Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/xwKRlfuar5Ok0_Vuih0mv8ent54.roa
File: xwKRlfuar5Ok0_Vuih0mv8ent54.roa (raw, json)
Hash identifier: ofzw4+EAI9dgA5ztmD8H8K5/VJLMCGrjBng1uGirlUw=
Subject key identifier: C7:02:91:95:FB:9A:AF:93:A4:D3:F5:6E:8A:1D:26:BF:C7:A7:B7:9E
Certificate issuer: /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial: 019427B5E9BF6CBFDEAB8290509CF4343B96
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/xwKRlfuar5Ok0_Vuih0mv8ent54.roa
Signing time: Thu 02 Jan 2025 15:50:20 +0000
ROA not before: Thu 02 Jan 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61231
IP address blocks: 212.162.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e9:bf:6c:bf:de:ab:82:90:50:9c:f4:34:3b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7029195fb9aaf93a4d3f56e8a1d26bfc7a7b79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:ca:75:cb:6a:2f:80:5f:ee:69:71:1f:1b:
46:dc:e7:7c:e4:7a:34:98:97:8d:10:4a:88:24:ea:
b8:48:a4:90:47:b0:7e:6a:91:f0:a8:28:88:de:e2:
8f:c9:db:60:41:0b:3b:0b:9b:7d:8d:b2:32:2f:13:
57:33:46:b7:43:be:8a:42:e0:e0:9b:3a:93:98:59:
f5:a9:2f:e6:62:86:75:c6:40:49:2e:b8:04:9d:36:
55:2e:5c:0d:be:96:11:98:4c:8b:cb:de:e7:85:2f:
53:d0:f6:82:d6:f8:7c:1f:a3:64:dd:d7:d3:56:80:
23:3b:af:56:0d:93:d5:a3:7f:ac:f4:b1:4a:be:cd:
f4:33:e9:e5:56:97:96:d1:f5:a1:41:98:5c:02:b6:
19:57:d3:00:9a:cf:aa:91:93:27:2a:ca:06:53:bd:
f3:e6:0e:cb:14:d3:05:e1:ad:3b:f5:d4:b6:13:6a:
de:00:62:1c:6e:4a:85:d0:bf:b9:f4:bd:e8:ce:e7:
fe:7a:c1:0c:35:a6:3a:9f:91:cc:a0:48:ca:b8:6b:
a6:19:71:22:47:a5:f6:c8:59:81:1d:4a:96:bf:20:
f6:c2:65:f2:d4:6a:b5:ea:fa:03:b5:5c:76:ff:53:
33:a1:6b:ac:8b:16:80:e0:bd:61:74:9e:a5:8f:9b:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:91:95:FB:9A:AF:93:A4:D3:F5:6E:8A:1D:26:BF:C7:A7:B7:9E
X509v3 Authority Key Identifier:
keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/xwKRlfuar5Ok0_Vuih0mv8ent54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.162.129.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d5:20:b5:e3:a5:d8:9b:62:7a:e6:11:9a:14:f8:31:f8:69:
03:30:9d:bd:8b:9d:86:d5:68:93:32:fc:72:1d:dc:e2:46:25:
2e:56:eb:c0:7e:97:9e:0c:3c:26:a3:9a:76:90:61:6c:56:d3:
61:ab:a1:98:06:3e:7b:32:10:90:65:20:b2:99:ef:09:c7:48:
6a:04:46:96:a6:33:8f:67:da:e2:b7:26:c7:ad:b0:12:77:4c:
2c:c9:d6:8c:e4:eb:5b:bd:c6:15:0c:bf:d4:dd:fc:71:16:2b:
8a:63:2a:6d:d9:96:00:96:57:3b:9b:9e:51:e0:62:ad:4d:42:
9b:8c:89:50:7d:6d:98:d7:2b:ea:25:0f:1a:98:02:58:a0:9e:
84:79:48:07:b4:60:5e:9c:44:8c:5d:ad:51:66:b5:c5:93:f4:
6b:2a:98:86:46:5b:85:26:ab:82:44:51:f0:b1:b6:9f:35:75:
86:8b:cc:84:2f:c4:d1:7d:98:15:a8:f2:a6:08:bb:25:51:34:
78:99:39:30:96:23:aa:a9:97:ad:8d:e1:79:12:b0:b3:e8:d5:
6a:51:da:df:e3:cf:d2:27:81:f5:4b:e6:20:99:f3:c6:5f:56:
39:3d:5e:dc:44:a2:8f:1c:70:95:31:72:8b:36:78:25:b5:3e:
55:61:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:47 2025 by rpki-client