:73:ed:10:27:2a:fc:bc:8a:4d:33:c9:0c:88:f6:fb:9c:
64:d8:d2:ad:40:b6:0d:7f:15:5a:12:69:6c:fe:f7:fd:bc:c8:
f1:45:97:85:f2:20:c9:51:b4:62:b2:0d:0c:fe:a7:84:9f:b4:
cc:b3:99:e2:71:9a:fc:37:9e:7a:93:55:d7:8a:f7:f3:0c:b6:
63:70:a3:7c:72:6c:4c:d7:86:a5:3e:28:8e:98:db:a8:c1:15:
79:0c:a6:46:83:c9:bc:1a:0a:6d:18:9b:eb:f4:03:cb:22:5d:
c3:43:e9:29:8d:25:05:67:c3:e9:f8:af:a8:e7:d9:7c:24:c9:
83:18:87:8d:2f:f6:a8:bf:64:c6:85:3a:31:8a:f7:5c:6c:8f:
34:b3:4d:25:1d:c5:03:58:f2:f3:93:f0:ac:f6:ea:eb:e3:17:
f7:dc:42:4e:6b:ff:d8:ec:86:d3:54:36:49:9b:7a:e3:7f:48:
c6:3b:fe:3b:85:33:45:1e:65:86:00:a4:df:1c:f7:a7:cd:e7:
4c:17:07:3f:9d:49:76:64:e4:ba:3f:21:8e:14:2d:f9:0f:d8:
20:98:ef:1f:d8:ee:a1:10:07:3b:9d:96:dc:21:a7:82:24:c6:
02:04:3f:fe:88:3c:99:cb:d6:83:e8:4f:ad:74:f3:e1:c8:bf:
50:5c:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:41:05 2025 by rpki-client