Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/36kIkhn1asWFhNR_ew1YpVJl5t0.roa
File: 36kIkhn1asWFhNR_ew1YpVJl5t0.roa (raw, json)
Hash identifier: eWlPzJKsjPhIhN22PK3yftMciBkx2+KGpXfaGjme6oA=
Subject key identifier: DF:A9:08:92:19:F5:6A:C5:85:84:D4:7F:7B:0D:58:A5:52:65:E6:DD
Certificate issuer: /CN=39407123065c955d19d4fae963b0d055f489b215
Certificate serial: 01856F0B746DC07C1ECFC708D1DB7ACE390C
Authority key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/36kIkhn1asWFhNR_ew1YpVJl5t0.roa
Signing time: Sun 01 Jan 2023 20:34:59 +0000
ROA not before: Sun 01 Jan 2023 20:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 212.18.111.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:74:6d:c0:7c:1e:cf:c7:08:d1:db:7a:ce:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39407123065c955d19d4fae963b0d055f489b215
Validity
Not Before: Jan 1 20:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfa9089219f56ac58584d47f7b0d58a55265e6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:dd:23:88:7a:c4:3e:9d:a0:f9:b6:9a:49:
98:d9:90:38:6d:af:fa:39:47:f2:87:c5:9d:e5:73:
13:67:62:9d:ed:e3:06:b6:18:30:79:6b:d0:ee:40:
33:43:48:b0:63:8f:bf:c6:22:fe:43:86:2d:d2:22:
6d:cf:45:57:32:4d:30:8b:34:6e:38:8b:37:85:56:
47:c1:e0:ef:0f:4a:23:87:a1:7d:e4:0e:85:99:86:
f0:84:7c:73:e0:a4:38:fd:91:70:72:75:2d:b6:eb:
17:06:41:82:e5:2a:69:ca:7b:02:bf:94:40:13:e5:
a6:d3:59:df:1e:1e:5e:6e:38:5b:d2:1c:19:45:7b:
ba:9e:18:20:19:c9:6a:21:e6:44:b4:6f:dc:66:25:
54:05:a6:19:80:25:33:ff:44:4d:08:3c:5c:08:a3:
c2:00:5c:aa:3c:8e:cc:60:d6:b2:ce:d5:af:f3:9c:
49:84:b8:36:4b:7e:ac:29:54:fd:e6:3e:53:ef:b5:
5a:6d:84:a6:7a:b5:9f:f6:f4:25:c6:7c:09:62:40:
a6:03:20:31:39:ec:36:b7:8a:a0:aa:68:88:2c:dc:
27:01:22:36:be:c1:ef:76:39:32:1a:19:d5:ee:21:
3c:77:8f:91:c0:dc:b3:ba:2d:4f:e1:d2:79:1f:8c:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:08:92:19:F5:6A:C5:85:84:D4:7F:7B:0D:58:A5:52:65:E6:DD
X509v3 Authority Key Identifier:
keyid:39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/36kIkhn1asWFhNR_ew1YpVJl5t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.111.0/24
Signature Algorithm: sha256WithRSAEncryption
26:12:6c:0a:ea:2f:a5:f6:3b:cc:d7:35:40:22:1e:a1:ad:13:
3a:37:b1:97:d4:ee:74:d3:17:26:17:91:c9:c3:4f:4e:5c:67:
f5:2c:62:4e:33:7f:df:68:a4:b5:d9:44:08:5e:81:31:1d:38:
de:80:cf:9b:ad:89:67:57:72:e8:93:22:1e:ba:82:44:c3:6b:
e4:71:a5:cf:1c:0d:5d:a3:88:45:0b:4b:71:d9:6d:b9:42:b6:
9d:86:d1:50:ee:cc:85:c1:6c:d8:28:9c:f8:8a:47:c6:da:c5:
05:7e:c6:31:db:7d:1a:b9:d5:d8:af:fb:3c:a7:db:5a:eb:40:
94:86:57:61:f3:80:35:ac:5f:a0:24:47:43:6e:8a:e4:9d:09:
22:63:66:4e:91:ed:1e:7d:43:39:09:6b:c4:c1:43:99:90:f7:
fc:3b:c7:f7:3d:55:84:0d:f3:e0:51:91:63:46:33:d8:e0:2c:
99:65:c3:14:65:21:18:d5:0b:75:47:7c:72:49:0f:17:f9:65:
33:23:98:44:3d:c1:ab:27:62:be:70:e3:41:20:8d:2c:74:80:
c6:25:6a:29:40:27:6a:66:92:0f:20:5a:54:01:eb:37:34:34:
a3:68:86:74:bc:50:4f:ca:53:3d:19:fd:b7:81:33:b9:b5:05:
27:f9:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:43:15 2025 by rpki-client