Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/cSIsSraiS7nIkZaNHDPeLhmfWzw.roa
File: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (raw, json)
Hash identifier: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=
Subject key identifier: 71:22:2C:4A:B6:A2:4B:B9:C8:91:96:8D:1C:33:DE:2E:19:9F:5B:3C
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 0194214415F217638F5D65FC90FED1137748
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/cSIsSraiS7nIkZaNHDPeLhmfWzw.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49961
IP address blocks: 212.99.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:15:f2:17:63:8f:5d:65:fc:90:fe:d1:13:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71222c4ab6a24bb9c891968d1c33de2e199f5b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:bf:12:30:44:92:d8:a3:09:d2:d2:24:73:
c1:75:90:a6:16:70:cf:31:6a:14:44:10:6e:7c:40:
06:41:23:b4:38:c6:26:43:c8:b4:d0:9b:d6:ac:6d:
55:f0:8f:94:6a:17:42:a3:7c:3f:3b:06:07:19:28:
b6:93:df:62:48:eb:46:8c:21:54:34:b5:a9:65:f7:
da:86:bf:9b:cd:73:95:e3:0e:b9:98:50:b3:e1:ff:
7f:09:7a:cf:72:bf:92:47:ff:c9:30:31:6a:47:5f:
ce:f0:ba:1d:3f:1b:3d:da:a4:a2:5e:09:63:5e:58:
dd:df:fe:5f:31:c9:7b:f2:9b:6a:ff:32:0c:02:8b:
24:36:30:f6:77:4c:94:d3:ff:c4:9f:e7:94:18:7c:
ce:c6:24:1f:5a:e4:60:ec:9b:46:a9:eb:09:f6:3b:
b0:36:36:b6:a9:b3:bc:95:cc:df:84:b6:c7:c8:95:
70:4c:34:30:5b:b2:eb:01:08:07:6b:3b:f8:75:1e:
10:eb:74:ed:6a:ac:f3:82:00:f1:31:6e:fd:b4:23:
42:fa:21:f7:84:97:7f:bc:3c:77:ca:46:92:3f:43:
2a:3f:bd:bb:a2:0a:24:20:f1:ad:bc:82:da:1e:7b:
98:be:d7:9f:48:3f:8f:74:f8:95:7a:c6:48:eb:08:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:2C:4A:B6:A2:4B:B9:C8:91:96:8D:1C:33:DE:2E:19:9F:5B:3C
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/cSIsSraiS7nIkZaNHDPeLhmfWzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.99.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:58:41:b0:e3:69:94:04:ea:09:76:fe:06:b9:a1:25:58:97:
df:d2:b3:e7:7d:d8:e6:24:ec:7e:c1:02:53:04:ce:0e:ec:8e:
5c:24:38:17:e5:32:eb:fd:d8:a9:8e:d6:d1:be:35:05:37:73:
aa:b1:1a:0a:21:be:87:59:5c:43:60:c8:c5:ac:b1:a3:63:a1:
80:c5:d0:f6:e9:d6:2d:2f:e9:fa:f1:70:98:7d:9f:6d:85:e1:
90:ae:a7:fa:41:37:73:fc:32:65:80:05:22:00:19:15:97:84:
cd:40:3f:ea:c2:03:0e:b5:e6:10:44:a2:76:8e:58:44:50:2f:
1e:ab:3a:6a:43:7f:f9:55:b9:d4:be:65:fb:2e:9a:36:29:c4:
45:28:b7:05:b3:38:fa:bd:03:f2:97:1d:d7:f3:f5:42:bc:6f:
73:11:2c:f8:f4:4c:e3:34:86:78:f6:6c:91:65:70:bc:83:76:
78:ce:ba:6a:bc:9c:65:40:92:6b:53:82:e1:2c:c8:e7:6f:41:
83:c9:3a:00:d9:ef:e3:26:34:b5:15:d4:1f:42:3b:55:c7:f8:
d1:ae:da:93:4e:39:fa:9c:44:80:98:e7:0b:0e:e3:5a:af:11:
ea:40:de:2a:38:03:e9:a9:4a:40:4a:db:24:ef:7a:d8:5c:1c:
da:7b:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:19 2025 by rpki-client