Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/x1FlL6cMMU5_-MNmCEPoV6gX9jc.roa
File: x1FlL6cMMU5_-MNmCEPoV6gX9jc.roa (raw, json)
Hash identifier: sytTwwoBeMDoQxcTojfiad4pd6lTwLcZ+uEx+YLtW1g=
Subject key identifier: C7:51:65:2F:A7:0C:31:4E:7F:F8:C3:66:08:43:E8:57:A8:17:F6:37
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0DA6F976
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/x1FlL6cMMU5_-MNmCEPoV6gX9jc.roa
Signing time: Sat 01 Jan 2022 08:59:33 +0000
ROA not before: Sat 01 Jan 2022 08:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39216
IP address blocks: 213.198.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229046646 (0xda6f976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 08:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c751652fa70c314e7ff8c3660843e857a817f637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:eb:1c:89:22:fa:e7:74:58:1b:69:60:93:
cf:82:ed:48:59:2d:91:d2:d5:c0:11:50:01:a9:01:
ba:f9:47:ae:23:ec:77:4a:81:9b:5c:69:e1:88:28:
f7:8c:b3:92:b5:15:e5:75:02:15:2b:cd:3a:45:d3:
d8:ec:69:a3:6e:38:f0:4e:0f:70:68:39:2e:ba:88:
2d:48:ab:35:e9:1f:7d:a9:49:e4:5a:b9:b1:d7:0d:
83:c1:d7:13:d6:ba:e7:df:87:24:a0:c4:fb:59:94:
c7:0f:76:c5:31:5f:fa:f7:e4:1e:3d:af:1b:20:9e:
74:45:16:49:7c:3c:28:4b:2e:ff:99:9c:f1:bf:13:
cd:2b:4d:6d:e1:90:70:06:2d:64:3b:e9:03:9d:7a:
ee:07:ba:18:b5:86:7a:02:d0:a5:e2:85:dd:3e:65:
ec:b4:98:a9:a1:b0:50:01:f2:3a:c9:d8:99:4e:5c:
44:77:bb:07:65:2f:de:ea:10:f8:13:8b:4f:c8:82:
23:3e:86:27:6d:15:ce:ab:ca:43:5d:f0:65:c4:65:
79:72:64:1d:0b:78:c2:86:cd:da:98:75:9f:a3:05:
2c:a7:12:8b:96:d5:8b:98:16:11:6f:e6:98:a1:e2:
6d:c5:14:c9:4e:61:77:fc:73:c8:5e:38:5d:43:48:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:65:2F:A7:0C:31:4E:7F:F8:C3:66:08:43:E8:57:A8:17:F6:37
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/x1FlL6cMMU5_-MNmCEPoV6gX9jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.89.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c5:2a:41:d1:a9:56:7b:1e:02:bf:4a:b3:89:66:a1:5c:f2:
09:30:50:80:46:28:4f:73:a4:38:f9:51:40:96:d6:50:4e:81:
4b:92:da:09:68:35:f0:63:3b:f0:ef:61:fb:83:7d:a8:9e:50:
82:0f:ef:9e:a6:e5:0a:42:78:3c:8d:49:0f:83:b2:7d:c3:fe:
1b:43:c7:af:35:91:dc:56:d1:32:24:52:ef:42:a6:d4:40:c0:
b7:8f:64:fe:6e:6e:e9:ff:40:a0:04:11:a2:88:ef:2f:dc:46:
43:8d:b8:3a:5a:bc:e0:06:66:28:2d:0b:8e:cc:0b:3c:67:1e:
65:34:df:17:7b:b0:e9:86:0e:f2:45:96:fc:50:b1:40:89:47:
3b:53:f9:ba:be:2d:31:7a:a4:22:db:bc:18:0a:5e:e2:f0:e7:
bf:02:bb:de:7d:03:ef:1f:40:d3:2d:2a:e4:fb:a9:7b:e3:5d:
ec:e0:93:0d:13:4c:a6:c2:1d:65:dc:66:de:f3:0b:b2:64:a1:
3f:b7:1e:bf:d4:a1:0c:e6:f7:4f:a9:2f:e1:5b:18:ef:0b:65:
2d:ec:eb:99:d4:14:70:f8:dc:83:0e:53:d7:be:6d:4e:6c:af:
97:01:d8:0f:3e:41:6b:20:3e:a3:32:ee:16:17:6f:d0:44:63:
e8:5a:e5:bd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDab5djANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWRhYjUwN2MwODk3NmNjMjlkMTc3MzczZGU2MjdhMWNlODZlZmFlMB4XDTIyMDEw
MTA4NTkzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzc1MTY1MmZhNzBj
MzE0ZTdmZjhjMzY2MDg0M2U4NTdhODE3ZjYzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8A6xyJIvrndFgbaWCTz4LtSFktkdLVwBFQAakBuvlHriPs
d0qBm1xp4Ygo94yzkrUV5XUCFSvNOkXT2Oxpo2448E4PcGg5LrqILUirNekffalJ
5Fq5sdcNg8HXE9a659+HJKDE+1mUxw92xTFf+vfkHj2vGyCedEUWSXw8KEsu/5mc
8b8TzStNbeGQcAYtZDvpA5167ge6GLWGegLQpeKF3T5l7LSYqaGwUAHyOsnYmU5c
RHe7B2Uv3uoQ+BOLT8iCIz6GJ20VzqvKQ13wZcRleXJkHQt4wobN2ph1n6MFLKcS
i5bVi5gWEW/mmKHibcUUyU5hd/xzyF44XUNIBcsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTHUWUvpwwxTn/4w2YIQ+hXqBf2NzAfBgNVHSMEGDAWgBRF2rUHwIl2zCnR
dzc95iehzobvrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JkcTFCOENKZHN3cDBYYzNQZVlub2M2Rzc2NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvOWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8x
L3gxRmxMNmNNTVU1Xy1NTm1DRVBvVjZnWDlqYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
OWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8xL1JkcTFCOENKZHN3
cDBYYzNQZVlub2M2Rzc2NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXGWTANBgkqhkiG9w0BAQsFAAOC
AQEAEsUqQdGpVnseAr9Ks4lmoVzyCTBQgEYoT3OkOPlRQJbWUE6BS5LaCWg18GM7
8O9h+4N9qJ5Qgg/vnqblCkJ4PI1JD4OyfcP+G0PHrzWR3FbRMiRS70Km1EDAt49k
/m5u6f9AoAQRoojvL9xGQ424Olq84AZmKC0LjswLPGceZTTfF3uw6YYO8kWW/FCx
QIlHO1P5ur4tMXqkItu8GApe4vDnvwK73n0D7x9A0y0q5Pupe+Nd7OCTDRNMpsId
Zdxm3vMLsmShP7cev9ShDOb3T6kv4VsY7wtlLezrmdQUcPjcgw5T175tTmyvlwHY
Dz5BayA+ozLuFhdv0ERj6FrlvQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:33 2025 by rpki-client