Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Awc78040fIdwzxHZvzZTXeIKi7k.roa
File: Awc78040fIdwzxHZvzZTXeIKi7k.roa (raw, json)
Hash identifier: dMu/5gh57bkR6G46jM5Y/NILN67mS6G2JxgUqvidrUQ=
Subject key identifier: 03:07:3B:F3:4E:34:7C:87:70:CF:11:D9:BF:36:53:5D:E2:0A:8B:B9
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0195225C33B283CFD63C3B68FA3C87566290
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Awc78040fIdwzxHZvzZTXeIKi7k.roa
Signing time: Thu 20 Feb 2025 07:57:02 +0000
ROA not before: Thu 20 Feb 2025 07:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59711
IP address blocks: 213.232.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:5c:33:b2:83:cf:d6:3c:3b:68:fa:3c:87:56:62:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Feb 20 07:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03073bf34e347c8770cf11d9bf36535de20a8bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:4a:e0:9f:3a:40:96:c4:57:2c:28:27:a7:
8d:b4:85:34:cb:8f:96:a3:9c:13:2d:0e:cc:ae:4c:
c6:5c:94:3a:fc:3a:2b:7f:88:0a:47:da:ca:7a:b2:
1f:f4:3b:cc:e6:0f:55:42:ff:1d:2c:42:63:9d:b8:
d8:46:91:0b:ed:07:76:57:72:48:48:0a:d1:2a:79:
64:3c:74:a8:e1:74:e8:25:35:76:a3:b1:ce:37:a8:
9f:f0:48:7e:62:33:92:90:2e:a2:46:f0:28:13:a5:
e9:07:e5:64:42:34:74:15:82:16:de:ed:cc:8b:2d:
cc:bb:f2:b4:3f:14:2f:61:a4:55:9d:b0:c7:ba:45:
21:f9:9b:27:11:03:fb:5b:9c:bc:a5:c9:34:2a:b1:
c7:61:9b:f7:28:69:5e:00:64:a9:b3:d9:3b:1c:f0:
72:90:5d:a2:d8:c2:a4:4e:f4:99:56:1d:4a:19:fb:
e3:7f:b0:b1:da:15:90:72:14:5b:2e:c6:20:fa:af:
ca:9f:c6:06:86:90:07:bf:f4:25:a6:90:50:3f:76:
46:89:1b:2b:81:7c:a2:9c:09:02:6e:92:cb:3b:d0:
f7:ac:e6:70:db:14:7b:07:14:8a:7f:aa:77:7c:bf:
11:f9:10:e9:81:b5:f7:14:ed:b8:cb:81:01:03:b4:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:3B:F3:4E:34:7C:87:70:CF:11:D9:BF:36:53:5D:E2:0A:8B:B9
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Awc78040fIdwzxHZvzZTXeIKi7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e2:e4:67:48:a4:4a:4c:8f:1b:55:16:57:1d:05:81:32:16:
3e:e1:6a:c9:5b:ce:89:ef:9b:94:78:0a:f0:44:28:af:91:2d:
43:ff:f6:ef:f9:b2:4d:0c:b5:21:61:8b:54:ae:b7:ab:a0:79:
fe:86:d1:c4:ba:79:11:e8:c2:5c:98:a1:7f:32:07:2c:d6:14:
b6:e5:5f:db:90:c5:07:89:70:67:3f:2f:4c:75:6a:33:1e:28:
2e:5e:cf:c1:ee:1c:d4:fd:6f:4a:6c:59:78:bb:75:2f:5c:2a:
6d:66:0a:cb:61:1f:09:ac:c6:08:ed:c5:93:42:c8:84:9b:5d:
73:18:d0:c7:e2:d4:1d:16:79:1f:f3:e5:58:74:37:5d:aa:93:
d5:a9:a5:ab:e1:76:6e:8f:b9:06:14:61:13:eb:5b:0b:6b:78:
b5:ab:5b:a0:76:12:cc:fb:e4:8c:04:87:63:48:98:f2:01:0c:
1a:47:b6:3f:ee:f5:a0:b1:4e:13:84:5d:86:52:98:6e:19:bb:
92:64:76:b7:aa:e8:8f:c0:67:6d:5c:bc:44:aa:6c:cf:38:a2:
e4:b8:eb:93:47:48:70:f7:db:05:b3:9c:6c:02:af:07:3c:82:
e0:47:4d:c0:8b:5a:28:87:a5:ea:21:59:c0:d6:4f:1a:d2:36:
1c:24:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:25:20 2025 by rpki-client