Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5iE-rYGXhC8FprcaG6wdZukCpr4.roa
File: 5iE-rYGXhC8FprcaG6wdZukCpr4.roa (raw, json)
Hash identifier: AbDvETZEG+QA+bGWr9wrGbj4gn6lt8usMCa8JPn5q7Y=
Subject key identifier: E6:21:3E:AD:81:97:84:2F:05:A6:B7:1A:1B:AC:1D:66:E9:02:A6:BE
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440A012BD68D71F34BFF9BD9A0C5AE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5iE-rYGXhC8FprcaG6wdZukCpr4.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58172
IP address blocks: 213.232.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0a:01:2b:d6:8d:71:f3:4b:ff:9b:d9:a0:c5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6213ead8197842f05a6b71a1bac1d66e902a6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:b5:57:da:4d:72:1a:ee:2b:2e:9d:51:22:
23:c1:bd:84:fc:db:e7:31:59:fe:a2:c7:fe:2c:20:
f9:a0:4e:f1:01:6b:82:96:b6:98:a6:74:e3:0c:b4:
0d:9f:16:f6:69:f1:01:c4:60:d8:e4:c6:03:94:50:
2d:e3:4f:7d:78:70:3c:26:9a:ad:7d:b5:86:ee:05:
60:60:52:00:d7:e8:d0:55:6b:b9:26:10:b0:1f:87:
66:9f:8e:03:c1:c3:f8:fd:3a:62:d9:12:77:82:2d:
a4:4d:e2:67:63:aa:8f:4b:12:7f:17:57:37:f2:24:
31:da:7a:b1:67:66:83:50:5c:6f:c9:be:36:aa:46:
d3:1a:5c:50:c5:ad:97:b8:7e:9d:f7:22:96:f4:08:
6c:cf:71:9c:27:ef:44:09:c2:e1:20:a3:51:28:b5:
ad:c6:e7:9b:6b:36:aa:de:d0:c4:1b:6a:64:78:a5:
31:6c:22:b1:ec:1f:e9:86:37:31:97:84:fa:c8:4c:
d1:dd:13:f8:84:78:86:17:9a:1f:e5:ac:ec:2f:23:
29:a6:54:8e:f1:9e:76:24:ce:4e:99:9f:ab:3b:84:
48:c8:60:54:be:3a:6c:1f:67:67:4d:d8:20:1e:fc:
95:e5:ac:ff:2f:ca:f3:d1:65:8b:3d:64:26:3b:1b:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:21:3E:AD:81:97:84:2F:05:A6:B7:1A:1B:AC:1D:66:E9:02:A6:BE
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5iE-rYGXhC8FprcaG6wdZukCpr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:22:88:9d:68:e4:6e:35:60:bb:34:1c:ba:d6:40:05:c7:10:
f0:ae:c1:2a:f3:d8:a6:1c:91:5a:86:55:8b:ca:50:ee:e2:8d:
7b:c4:72:88:dd:dd:5e:15:de:cf:cc:bd:05:9f:2a:8b:34:ff:
07:9d:bd:97:c2:c5:8f:86:2a:c9:a6:cd:ac:f0:ce:85:78:43:
cf:9f:60:31:12:42:70:cf:43:83:b3:0d:94:40:ff:8f:1f:ec:
0e:4f:7c:ec:41:87:6b:3c:96:31:6b:40:67:d8:99:33:7f:f4:
9b:12:a1:ad:8e:6e:70:05:7e:76:53:09:ea:e7:7d:a1:74:30:
a4:6e:39:12:9b:4f:7e:d0:1f:9c:ee:36:f5:ac:f2:bf:27:10:
d8:e3:93:aa:8f:cd:0c:a0:f6:f2:b0:38:6d:79:d0:c7:57:98:
2e:3e:ac:73:46:7a:25:f8:53:e3:d0:46:43:54:5c:e3:b2:4a:
0c:de:08:75:f4:1f:9a:63:0a:06:d0:97:86:bd:44:4f:6f:2a:
32:9f:42:0f:a6:5b:34:bc:a1:48:ad:11:04:5f:0f:b1:85:36:
e3:a0:15:68:85:c0:a4:44:95:d3:71:dd:7b:4c:7b:25:85:85:
49:6f:89:65:16:8c:c0:a7:76:5d:cb:49:fa:cf:4c:9f:92:d8:
8d:73:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:36 2025 by rpki-client