Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa
File: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (raw, json)
Hash identifier: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=
Subject key identifier: 5D:33:74:15:5F:02:E2:60:F8:49:CF:FC:BF:24:26:6F:84:A0:20:F2
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0194228D2D111B3E316D6E31B6D768653D48
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9132
IP address blocks: 212.110.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2d:11:1b:3e:31:6d:6e:31:b6:d7:68:65:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d3374155f02e260f849cffcbf24266f84a020f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:5e:79:ad:43:55:62:35:0f:b9:27:67:36:
1d:f8:f6:23:68:e8:c0:42:1c:64:93:27:e9:96:8f:
3a:86:31:47:26:dc:a8:8f:b1:10:34:af:1e:51:6f:
a4:83:7a:b5:7e:db:28:38:6a:96:ad:23:5d:34:72:
a3:23:e2:3c:e8:9d:3e:36:b8:fb:e1:e8:2e:24:18:
5a:a8:d7:08:81:9d:ee:fa:54:27:63:1b:a1:5f:2e:
b1:99:73:6e:48:0a:f3:25:40:19:6d:47:2c:c1:b4:
c0:27:c8:92:74:d1:93:f5:87:42:01:68:e0:a2:51:
98:b9:be:1e:d2:88:9b:76:26:3e:0c:9e:56:c1:64:
61:56:bf:28:59:fe:02:3d:ed:f7:99:75:1d:19:fa:
69:33:06:c8:5c:b8:84:2b:8c:4e:13:da:16:33:24:
1c:0b:b1:6d:0c:64:4a:7d:af:0f:de:b0:2d:15:81:
b1:5a:68:7f:9f:39:1c:05:f7:dd:ed:61:5d:5c:1b:
82:33:c0:f2:fb:66:b1:61:b3:d2:19:94:ef:3a:4b:
66:7e:c6:a9:58:59:5e:e3:c7:13:ac:14:9c:ad:2d:
03:b2:ac:bd:2e:fe:3b:17:fa:07:25:7a:f6:3d:cc:
fd:ee:87:51:f7:97:69:ab:a4:fd:68:f8:7a:5a:92:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:33:74:15:5F:02:E2:60:F8:49:CF:FC:BF:24:26:6F:84:A0:20:F2
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1f:aa:4e:7a:f4:09:c0:f7:af:22:e5:0b:bd:9b:a5:49:f2:
27:1c:7a:03:d5:7d:03:b7:54:04:3f:01:be:b0:75:e6:e4:40:
af:5e:63:55:29:88:97:89:33:d7:dc:a6:70:ac:95:24:51:63:
84:4c:c1:39:62:69:13:33:ba:0c:a4:77:64:a8:64:16:2f:4b:
43:71:d7:21:42:9b:01:c1:6c:65:46:ff:c2:64:f5:eb:75:16:
2b:12:4c:29:0a:f3:68:3e:69:9c:84:f4:8d:79:ea:80:80:23:
09:ce:48:d4:a3:fb:b5:e0:cc:18:26:85:5f:d0:73:b7:d6:4c:
94:6a:9d:28:66:fa:7a:b6:ec:0a:b7:8b:e5:2e:1f:59:fc:e8:
28:e5:4e:09:71:33:6b:d0:0c:3e:b0:38:3d:07:2a:1a:3d:04:
a8:40:22:79:50:f3:db:bc:b2:4c:45:dd:6d:1d:e0:59:30:03:
2e:94:5c:5b:1c:3f:04:7c:50:c0:b7:b7:72:9d:33:ff:be:8a:
55:24:15:ce:9b:80:ff:15:4e:cd:f7:5d:2d:fa:a4:91:0f:62:
6d:67:4d:36:69:c1:20:6a:ec:fe:7f:05:84:28:5c:0f:f3:1f:
0f:be:a8:3f:aa:af:cc:a9:64:5e:18:4c:7a:9d:b2:30:56:93:
34:b8:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:14 2025 by rpki-client