Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/sGwZZbvagGXl6xvCgisLkDj1dwA.roa
File: sGwZZbvagGXl6xvCgisLkDj1dwA.roa (raw, json)
Hash identifier: O1VLGsy7F6NKKSNUmGghf5TA4VfDfaHKgZYlR0xq1vk=
Subject key identifier: B0:6C:19:65:BB:DA:80:65:E5:EB:1B:C2:82:2B:0B:90:38:F5:77:00
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01845EAD908F9768F839DD20F4CC0E35A45A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/sGwZZbvagGXl6xvCgisLkDj1dwA.roa
Signing time: Wed 09 Nov 2022 23:15:43 +0000
ROA not before: Wed 09 Nov 2022 23:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 213.225.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:ad:90:8f:97:68:f8:39:dd:20:f4:cc:0e:35:a4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Nov 9 23:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b06c1965bbda8065e5eb1bc2822b0b9038f57700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:d7:5c:aa:87:4c:52:df:a8:e6:6d:9d:70:
fa:4e:59:8d:43:0f:74:d9:32:ca:18:22:07:6d:43:
fb:75:34:53:62:03:48:76:8d:72:6a:0e:9b:2f:db:
03:b7:1f:d8:bd:6a:53:a6:27:27:4f:be:83:52:30:
9a:b5:f3:9f:91:be:2e:97:19:a2:d0:e8:07:3e:b0:
a2:dd:15:3f:08:de:c9:ce:95:54:6c:76:f8:96:20:
b6:f0:af:8c:d0:e7:d6:4f:16:52:0c:ad:85:a0:f1:
d5:7c:72:e8:1b:63:5f:f1:40:41:d1:9c:f4:ec:f3:
47:5a:18:8f:6e:e6:35:ab:98:73:75:60:83:61:46:
a9:9a:18:e0:5c:83:8f:83:ec:27:b3:34:d8:97:93:
f7:26:30:f6:6a:83:a4:a8:06:74:7c:c7:07:95:65:
63:9e:d3:33:c9:6e:95:cb:ee:d4:4d:39:d6:e1:2b:
74:b4:35:55:af:81:10:8c:57:d9:6c:e7:28:68:27:
ee:d2:fc:17:44:c4:6a:71:7c:c9:5b:5a:3c:30:3c:
eb:07:dd:47:48:3e:3f:39:f9:04:3e:f9:5e:16:51:
ad:1c:2b:96:b7:0f:c2:4b:5f:08:f8:2c:37:cd:0f:
ac:96:87:68:2e:a9:af:72:fa:89:a4:24:76:b7:f1:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:19:65:BB:DA:80:65:E5:EB:1B:C2:82:2B:0B:90:38:F5:77:00
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/sGwZZbvagGXl6xvCgisLkDj1dwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:27:c7:d4:ab:f9:3c:59:4f:aa:a4:23:8d:3d:81:1c:54:5b:
84:ae:3a:e7:0a:74:e7:35:46:82:57:27:a1:01:89:d4:30:31:
5c:a7:78:30:5f:3d:e8:12:2b:ab:ef:5f:5e:1f:88:1f:6d:e3:
0f:02:55:1f:7c:96:ea:01:b5:9e:39:10:40:f3:bc:ce:fc:7d:
76:58:e6:79:97:74:d4:65:a8:65:23:f5:98:6b:b0:e9:e0:a2:
f7:6c:cf:ba:53:65:7f:1d:21:0d:fc:54:20:09:f7:2f:80:32:
91:17:67:22:e1:1a:67:6e:40:a3:fe:82:02:6a:00:fc:f5:4e:
db:1b:ef:d8:2e:b3:2c:93:52:e9:96:64:17:98:a5:c4:3d:eb:
60:ae:f4:e7:70:82:92:f9:0e:9f:bc:26:bb:59:7a:a5:0d:d6:
2f:d1:3d:d3:2c:e5:71:07:5f:fd:38:52:98:78:14:d1:ff:f1:
31:c8:0c:bd:18:24:46:00:e5:c5:75:51:b9:4a:71:08:9b:84:
c4:96:a3:ad:0d:1b:15:e7:f3:07:bd:f0:6a:b0:c5:cf:d0:f0:
1f:64:31:fd:75:61:8b:f2:bb:fb:39:8a:41:be:86:ee:9d:a4:
65:b8:61:30:f9:89:18:aa:86:d1:f7:b9:26:46:af:23:39:67:
31:dc:b8:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRerZCPl2j4Od0g9MwONaRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIxMTA5MjMxNTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDZjMTk2NWJiZGE4MDY1ZTVlYjFiYzI4MjJiMGI5MDM4ZjU3NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXDXXKqHTFLfqOZtnXD6TlmNQw90
2TLKGCIHbUP7dTRTYgNIdo1yag6bL9sDtx/YvWpTpicnT76DUjCatfOfkb4ulxmi
0OgHPrCi3RU/CN7JzpVUbHb4liC28K+M0OfWTxZSDK2FoPHVfHLoG2Nf8UBB0Zz0
7PNHWhiPbuY1q5hzdWCDYUapmhjgXIOPg+wnszTYl5P3JjD2aoOkqAZ0fMcHlWVj
ntMzyW6Vy+7UTTnW4St0tDVVr4EQjFfZbOcoaCfu0vwXRMRqcXzJW1o8MDzrB91H
SD4/OfkEPvleFlGtHCuWtw/CS18I+Cw3zQ+slodoLqmvcvqJpCR2t/HAqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBsGWW72oBl5esbwoIrC5A49XcAMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvc0d3WlpidmFnR1hsNnh2Q2dpc0xrRGoxZHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1eHtMA0G
CSqGSIb3DQEBCwUAA4IBAQDDJ8fUq/k8WU+qpCONPYEcVFuErjrnCnTnNUaCVyeh
AYnUMDFcp3gwXz3oEiur719eH4gfbeMPAlUffJbqAbWeORBA87zO/H12WOZ5l3TU
ZahlI/WYa7Dp4KL3bM+6U2V/HSEN/FQgCfcvgDKRF2ci4RpnbkCj/oICagD89U7b
G+/YLrMsk1LplmQXmKXEPetgrvTncIKS+Q6fvCa7WXqlDdYv0T3TLOVxB1/9OFKY
eBTR//ExyAy9GCRGAOXFdVG5SnEIm4TElqOtDRsV5/MHvfBqsMXP0PAfZDH9dWGL
8rv7OYpBvobunaRluGEw+YkYqobR97kmRq8jOWcx3LiE
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:12 2025 by rpki-client