Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/b2ULSIdH23UusVKGAXuUmJR9P2U.roa
File: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (raw, json)
Hash identifier: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=
Subject key identifier: 6F:65:0B:48:87:47:DB:75:2E:B1:52:86:01:7B:94:98:94:7D:3F:65
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0194282332208EAF4D4AE210EC77631D91D9
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/b2ULSIdH23UusVKGAXuUmJR9P2U.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:32:20:8e:af:4d:4a:e2:10:ec:77:63:1d:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f650b488747db752eb15286017b9498947d3f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:89:8d:e0:a7:5c:29:c2:54:8d:d9:6a:e2:
85:60:d5:c8:bb:1f:96:05:ef:50:47:b8:8f:73:4c:
04:5d:ec:46:a0:19:0c:36:63:a2:98:71:50:18:e2:
90:21:d3:14:b4:c1:84:77:49:b3:49:2b:7b:ed:26:
eb:32:b4:e6:9b:57:b6:6c:d2:6b:93:8c:93:6d:67:
27:08:0d:b0:c3:04:e5:98:17:fb:36:82:7c:2f:22:
88:7f:9d:78:69:61:d6:5f:b0:f9:3e:94:15:5d:cb:
06:8e:4d:35:16:d6:15:ee:83:69:df:23:b4:19:78:
3c:1f:0a:02:b1:38:58:7e:9c:40:0d:ce:43:c2:60:
e2:3d:98:56:76:e0:fe:ad:40:f5:cc:c5:cf:f4:7b:
e7:cc:2c:b9:e7:1b:f1:31:22:38:e6:4b:83:71:51:
3e:60:35:4e:6f:e5:90:59:5a:e9:09:9a:31:93:60:
8e:b8:34:12:d3:d5:14:0a:8f:99:75:f7:02:ad:00:
17:46:50:d6:e4:d5:35:b4:3b:9e:f9:96:60:f1:3a:
dd:02:bb:d1:d7:b3:40:c3:93:a7:bd:de:f1:a5:f3:
5a:69:6f:27:0c:55:2e:89:86:59:93:b5:e6:fc:aa:
2b:80:9b:c4:ee:18:1d:5d:c4:4c:95:5c:b8:81:1d:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:0B:48:87:47:DB:75:2E:B1:52:86:01:7B:94:98:94:7D:3F:65
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/b2ULSIdH23UusVKGAXuUmJR9P2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.119.0/24
Signature Algorithm: sha256WithRSAEncryption
20:65:68:bc:15:03:0b:f7:c0:f5:fd:54:01:66:83:ec:4b:fb:
a1:84:f8:52:a8:b7:62:e2:af:8d:27:1f:c7:6c:d5:fc:f1:11:
c2:0e:a4:42:42:6e:ce:b2:05:01:f5:be:bb:94:51:9a:af:00:
7c:34:39:6f:85:30:3f:9f:3d:57:bd:d2:10:f4:21:9c:f4:8e:
cc:d0:5e:31:f8:3d:57:fa:d4:d6:09:df:b5:e8:65:f3:af:d7:
ad:39:ab:8e:da:7f:4b:f9:05:0f:0e:f3:58:4d:46:9c:2a:af:
94:37:34:da:9a:49:b0:b5:9d:72:15:96:08:ca:51:a6:52:f9:
42:7b:64:37:ca:28:b8:3f:da:98:2e:ac:c9:6d:64:0b:e9:86:
95:f5:3d:f3:c2:7c:7a:36:3f:38:c0:0c:1d:c4:c2:54:30:f3:
35:fb:b8:32:9a:4b:a8:f3:71:fa:10:f2:8c:45:b3:1d:5a:c4:
91:52:25:eb:ba:ca:bb:09:e6:a3:34:71:4d:7f:1c:ed:23:5b:
96:b0:45:ef:10:fe:cb:d3:c4:36:5d:27:ee:f1:44:42:a4:b6:
3b:01:52:43:d5:50:03:e6:10:36:6c:f9:c9:52:5a:c8:8c:66:
a3:8c:93:cd:3a:4c:69:aa:85:a8:f2:12:59:37:12:a5:1f:d7:
4b:ba:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:42 2025 by rpki-client