Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/1-9JxDn-zZNl6SM8TaVznitWOYsc.roa
File: 1-9JxDn-zZNl6SM8TaVznitWOYsc.roa (raw, json)
Hash identifier: Rta4+NSf14vkml72XwKAomHf3UDV8Sf1h7UGq72e2/U=
Subject key identifier: FB:D2:71:0E:7F:B3:64:D9:7A:48:CF:13:69:5C:E7:8A:D5:8E:62:C7
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 0182B26BA69A5217AF5DA43D1407BEA2E17D
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/1-9JxDn-zZNl6SM8TaVznitWOYsc.roa
Signing time: Thu 18 Aug 2022 19:26:15 +0000
ROA not before: Thu 18 Aug 2022 19:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41108
IP address blocks: 213.232.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:6b:a6:9a:52:17:af:5d:a4:3d:14:07:be:a2:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Aug 18 19:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbd2710e7fb364d97a48cf13695ce78ad58e62c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:5b:90:2e:85:85:ad:13:29:61:64:ff:cb:
86:7d:f7:c8:98:6f:8e:cd:ac:5c:5c:60:1b:36:1d:
a0:58:43:09:86:c4:d6:80:61:fe:32:0e:7c:82:5f:
62:78:7a:f9:15:39:06:d7:d9:d0:ee:9f:70:f6:cf:
82:da:d2:65:6f:a2:5b:6a:0b:f0:41:ea:c8:ec:99:
58:f7:c9:d0:21:02:f2:b4:88:87:91:57:0f:ac:f6:
f2:4f:44:69:60:1a:c8:73:fc:79:5a:3b:4b:45:17:
dc:87:10:bf:e7:19:03:34:0b:8d:ac:ed:61:be:0b:
61:84:4b:8f:79:af:73:3e:5e:3a:08:0e:0f:ed:ee:
48:ef:48:e4:5f:9c:31:32:31:31:a6:25:df:25:27:
95:d6:e1:69:b3:08:da:1d:7f:df:4b:d1:28:be:e7:
d3:e1:51:26:2d:b8:35:b3:f6:e2:4f:00:e2:1e:b5:
18:c5:e4:62:9d:ad:89:56:f0:6d:c9:74:c4:1b:15:
86:db:f0:b0:72:3a:fb:23:90:72:cd:cc:0f:65:e2:
0e:09:58:5f:e2:d6:6f:71:b9:1d:77:b8:cc:88:05:
12:71:46:6f:89:ce:34:34:d6:f7:f8:48:4d:08:f9:
dc:8c:55:ec:0e:4a:30:cd:40:62:14:87:6b:e1:6b:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:71:0E:7F:B3:64:D9:7A:48:CF:13:69:5C:E7:8A:D5:8E:62:C7
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/1-9JxDn-zZNl6SM8TaVznitWOYsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
21:90:96:6f:fa:1a:01:74:45:5d:07:1d:77:4e:d5:c2:7e:bd:
62:80:ab:80:68:28:99:f9:eb:85:18:40:f2:28:36:2d:30:d4:
d2:b4:47:5c:23:f9:4a:1d:9c:a5:63:0f:db:e1:be:a4:40:eb:
98:83:82:8f:8e:60:83:92:61:c2:04:1e:08:d7:cf:4b:3b:53:
25:96:ec:3b:ce:f0:b0:67:52:3b:d6:0d:aa:59:03:9e:a8:82:
b7:57:29:ef:e7:bf:37:6c:ba:6a:29:52:c2:ed:42:96:9d:a4:
b4:be:19:3a:ca:49:e9:6c:a9:67:f6:43:b9:8e:9c:d4:dd:42:
fb:fe:80:cf:61:3c:cd:da:6f:de:d7:af:a3:63:1e:fa:b7:4d:
6c:8b:6f:f3:04:7c:3b:9a:7a:5a:d3:0e:39:9c:45:ea:8d:ef:
0f:dd:ab:6e:e7:b6:26:a7:3e:96:26:93:a1:3d:73:da:61:66:
79:c5:6a:e8:90:f2:29:03:c4:1f:68:85:3a:5c:72:4f:d1:ef:
89:30:8d:0f:ae:08:31:fc:61:e5:bf:09:f1:39:d5:3a:47:d3:
93:7c:b0:d7:46:c0:21:60:83:ef:fa:f7:bd:ca:15:de:7e:2c:
6a:71:ae:f5:a3:cf:8b:f4:eb:3e:59:12:51:1b:91:c9:82:53:
2d:6b:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:56 2025 by rpki-client