Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa
File: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (raw, json)
Hash identifier: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=
Subject key identifier: 5D:DB:E3:E3:72:A7:48:C1:CF:17:9C:8A:FA:77:C4:5A:AE:0A:66:86
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 0194221FF701C0F9E4346504102F88E5660A
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51175
IP address blocks: 83.230.40.0/21 maxlen: 21
212.106.161.0/24 maxlen: 24
212.106.163.0/24 maxlen: 24
213.227.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f7:01:c0:f9:e4:34:65:04:10:2f:88:e5:66:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ddbe3e372a748c1cf179c8afa77c45aae0a6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:e6:df:54:61:34:59:5c:69:fc:62:d0:10:
15:98:6a:4a:aa:c7:47:82:65:fc:13:64:83:a0:83:
c2:60:15:bf:22:67:ad:28:4a:ff:f8:64:31:d6:78:
a7:8a:41:46:13:22:78:fa:6f:f6:e8:5b:33:cc:02:
da:2e:ab:55:d2:65:0d:d1:68:3f:45:a8:95:2a:d7:
7c:00:49:b2:40:b0:58:d2:4f:62:2a:79:1a:47:c6:
50:09:5f:00:2b:36:37:1d:f2:56:5f:21:44:b2:89:
58:b2:6e:44:8f:e0:a8:2b:e0:3c:59:32:73:85:bf:
b6:9c:6f:2e:b0:53:5b:89:7f:97:5b:36:b5:ed:32:
d7:37:c6:81:ed:af:34:ad:81:22:3e:73:9f:21:07:
b5:9d:50:70:f8:63:8e:e9:ac:88:11:37:32:58:99:
6c:c3:d4:0d:92:76:82:a7:48:4e:ae:b5:d5:6e:2e:
c5:b2:8f:42:1f:73:fd:33:d6:ac:76:46:c4:78:d3:
e9:67:9c:6e:3a:7f:f4:fe:83:f7:b6:08:94:bb:e0:
e9:28:74:d3:38:f3:50:be:a7:a4:8a:93:1d:be:6b:
29:96:be:53:8d:fa:af:cd:c9:97:48:99:06:8f:60:
ca:b8:de:51:10:1d:cd:4b:5d:25:f6:a6:d8:9e:e7:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:E3:E3:72:A7:48:C1:CF:17:9C:8A:FA:77:C4:5A:AE:0A:66:86
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.40.0/21
212.106.161.0/24
212.106.163.0/24
213.227.68.0/22
Signature Algorithm: sha256WithRSAEncryption
25:6e:d6:ad:87:af:33:95:07:ed:e1:9a:99:6a:18:bf:a5:be:
59:f9:9a:23:c9:22:7b:2a:49:4c:94:84:c0:c1:19:7f:02:f6:
2b:7d:b1:3a:bd:29:58:66:3c:b3:9c:8a:c2:20:ed:55:ea:db:
4e:83:b2:27:19:25:6a:fb:ef:7b:37:db:27:2d:91:ed:74:a7:
cb:04:aa:4b:c0:64:85:57:72:41:68:f5:2c:7b:ac:78:10:1d:
35:30:51:3f:97:8d:d8:a8:8e:4d:20:d4:ec:25:a6:2a:37:c5:
cd:19:1d:17:f5:2d:15:2d:7c:b3:30:9b:2b:3a:0b:36:ea:e5:
a5:b5:56:8b:48:aa:d8:21:ee:10:3c:be:9f:f9:a7:13:8d:67:
ae:36:0d:84:8c:27:4d:7d:c4:27:4a:d3:da:51:66:78:c0:d1:
28:eb:4f:30:b1:a8:15:45:7a:ae:9e:3e:91:33:a6:cb:f3:fd:
85:8c:47:e5:2f:de:5a:95:b3:cd:5b:98:86:16:bc:40:ed:51:
3e:10:40:52:9a:8e:9e:35:57:40:88:2b:c7:cc:73:f9:6e:3e:
71:20:26:6e:ec:e8:56:5f:16:ce:36:25:82:45:e5:a6:51:12:
f8:c7:3f:62:b4:c3:ce:3f:1b:f8:08:94:cf:ec:b8:13:3c:a2:
df:94:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:13 2025 by rpki-client