Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/2i7411NEmslhnfe4njdRAMEBMSs.roa
File: 2i7411NEmslhnfe4njdRAMEBMSs.roa (raw, json)
Hash identifier: vQVw4i5LIJdfO2xLep4W53RD31E7dornSho5cujNSPs=
Subject key identifier: DA:2E:F8:D7:53:44:9A:C9:61:9D:F7:B8:9E:37:51:00:C1:01:31:2B
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01856E38A9ED55DB0E9F1DE0AD8FC1D114CB
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/2i7411NEmslhnfe4njdRAMEBMSs.roa
Signing time: Sun 01 Jan 2023 16:44:45 +0000
ROA not before: Sun 01 Jan 2023 16:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61003
IP address blocks: 213.232.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:a9:ed:55:db:0e:9f:1d:e0:ad:8f:c1:d1:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 16:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da2ef8d753449ac9619df7b89e375100c101312b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:d9:f1:76:e7:da:ce:48:5b:e8:c6:8d:a5:
25:a7:9c:53:80:a4:73:f5:18:df:f3:66:7d:e4:4a:
39:f3:71:8e:95:2d:e2:69:41:d5:af:9c:30:64:0d:
60:53:de:b6:24:a1:4e:a0:32:15:99:e7:e2:9c:6c:
24:1e:a6:d8:83:e4:bc:f9:96:f3:fb:55:cf:09:60:
15:e6:5b:09:7a:80:c6:98:07:02:2a:d0:7d:b9:b7:
7a:49:0f:34:fa:19:f6:25:b1:3e:9d:54:59:41:89:
1e:9e:85:41:88:5d:a4:e2:43:9d:89:38:11:04:f3:
77:a5:eb:c4:ea:ef:5a:75:82:11:3a:77:0b:87:65:
3f:a6:0e:64:29:ce:35:f3:07:39:33:80:7b:30:5e:
d1:01:65:86:c6:a2:01:bc:16:46:11:59:82:36:de:
fa:ff:5e:ad:6e:e0:ea:65:d3:c1:f4:4f:2d:5a:52:
cf:9e:a3:f9:80:a6:70:69:63:64:49:0a:b8:e2:88:
a0:29:81:84:fe:8c:d0:83:a6:f1:38:6a:2b:a4:2e:
60:cd:4b:e7:39:ff:a1:c7:e5:b3:27:7e:4d:03:ec:
20:dd:a8:e9:d0:5f:66:7c:50:86:09:17:29:f5:10:
70:a6:49:4f:ff:21:60:49:4e:b7:1f:c0:ca:d7:41:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:F8:D7:53:44:9A:C9:61:9D:F7:B8:9E:37:51:00:C1:01:31:2B
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/2i7411NEmslhnfe4njdRAMEBMSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b8:29:5b:89:09:e8:f1:cb:6a:bb:ed:37:57:7e:7f:1e:61:
64:00:52:d1:f0:ad:ca:d1:57:6d:99:25:43:2d:ff:eb:5c:d8:
53:ba:b6:9e:31:84:c0:5a:d4:78:4f:8e:d0:43:d2:43:31:4b:
b2:8a:02:8a:ff:bb:a7:c7:05:9f:80:93:58:73:b7:3b:70:c1:
e4:f6:26:42:d4:bf:7b:79:a5:45:6a:3d:40:02:0c:64:f9:8b:
83:29:fb:e0:70:dd:50:e3:79:0c:57:2b:6d:70:e5:7a:5d:64:
9a:f6:68:5e:7f:48:63:0b:f2:18:e3:fb:18:81:4d:5f:4b:de:
de:49:47:09:af:4b:c5:1c:18:0d:10:39:9a:1b:1d:6e:26:8a:
f5:93:23:da:ee:c0:aa:8b:46:9d:81:4a:18:b1:34:4b:f6:0f:
54:5b:51:bc:4b:af:a7:ef:1b:67:3a:91:0c:22:dd:00:0f:67:
57:a8:a9:df:3b:92:08:87:c4:07:29:87:49:e4:e4:d8:fb:d8:
42:73:cb:f4:6f:3a:39:02:02:b2:93:2c:1e:ba:5b:57:6c:38:
4e:02:61:0a:eb:40:40:7e:b1:3e:35:9e:ce:3d:1b:5f:9a:e3:
90:c4:df:50:e5:b3:6f:94:12:19:0d:66:64:32:3a:39:8c:1e:
3b:45:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:24:42 2025 by rpki-client