Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa
File: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (raw, json)
Hash identifier: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=
Subject key identifier: 5E:45:F2:E2:B1:55:BB:A2:4A:01:B5:1C:11:B8:C2:B3:FA:25:F0:C7
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F5F9091F44DE38D0D3D055FE3A360
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43019
IP address blocks: 212.30.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5f:90:91:f4:4d:e3:8d:0d:3d:05:5f:e3:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e45f2e2b155bba24a01b51c11b8c2b3fa25f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:6f:ee:dd:da:c9:16:e4:2c:22:8a:a9:36:
06:00:d9:f5:ad:42:62:20:7a:ce:04:0e:a0:62:47:
02:2d:01:70:d8:cd:28:7c:71:54:3e:38:8a:90:29:
db:0a:5d:19:94:be:19:d2:fe:67:1a:34:c6:27:72:
f9:eb:64:12:43:b0:74:25:15:fd:78:df:6e:49:b5:
99:3d:eb:98:2b:8f:4c:1a:8f:39:86:bf:29:6c:03:
06:25:36:00:f4:5d:f7:21:00:0f:a3:0b:b7:5a:85:
d2:ad:7b:46:d9:b7:e2:38:14:ff:b8:eb:a9:3f:64:
ef:10:65:5b:cb:76:dc:49:a8:9c:f7:ed:7e:40:ad:
a0:da:c2:9a:41:34:7b:64:d7:52:fc:24:78:32:ad:
bf:f3:63:90:a7:ab:38:ad:f3:c6:64:71:cc:40:46:
ec:64:83:96:de:77:68:f3:47:99:90:72:8d:ee:56:
ec:2b:30:c0:96:ef:f0:a7:f3:c5:85:83:80:b2:35:
0d:02:9e:e2:79:0e:86:48:17:06:e3:1c:f0:f1:b1:
d4:ce:77:fa:0a:b4:3b:fc:a6:5a:d9:2a:b4:37:87:
8b:69:b8:93:31:5c:fe:7c:06:d2:01:fe:6d:ce:93:
a4:d8:56:66:86:94:3d:a0:58:28:36:0f:c7:0d:61:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:F2:E2:B1:55:BB:A2:4A:01:B5:1C:11:B8:C2:B3:FA:25:F0:C7
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.41.0/24
Signature Algorithm: sha256WithRSAEncryption
66:25:b3:81:3f:5e:1b:ec:cb:9e:88:4b:a7:cc:15:74:5a:fb:
00:0a:79:c4:30:6c:0f:0d:bf:af:82:70:f1:a3:95:38:67:1c:
14:a9:d1:a1:fb:53:4c:53:84:e7:80:98:d7:c5:f7:d2:6e:af:
66:1b:58:d0:06:1e:9a:0e:b3:1b:fd:8f:d7:3e:7b:13:56:97:
bb:67:50:7c:cf:b9:9e:13:b8:fc:df:26:09:39:0c:4a:98:0c:
65:c3:55:eb:dd:bf:d5:c1:81:80:77:fb:ea:38:ba:a5:3e:6f:
19:e7:e9:3e:fb:df:b6:a3:d3:a9:ba:ec:ef:6a:65:ea:68:bb:
3e:57:7e:4d:ec:52:38:78:45:73:b0:b0:f1:ef:76:ba:1e:05:
1e:2a:6c:23:40:f8:16:33:5f:e8:2a:93:84:3e:48:9a:37:b9:
69:de:e0:29:b1:66:7f:e8:1c:fc:9e:66:a6:c8:2f:12:e6:9b:
14:d0:b3:da:af:a8:5d:7f:08:90:a0:a0:53:c4:c7:61:eb:f8:
57:9f:22:38:21:c2:e2:2b:96:cb:cf:fc:9f:bc:fb:ae:38:61:
28:85:a4:ce:c5:dc:2a:b6:90:84:e7:54:46:db:ea:11:af:39:
39:b4:1d:56:7e:84:a9:60:9a:b4:fb:08:52:21:ed:33:67:6f:
99:7d:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:33:02 2025 by rpki-client