Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/P7b5zmQiLmwTefl5liI-KoZJpcY.roa
File: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (raw, json)
Hash identifier: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=
Subject key identifier: 3F:B6:F9:CE:64:22:2E:6C:13:79:F9:79:96:22:3E:2A:86:49:A5:C6
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019425215757C6F5E8128E10A43DF5F22B33
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/P7b5zmQiLmwTefl5liI-KoZJpcY.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 213.255.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:57:57:c6:f5:e8:12:8e:10:a4:3d:f5:f2:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fb6f9ce64222e6c1379f97996223e2a8649a5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:2d:03:6b:48:7b:47:6b:24:d4:ca:f1:fd:
ae:d4:b3:ac:e7:49:5d:73:ba:59:01:f0:9f:2e:b8:
39:74:7d:7b:c7:3e:c7:77:2e:1d:99:84:ed:3d:f8:
70:ae:bf:39:71:22:2d:24:b0:fb:ae:88:15:28:33:
1d:76:c6:db:8e:5f:db:76:5a:11:bb:55:f3:83:21:
41:03:cf:20:2c:4a:dc:89:29:78:56:8e:9d:41:67:
dd:6a:07:60:07:71:43:be:47:45:e3:09:d3:5f:eb:
1f:44:09:dd:02:58:89:ff:a2:75:49:dc:1a:3e:3b:
57:c0:bb:9f:20:d8:dd:8d:92:56:4e:8e:75:56:8b:
6c:e4:e9:20:a6:b5:aa:f0:86:4a:d8:2d:16:60:6d:
ff:20:27:40:fa:d4:d1:8b:17:da:db:63:23:75:77:
66:cc:f5:3d:80:10:37:92:8b:92:7e:56:9a:fd:17:
84:b7:83:34:dd:77:d8:1c:1b:ed:be:20:30:a6:a7:
b5:ae:d2:5a:ef:13:68:90:8f:fe:f3:32:d0:dd:0f:
f0:3c:30:5f:49:6a:5c:2e:f5:a0:c6:4a:97:41:65:
48:bc:e3:0e:ee:d0:0a:10:f3:4a:2b:7f:fa:38:9e:
88:3f:d3:58:5c:75:e0:68:76:e7:f8:fd:18:46:ed:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B6:F9:CE:64:22:2E:6C:13:79:F9:79:96:22:3E:2A:86:49:A5:C6
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/P7b5zmQiLmwTefl5liI-KoZJpcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b1:8f:aa:6c:d4:07:db:04:65:64:09:2e:ba:2e:78:a7:8c:
87:f3:b3:f7:ad:83:e4:fa:cd:b7:03:35:dd:89:57:82:b2:23:
2b:b9:96:19:78:30:d3:29:d4:75:32:d0:e2:3a:df:45:ce:03:
58:f1:5e:6d:f9:4d:b0:dc:bb:ca:46:f0:11:c6:3e:87:fe:40:
b4:71:51:e9:74:76:4b:db:cd:6f:fc:c4:39:a9:25:74:f3:7c:
e9:98:da:e8:76:c3:36:32:d1:63:24:38:77:4b:f6:6b:6e:a9:
77:3f:f0:5c:6e:1c:ac:ff:9c:7b:35:03:99:cb:2b:59:e5:76:
0d:b1:46:4b:5c:da:a5:10:fa:2e:76:c2:b2:56:b5:db:cb:f4:
a6:83:df:90:a1:ff:52:bb:d7:57:ec:24:1c:ec:2d:8d:b5:7e:
0e:35:21:e4:c3:07:95:bc:e8:31:ef:3f:9a:22:2c:0e:5b:de:
ae:69:24:ab:dd:76:52:16:00:5d:be:c2:87:87:71:89:3d:24:
c0:e2:8e:9b:f2:90:5e:8e:98:da:fd:5b:a0:75:2f:eb:3e:4d:
ac:6b:60:b6:ce:61:e7:d5:5f:7c:16:56:07:c4:51:4e:51:f8:
cb:12:d3:c8:eb:04:30:73:07:ea:32:09:b2:f7:a6:b7:fd:45:
19:c6:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:37 2025 by rpki-client