Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/nMbjCLX06xhot4wh703K4Oseeq4.roa
File: nMbjCLX06xhot4wh703K4Oseeq4.roa (raw, json)
Hash identifier: occuDLBJZQ2RYSlM/dyspxNgWi9mVquVmzNYL5cT5uk=
Subject key identifier: 9C:C6:E3:08:B5:F4:EB:18:68:B7:8C:21:EF:4D:CA:E0:EB:1E:7A:AE
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01856F14E8081E7B997824E399BBC47CC2FE
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/nMbjCLX06xhot4wh703K4Oseeq4.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212431
IP address blocks: 212.110.155.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e8:08:1e:7b:99:78:24:e3:99:bb:c4:7c:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc6e308b5f4eb1868b78c21ef4dcae0eb1e7aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:31:24:e1:24:ca:7a:85:84:a2:83:00:9b:
ce:bf:ae:4d:2f:ba:3f:21:0b:d2:ec:dd:d2:e2:ca:
63:f5:0b:28:11:d9:09:f7:79:63:de:13:91:b4:f6:
63:2c:fa:7f:66:f8:c0:44:9a:43:38:2a:f4:91:44:
71:1e:43:39:e8:f3:d0:dc:87:83:5e:39:54:23:2e:
9d:50:a3:a2:9a:3e:eb:e6:3f:9d:5b:2f:e7:13:19:
3d:38:5b:fc:72:77:7e:12:9e:68:5c:3a:7b:f9:8d:
e3:24:69:19:17:d0:d1:e6:a6:30:45:47:f2:ca:7e:
1b:17:b7:8d:19:60:85:e8:87:d5:24:44:53:bd:a8:
f9:4b:2a:16:4c:72:c6:dd:44:dd:f9:c9:5c:db:b3:
e2:8f:56:62:a8:48:eb:e7:aa:47:da:fc:07:94:28:
0a:ef:37:5b:3a:8f:b5:65:52:f0:cc:5f:dc:73:0d:
7d:82:83:40:4e:4c:ee:95:03:aa:e9:40:e8:27:d6:
a9:60:d9:b8:78:c3:d7:97:ab:a0:cd:cd:63:cf:48:
16:94:a2:2e:b0:de:b2:4a:c9:e5:b3:48:83:8f:13:
58:0d:f8:16:a7:4b:e1:85:c5:81:71:fa:0e:58:6e:
6a:41:a0:e4:aa:a6:87:62:c5:20:f2:c0:ae:55:16:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:E3:08:B5:F4:EB:18:68:B7:8C:21:EF:4D:CA:E0:EB:1E:7A:AE
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/nMbjCLX06xhot4wh703K4Oseeq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c1:5c:14:82:07:be:d0:5e:a2:f5:5c:2b:ea:5e:aa:4a:72:
8e:06:ea:23:f4:1f:5f:a7:04:20:a1:55:5b:12:27:bb:70:cd:
9a:da:6c:8a:ea:6e:e7:49:58:34:69:bd:dc:08:53:8e:f7:3c:
f8:16:aa:c9:3e:fc:6d:7c:59:73:0e:0c:5a:a1:86:88:70:f8:
ca:c0:ce:e8:a4:db:d2:f2:0b:5c:fa:8d:42:22:91:7a:b9:21:
8f:f8:30:60:eb:7d:6c:db:4b:37:80:c7:57:a2:e7:1a:81:d6:
d2:08:a5:a3:2c:2b:dc:22:07:40:02:c2:30:5f:5f:27:04:0c:
00:40:74:30:40:e2:d6:40:51:02:5f:9b:7e:5a:2a:f2:64:ab:
b2:a9:0c:28:b5:ae:b3:0c:66:4f:42:c5:87:7d:53:b2:86:ad:
07:9c:d7:b4:f6:8f:81:c4:36:24:d1:9b:8e:44:47:20:cf:7e:
e8:80:29:58:87:5c:d5:34:20:82:67:67:c8:34:19:d4:96:74:
80:df:7b:3b:42:18:99:5a:3b:99:87:91:c2:7f:53:51:97:ec:
10:c8:26:ca:5f:92:d5:20:7d:e1:21:64:ba:d1:77:17:6a:f0:
78:d6:26:93:fa:d6:8d:8e:af:1f:b0:08:d1:8d:5d:d8:7b:2f:
dd:61:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:36:55 2025 by rpki-client