Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/tN67pHswQKzz7r1r_8e-KYpmJyo.roa
File: tN67pHswQKzz7r1r_8e-KYpmJyo.roa (raw, json)
Hash identifier: wr6nW4B+xdvq+mxGJrey0ca0CVIwfwzIF451q2mrS+U=
Subject key identifier: B4:DE:BB:A4:7B:30:40:AC:F3:EE:BD:6B:FF:C7:BE:29:8A:66:27:2A
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17CC282B
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/tN67pHswQKzz7r1r_8e-KYpmJyo.roa
Signing time: Sat 01 Jan 2022 00:54:28 +0000
ROA not before: Sat 01 Jan 2022 00:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12443
IP address blocks: 213.175.124.0/22 maxlen: 22
213.175.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399255595 (0x17cc282b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4debba47b3040acf3eebd6bffc7be298a66272a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:88:cc:de:81:09:b3:d3:7b:dd:bd:0e:60:
71:d7:bc:6b:cd:20:6a:9c:ff:e4:7c:16:95:c9:d3:
eb:e1:bf:5e:26:73:9c:89:e9:10:eb:07:55:05:ca:
8b:24:f4:56:66:c8:29:91:28:6a:e3:48:98:07:27:
38:4d:b7:6c:d3:08:ae:7c:fd:f6:a8:ec:c9:ee:1b:
94:ca:43:d9:c2:76:4e:e0:f0:59:cf:55:25:3d:a2:
0e:b4:d3:2b:69:fc:c4:81:58:67:08:93:1c:9f:6a:
24:89:a3:96:a5:b4:e1:05:55:b0:63:2c:85:3f:05:
f8:5c:b4:1a:70:9c:69:c3:9d:47:f2:b6:73:cf:de:
e8:89:ea:e0:c9:a2:08:7b:3a:87:4c:ce:ef:18:1a:
17:fc:89:6d:5f:b8:1f:29:0d:78:e6:89:7a:31:11:
6a:ca:c5:e0:f2:26:90:26:4d:8b:73:81:db:af:7d:
c0:cd:45:6b:7b:04:82:4f:f3:f6:fa:43:f7:ea:51:
0f:90:7a:a3:dc:77:55:29:e1:1d:03:08:ad:cb:d2:
a4:d5:b4:ca:c7:71:de:6b:2b:78:d4:0b:fe:a0:88:
e1:4b:75:e4:95:fd:9a:3d:f8:d2:d1:c6:d7:91:8e:
70:72:69:cc:2b:c3:ea:97:d1:74:d1:a2:af:13:c1:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DE:BB:A4:7B:30:40:AC:F3:EE:BD:6B:FF:C7:BE:29:8A:66:27:2A
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/tN67pHswQKzz7r1r_8e-KYpmJyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.124.0/22
Signature Algorithm: sha256WithRSAEncryption
92:af:3e:a1:2f:ae:db:03:10:05:37:6f:eb:05:6e:43:fe:77:
67:94:e3:38:66:29:7d:9c:5a:cc:68:e7:61:80:b3:66:86:ff:
4d:49:74:5b:91:e5:af:ac:5b:56:c8:92:44:3d:66:54:e1:95:
c7:fa:8d:89:11:d0:b6:48:be:99:41:3c:6f:66:fc:1f:89:97:
aa:0a:e9:9f:fd:73:00:08:75:15:25:cb:a0:cf:49:6f:26:73:
32:4f:34:b2:92:e6:7e:13:73:82:b1:92:f7:ea:8f:fa:b5:ff:
0f:99:c1:20:ef:e8:62:7f:89:35:d9:86:0b:b3:53:e9:62:aa:
77:0b:5d:56:1c:45:7f:b1:56:36:12:2d:cc:8f:de:7f:80:e8:
30:ec:92:5c:99:ca:4a:c7:dd:d8:1f:5c:07:ef:fc:64:0e:8f:
2e:af:bd:55:48:3d:42:96:0b:d6:64:34:56:9f:85:16:fc:ec:
54:a4:1a:5c:38:bd:31:bc:59:ba:a7:5d:f0:ea:6e:fd:d4:28:
3c:a4:44:ce:de:33:f0:db:c8:82:bd:48:56:d1:d4:0c:ee:e5:
d1:00:d8:53:9e:37:ef:c2:52:59:3e:63:3e:99:e9:87:c2:55:
eb:c1:66:2a:5c:c3:27:df:e1:a5:0e:f9:54:ba:34:a5:61:cf:
8c:29:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:56:36 2025 by rpki-client