Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/FXoirAV342wxKG92xeup7H8Ap8E.roa
File: FXoirAV342wxKG92xeup7H8Ap8E.roa (raw, json)
Hash identifier: sGV0iTl2YCqrIjbSdRWEOdBNR7xF+EZ5hOYwe6qEq34=
Subject key identifier: 15:7A:22:AC:05:77:E3:6C:31:28:6F:76:C5:EB:A9:EC:7F:00:A7:C1
Certificate issuer: /CN=39407123065c955d19d4fae963b0d055f489b215
Certificate serial: 120D
Authority key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/FXoirAV342wxKG92xeup7H8Ap8E.roa
Signing time: Sun 06 Mar 2022 07:56:06 +0000
ROA not before: Sun 06 Mar 2022 07:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50131
IP address blocks: 212.18.111.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4621 (0x120d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39407123065c955d19d4fae963b0d055f489b215
Validity
Not Before: Mar 6 07:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=157a22ac0577e36c31286f76c5eba9ec7f00a7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:05:f4:7c:47:b4:b8:69:05:25:52:a6:66:
da:28:82:e1:b5:04:67:ef:ab:7a:04:0c:ee:93:51:
55:00:41:b4:9c:69:27:7c:dd:45:3a:99:51:1a:95:
3c:86:1b:46:eb:92:b5:71:f0:b8:1e:84:e1:91:71:
45:8c:e4:ce:78:ad:ef:2c:f1:d3:cc:98:2c:12:9d:
a2:3b:ca:7e:7e:fb:e0:31:e6:04:ff:83:95:68:24:
2a:89:44:f8:eb:e3:5c:27:71:d3:17:33:d0:fa:f6:
1f:eb:91:4f:da:4a:27:41:b7:4b:28:ca:7a:3c:9e:
d0:42:d0:f7:3d:2e:6b:cf:22:4d:39:a1:cf:6d:ca:
19:91:77:1a:d2:0f:7d:aa:b6:81:2f:0a:fd:ea:7b:
4e:7d:b6:0c:14:9e:9b:68:f3:40:07:50:0e:26:1a:
86:05:ea:5e:06:4e:97:82:fc:cd:7d:84:ed:51:34:
d1:fc:c5:80:1a:ea:d2:e4:48:a0:d3:13:2d:d7:09:
7a:2b:19:ed:1f:6b:cf:d7:2e:34:63:2f:f7:32:30:
25:f5:b9:7c:b9:ab:4a:c6:69:6c:12:f7:91:df:a0:
39:12:60:32:8e:3d:b8:e2:28:52:94:02:47:07:d6:
c9:cb:9d:99:59:45:40:54:89:9d:0b:97:3f:24:1c:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:22:AC:05:77:E3:6C:31:28:6F:76:C5:EB:A9:EC:7F:00:A7:C1
X509v3 Authority Key Identifier:
keyid:39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/FXoirAV342wxKG92xeup7H8Ap8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d0:a3:e6:bf:b9:75:9c:93:8e:b4:20:12:98:be:e0:a1:c1:
21:f9:02:1b:03:d6:ad:97:01:b9:54:a7:7b:fb:da:93:fd:37:
37:66:0c:13:99:28:15:b4:c6:8b:a8:4d:db:05:b7:99:1d:18:
0d:1a:3d:3b:5a:de:67:d0:79:f9:92:28:ba:46:53:a3:b5:02:
18:1f:7c:39:2c:51:61:d7:45:fa:e6:52:3f:b5:44:2f:4c:37:
4d:fd:f6:fd:0a:f6:80:2b:e7:a3:20:af:67:aa:1b:93:88:a0:
f2:26:fc:5b:df:68:22:9e:bf:e1:56:d4:e4:be:53:f3:00:8d:
02:8d:3f:e2:06:41:e9:19:40:81:af:2e:f0:6a:77:60:d2:7b:
51:ce:e6:0d:e9:c9:87:53:d5:09:72:81:d2:2d:2a:f8:63:cc:
e5:a7:80:2e:3a:f0:aa:86:56:d3:67:98:e9:44:b8:e0:80:52:
cc:d0:9f:46:1c:60:38:cb:64:fc:e3:5d:9a:86:fb:5b:11:e2:
fb:3f:57:e0:89:69:a0:42:7c:9b:82:e1:ba:02:51:9b:23:89:
e7:1f:f9:7a:8f:0c:63:14:96:d2:a0:9b:90:81:96:1e:af:e6:
c0:d5:f8:7a:be:1f:24:20:91:07:aa:c3:82:ab:a5:04:dd:27:
98:88:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:58:24 2025 by rpki-client