Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0vPb8eg7-97nmP3k5wtQlDzNgfk.roa
File: 0vPb8eg7-97nmP3k5wtQlDzNgfk.roa (raw, json)
Hash identifier: 2Dv3tIonYRqaIvYSQqIdq15wSa3EWj4oRUIn6ZqbqRM=
Subject key identifier: D2:F3:DB:F1:E8:3B:FB:DE:E7:98:FD:E4:E7:0B:50:94:3C:CD:81:F9
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01956A3393D6DCB8A8033C5877F0F2772B02
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0vPb8eg7-97nmP3k5wtQlDzNgfk.roa
Signing time: Thu 06 Mar 2025 06:45:19 +0000
ROA not before: Thu 06 Mar 2025 06:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 213.238.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:33:93:d6:dc:b8:a8:03:3c:58:77:f0:f2:77:2b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Mar 6 06:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f3dbf1e83bfbdee798fde4e70b50943ccd81f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:8a:4f:44:5d:10:6a:64:2f:fe:41:38:98:
1b:15:94:d6:a4:48:08:97:58:da:db:64:63:c4:cf:
78:22:df:0a:1b:5c:40:c0:ff:bb:43:c8:2f:15:d6:
b9:c0:de:c2:9f:1b:01:9b:29:c0:91:0a:50:ec:33:
76:9b:70:38:ab:0c:f9:be:20:c7:e4:c2:e1:10:e1:
11:37:ad:7d:40:28:30:6c:dc:30:6a:66:24:42:47:
03:d1:70:6e:a9:2c:e8:8e:37:54:d1:79:a7:34:2c:
80:8b:ea:16:22:e9:10:d3:86:59:f8:43:b3:07:5c:
f3:3d:8b:bf:81:01:0c:fe:e7:e8:be:86:8d:d0:ec:
82:c4:96:a0:57:2a:28:5c:7f:7e:fa:d4:30:95:5c:
02:e2:89:2a:af:3c:79:15:90:8c:ab:e4:73:92:46:
3a:20:4e:df:b7:cc:80:c0:02:08:8c:c2:22:9e:d4:
20:95:8d:2d:e6:40:73:a5:eb:3e:bc:69:90:5b:78:
8f:89:9a:3f:f2:25:7f:3a:d7:a9:36:fe:06:fa:eb:
04:d1:9f:dc:23:aa:98:77:fe:fc:e6:bb:75:63:dd:
88:60:15:b0:7d:d0:52:69:0a:be:a1:98:6a:a4:2d:
d6:92:7e:b3:7a:e6:4b:0e:11:ce:0f:c5:92:dd:44:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F3:DB:F1:E8:3B:FB:DE:E7:98:FD:E4:E7:0B:50:94:3C:CD:81:F9
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0vPb8eg7-97nmP3k5wtQlDzNgfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.173.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e2:c8:53:dd:b3:90:91:93:ed:fd:01:f2:cb:9f:73:2c:57:
a8:15:1c:e7:a8:79:25:64:87:7c:cf:18:d9:c2:ab:06:bb:6c:
de:73:17:34:f6:e1:07:c2:be:dd:d6:ac:ab:c6:b4:62:26:1f:
3f:df:7b:2d:c0:c3:f6:6d:9f:db:14:92:13:b6:d5:2b:6e:d6:
80:ea:be:a3:45:23:7c:0d:96:c6:f9:46:30:21:07:bb:71:90:
31:f3:1f:da:de:00:22:c3:4c:a6:d5:bc:44:5b:19:cf:a5:eb:
e8:51:27:04:8e:e3:ee:b2:e8:c6:01:84:bb:94:ce:e5:d9:d4:
89:9b:8d:5a:41:b9:09:bf:6c:43:18:e1:67:ba:4d:af:69:24:
26:a4:b9:2c:f4:16:ba:39:e7:d5:a5:cd:a2:32:81:3c:9b:68:
2c:63:3a:d2:2a:17:69:23:41:d7:38:3e:40:58:07:bd:1e:ba:
a3:51:8b:17:e7:b6:93:ea:cf:0a:ea:97:20:28:67:3e:3a:c3:
d2:9e:7c:aa:61:cd:85:76:5f:73:ed:1e:07:3f:22:f0:14:70:
17:62:48:db:78:b2:63:85:bd:11:53:5b:8f:51:7e:8f:a1:ad:
86:3b:61:8a:e2:b3:e6:d1:41:98:de:c3:9e:9d:b1:b4:ee:d3:
0d:8f:5c:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVqM5PW3LioAzxYd/DydysCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwMzA2MDY0NTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmYzZGJmMWU4M2JmYmRlZTc5OGZkZTRlNzBiNTA5NDNjY2Q4MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoaKT0RdEGpkL/5BOJgbFZTWpEgI
l1ja22RjxM94It8KG1xAwP+7Q8gvFda5wN7CnxsBmynAkQpQ7DN2m3A4qwz5viDH
5MLhEOERN619QCgwbNwwamYkQkcD0XBuqSzojjdU0XmnNCyAi+oWIukQ04ZZ+EOz
B1zzPYu/gQEM/ufovoaN0OyCxJagVyooXH9++tQwlVwC4okqrzx5FZCMq+RzkkY6
IE7ft8yAwAIIjMIintQglY0t5kBzpes+vGmQW3iPiZo/8iV/OtepNv4G+usE0Z/c
I6qYd/785rt1Y92IYBWwfdBSaQq+oZhqpC3Wkn6zeuZLDhHOD8WS3USh/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLz2/HoO/ve55j95OcLUJQ8zYH5MB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvMHZQYjhlZzctOTdubVAzazV3dFFsRHpOZ2ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6tMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ4shT3bOQkZPt/QHyy59zLFeoFRznqHklZId8zxjZ
wqsGu2zecxc09uEHwr7d1qyrxrRiJh8/33stwMP2bZ/bFJITttUrbtaA6r6jRSN8
DZbG+UYwIQe7cZAx8x/a3gAiw0ym1bxEWxnPpevoUScEjuPusujGAYS7lM7l2dSJ
m41aQbkJv2xDGOFnuk2vaSQmpLks9Ba6OefVpc2iMoE8m2gsYzrSKhdpI0HXOD5A
WAe9HrqjUYsX57aT6s8K6pcgKGc+OsPSnnyqYc2Fdl9z7R4HPyLwFHAXYkjbeLJj
hb0RU1uPUX6Poa2GO2GK4rPm0UGY3sOenbG07tMNj1y5
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:23 2025 by rpki-client