Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa
File: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (raw, json)
Hash identifier: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=
Subject key identifier: 54:39:29:52:7B:12:10:98:E8:40:A3:7F:48:7E:4C:E7:54:09:D2:54
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 01942068634F2D517554ACF17C611B0FDC4B
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212730
IP address blocks: 212.110.133.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:63:4f:2d:51:75:54:ac:f1:7c:61:1b:0f:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543929527b121098e840a37f487e4ce75409d254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:6c:4c:9c:6a:92:a6:45:7e:47:9e:03:9d:
ca:2d:f6:62:70:ac:44:e2:ca:c7:b2:65:76:99:fa:
8b:94:54:9b:b6:3f:c8:4e:75:f0:67:ff:d9:fd:50:
bf:8b:59:04:57:5f:7f:d1:8a:fd:91:32:6a:e0:e8:
ac:bf:79:fe:41:ab:f6:31:7f:65:4a:b3:c9:90:7f:
a5:35:9a:ba:af:88:df:38:5f:1e:ae:8a:6d:b8:d5:
9a:42:92:cf:9e:ed:9c:b4:90:f8:07:90:ec:7a:af:
de:32:64:e9:39:32:69:90:17:6e:5e:52:b4:72:1b:
da:5b:43:56:76:45:ff:70:dc:41:e6:fd:cd:0f:96:
33:59:c9:2c:db:3f:b3:f7:65:ce:f7:c9:0f:f4:8f:
56:ea:90:f1:ba:42:30:fb:25:b3:da:05:2d:65:1f:
e4:d3:f8:6e:ad:18:cd:17:6f:ce:9c:79:89:ff:1c:
30:7f:01:64:0c:6c:08:67:d7:9d:0a:5e:87:5f:73:
96:3f:e2:1c:6a:e3:03:70:4d:dd:f0:68:99:4d:58:
66:0d:09:14:22:b7:70:31:50:54:09:c1:1d:01:98:
6f:1c:5b:b0:cf:42:7c:ae:3d:c0:72:d7:51:bd:22:
7d:44:2f:2d:ba:40:d2:d9:86:2f:e5:2a:ff:74:44:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:39:29:52:7B:12:10:98:E8:40:A3:7F:48:7E:4C:E7:54:09:D2:54
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.133.0/24
Signature Algorithm: sha256WithRSAEncryption
64:87:bb:30:6e:33:ea:ef:d2:57:6f:14:bf:57:1d:3c:2f:9b:
ee:88:28:56:47:84:48:55:97:82:da:8e:bf:84:61:c3:f9:21:
3c:41:31:0a:96:c5:6c:08:31:f9:6e:59:e7:bc:11:5e:fd:69:
aa:f2:aa:c6:84:ed:e7:25:43:3d:44:72:6f:da:77:c8:87:0d:
db:50:05:a4:1f:ab:e3:bb:b3:a6:d8:3d:63:46:ce:e0:85:19:
14:0f:ca:de:7e:35:d9:0a:6f:e2:14:0f:12:28:35:d9:fb:29:
3a:65:e5:80:a1:bf:7c:8f:c0:19:03:60:5c:e5:77:b8:c2:bb:
d5:92:c6:89:0d:85:f6:94:00:8c:ef:95:40:3f:fb:cc:af:b4:
b0:7f:94:cb:5d:cf:db:da:bc:e8:47:5f:7d:64:e1:d1:6b:e7:
f2:dd:14:88:51:61:62:5e:1c:18:4e:0a:e7:3f:b0:05:2d:ca:
ae:9e:44:a5:15:a5:2f:c0:98:fc:9d:c4:34:09:d6:06:b9:0d:
be:2f:35:41:e6:1c:a0:df:0d:1c:56:0f:6d:55:2f:02:06:56:
a9:e2:91:d2:e2:aa:f4:fb:0d:ba:09:dc:48:be:f8:8f:a0:b4:
4b:ee:ed:63:ba:31:48:7c:f7:0c:a5:1d:0d:55:7d:a1:37:e3:
a2:51:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:16 2025 by rpki-client