Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SlTpKSgsb4Mu9FtDoi2HUnt54jY.roa
File: SlTpKSgsb4Mu9FtDoi2HUnt54jY.roa (raw, json)
Hash identifier: UViw3ZgiNCfGYeEYSwp82drGeh02EtL7OHfVvIAkcbs=
Subject key identifier: 4A:54:E9:29:28:2C:6F:83:2E:F4:5B:43:A2:2D:87:52:7B:79:E2:36
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018216F3F6400849EA94AAAB5C981D5AFC3A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SlTpKSgsb4Mu9FtDoi2HUnt54jY.roa
Signing time: Tue 19 Jul 2022 14:54:23 +0000
ROA not before: Tue 19 Jul 2022 14:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 213.225.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:f3:f6:40:08:49:ea:94:aa:ab:5c:98:1d:5a:fc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 19 14:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a54e929282c6f832ef45b43a22d87527b79e236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:8c:5f:e6:0d:e1:1d:f7:f5:2d:34:cf:09:
ba:1a:ff:75:f6:58:50:4e:eb:56:c6:a7:a7:61:b9:
1f:cc:a3:46:df:28:74:fc:47:59:39:c0:6a:a4:c9:
57:8c:4f:24:7f:a2:4d:34:33:d3:0b:07:e1:e8:d3:
e1:35:12:27:e6:df:2c:b2:cd:b2:af:55:d2:e4:9d:
e6:5a:6e:7e:de:3b:f3:02:a6:a3:c2:9c:eb:5f:d3:
d2:94:9b:c6:62:57:e2:98:60:bf:e8:3b:4e:7b:d1:
87:8a:71:4e:0b:08:8f:e3:38:a3:bc:68:45:15:3e:
7a:a8:ea:20:8a:4a:81:cc:a0:fa:82:1f:1a:7c:50:
6b:f3:3f:2f:36:93:77:a3:3f:73:0a:75:8e:ff:fd:
3f:e9:f5:f0:f7:06:d1:6d:fc:6b:55:ab:a3:de:c6:
65:47:23:4e:98:2b:24:3f:78:11:09:76:e4:80:3f:
c1:5d:5e:f0:9b:cc:f0:0c:e2:80:71:10:a5:c2:0d:
73:12:a5:91:3f:38:d5:41:0d:61:1c:62:85:20:75:
be:65:b1:28:3d:74:f6:1c:8a:7b:b4:72:88:72:19:
a9:bb:cd:4e:9f:0d:d5:a2:1f:87:1b:8d:3c:81:f3:
64:cd:ec:2e:96:14:64:e5:7d:c3:1d:51:01:73:17:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:E9:29:28:2C:6F:83:2E:F4:5B:43:A2:2D:87:52:7B:79:E2:36
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SlTpKSgsb4Mu9FtDoi2HUnt54jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:26:6e:42:86:29:b4:81:e3:48:f5:b5:fd:9d:57:73:76:0a:
91:7f:5c:4d:bc:64:24:d4:81:d8:84:78:e4:7e:ae:2c:b6:33:
d2:81:00:47:f8:8b:b3:9c:5e:0a:d2:fb:be:2e:72:9e:0c:00:
f9:e0:f2:a6:48:1b:82:0d:c7:0c:8f:98:41:7c:bd:5e:64:79:
70:5f:1d:39:08:dd:eb:6a:43:08:0a:af:51:b8:b5:6f:fb:3a:
ca:95:91:44:7b:14:58:dc:d3:0b:e3:ab:43:53:9a:1c:39:02:
6b:c6:62:2a:64:4a:8e:45:83:5f:c4:93:2b:09:d3:e7:9d:20:
3e:2f:82:3f:0c:81:cc:3f:9d:f5:64:53:a0:86:02:30:63:95:
22:29:46:8e:6a:a5:df:f1:d5:27:dc:ba:88:68:aa:65:f5:93:
1f:04:27:d6:77:22:1f:4a:1c:c7:84:6d:2d:0c:33:d8:c1:b4:
27:f2:6f:57:2f:78:5d:c3:a8:6e:c8:e4:9d:1c:76:4b:45:2e:
3e:70:39:fc:cf:80:f4:1b:b6:e6:a1:a3:3a:4a:57:32:99:e2:
d0:0a:7b:39:ea:8b:80:24:81:3d:5f:10:1e:5a:11:f5:63:75:
1a:93:66:48:87:77:0a:c1:ac:60:92:78:1f:cc:75:3f:27:60:
49:a2:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:50 2025 by rpki-client