Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/UA0UTdJmHZyeU9dc89z8H8yhZFo.roa
File: UA0UTdJmHZyeU9dc89z8H8yhZFo.roa (raw, json)
Hash identifier: WqwIhQV98b40G0jJxT19Pd4EyJdV8fpj0TBQ4QRv7wI=
Subject key identifier: 50:0D:14:4D:D2:66:1D:9C:9E:53:D7:5C:F3:DC:FC:1F:CC:A1:64:5A
Certificate issuer: /CN=39407123065c955d19d4fae963b0d055f489b215
Certificate serial: 018AEEE3C80E350CBF9BCA38079AE3599FFE
Authority key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/UA0UTdJmHZyeU9dc89z8H8yhZFo.roa
Signing time: Mon 02 Oct 2023 05:36:59 +0000
ROA not before: Mon 02 Oct 2023 05:36:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216255
IP address blocks: 212.18.111.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:e3:c8:0e:35:0c:bf:9b:ca:38:07:9a:e3:59:9f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39407123065c955d19d4fae963b0d055f489b215
Validity
Not Before: Oct 2 05:36:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=500d144dd2661d9c9e53d75cf3dcfc1fcca1645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:bd:cd:09:da:52:d8:16:41:0c:30:f7:68:
4b:f6:41:77:16:07:84:b7:db:ca:cc:3b:19:ab:b6:
a2:a1:65:1c:e6:68:d0:17:14:bd:cf:21:0f:d6:64:
ac:b2:ff:4f:b2:ee:c3:28:5b:7a:44:31:0a:5f:c7:
a4:9f:60:b7:66:21:39:a8:27:4a:df:cf:16:1a:5f:
91:1c:b5:bf:74:22:b7:84:e1:23:a5:0c:ee:42:6a:
43:3f:a6:74:33:c2:69:0e:9e:85:df:09:8c:53:22:
0f:9c:0f:7d:54:48:de:5b:fa:dd:72:4e:3e:b0:7f:
83:e9:aa:35:01:e1:fe:ef:7c:c8:a6:35:14:21:81:
c5:94:8d:59:29:61:5a:46:be:b7:40:25:a2:50:58:
b3:fb:d0:6d:9b:c0:51:ac:65:78:74:6c:c4:2f:11:
43:33:b2:9c:4c:2e:f0:aa:22:34:9a:de:27:92:36:
e6:30:4b:04:8d:d8:13:5f:d4:a8:a0:13:92:ad:a5:
37:6d:2e:ea:20:07:dd:7c:87:97:2c:72:35:12:de:
7b:11:cf:76:8d:f4:c2:99:c3:94:f4:9e:73:28:54:
22:ef:73:b8:0c:37:9b:31:74:cf:54:10:c9:c3:82:
cb:0b:b3:41:e6:4d:c1:ca:b9:da:fd:68:a3:d2:01:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:14:4D:D2:66:1D:9C:9E:53:D7:5C:F3:DC:FC:1F:CC:A1:64:5A
X509v3 Authority Key Identifier:
keyid:39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/UA0UTdJmHZyeU9dc89z8H8yhZFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.111.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a3:dd:c4:74:d1:85:ba:e1:c7:43:cc:d6:40:e2:8a:fb:07:
4a:e8:99:5e:a3:99:6c:f8:36:cd:a9:f3:27:23:08:90:f8:02:
c4:bf:70:92:a6:7f:9f:00:30:73:c1:19:ed:0a:2f:83:a8:4f:
ef:40:3b:49:de:ff:66:09:f5:4c:1f:f8:32:b1:d1:bf:97:9c:
33:57:72:71:ab:1c:4d:e5:7a:86:d0:fa:ed:57:66:be:b7:b2:
1f:e2:ff:8d:51:27:64:83:4d:5f:c6:4d:b8:b2:4f:3a:d8:e8:
56:5f:dd:73:88:f3:7e:00:56:51:f8:03:6d:03:f8:b0:13:f8:
19:78:f2:84:e5:bc:a4:90:1f:3e:38:ab:c4:e0:87:c1:31:46:
64:90:1e:70:9a:32:32:2c:8f:68:ae:7d:18:f5:fc:47:36:c8:
2a:c2:5d:bc:d4:cf:20:25:8e:21:1a:71:7e:dd:28:28:e4:46:
4a:4d:e0:6b:a3:17:84:ef:68:20:67:0e:ca:67:55:e0:5e:cb:
d6:76:b3:38:9c:73:da:3c:19:82:89:bb:2c:8d:25:90:eb:51:
d1:91:ab:ea:69:2a:62:3e:7a:c0:78:12:01:09:aa:0e:85:63:
fa:c2:64:a4:77:c2:d7:69:cc:05:3d:cd:a0:68:f8:8b:62:77:
2f:82:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:33:33 2025 by rpki-client