Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/we0DRDjsqDQxVzoK2ZE0X9tLSCE.roa
File: we0DRDjsqDQxVzoK2ZE0X9tLSCE.roa (raw, json)
Hash identifier: zMWsBLAmq+xSH5PErRSIs9eWxk1+QFzqnXxkWhOJSHo=
Subject key identifier: C1:ED:03:44:38:EC:A8:34:31:57:3A:0A:D9:91:34:5F:DB:4B:48:21
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D16691507893AA726EC8E9E60640F
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/we0DRDjsqDQxVzoK2ZE0X9tLSCE.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136944
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:16:69:15:07:89:3a:a7:26:ec:8e:9e:60:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ed034438eca83431573a0ad991345fdb4b4821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:71:8b:4e:df:79:e2:04:73:fb:99:b3:01:
15:b4:2b:74:1d:b3:3a:5a:3d:1d:15:7d:e5:87:3c:
83:17:29:30:5a:17:95:1c:71:c3:05:0a:b2:c1:58:
ce:df:9d:aa:e4:e9:68:25:12:3a:ea:8d:30:24:ce:
53:5d:e0:16:5c:80:bf:8b:e5:75:15:a4:61:cc:80:
95:05:82:8a:f2:80:a7:4b:bf:c4:02:84:72:2c:15:
bc:18:f7:16:1b:d3:99:be:0c:83:b9:93:b8:f3:53:
97:1c:82:11:ce:9d:ac:5e:30:db:59:06:93:99:c2:
48:57:05:f7:a1:6c:52:2e:28:e9:94:c2:d8:35:44:
12:c1:00:38:08:f7:82:fd:e8:c3:92:1d:4e:6f:ee:
ff:44:78:4f:37:54:a5:b7:93:e5:5d:85:17:9a:7e:
c4:10:f0:d1:19:dc:07:42:00:2f:05:05:b0:fe:45:
f7:75:ab:e5:b5:8e:92:49:f5:53:09:b9:c4:bf:0c:
2e:c3:74:b1:6a:33:fc:96:73:c4:fb:5c:73:30:e9:
bd:32:5d:6c:19:8e:e2:28:dd:34:74:61:4a:c0:8e:
85:f8:26:44:cc:27:cf:4b:3c:50:2b:20:4b:f5:41:
4c:ca:10:b6:91:0c:27:10:4a:5f:9e:3a:23:c7:c5:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:03:44:38:EC:A8:34:31:57:3A:0A:D9:91:34:5F:DB:4B:48:21
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/we0DRDjsqDQxVzoK2ZE0X9tLSCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f5:b9:7e:73:a5:55:6e:2e:04:0b:b6:d5:46:d5:ee:88:6c:
fe:13:2b:12:bb:76:4c:52:8a:34:31:c1:bb:ac:c6:ec:0c:19:
36:a6:a8:b1:2f:fb:92:4c:92:cb:ad:79:55:bc:44:cc:e7:c5:
a5:ac:31:23:0f:fa:4c:e7:34:1d:e4:e9:06:0b:ec:1b:ba:c5:
29:78:c3:f7:e9:3f:5c:4a:15:50:74:41:31:f4:cb:0c:51:10:
77:22:09:d4:2a:88:22:3b:ff:6d:9c:17:71:28:47:8f:47:d8:
f7:ac:ae:0f:4d:3d:8f:aa:03:f1:da:df:b0:9b:c9:8b:be:4b:
95:9b:ab:96:8d:03:61:06:67:50:05:61:cf:bf:cd:cc:21:d5:
80:b6:fd:1f:38:b8:a1:50:76:8e:22:db:7d:0b:7d:80:0d:be:
06:c1:90:73:c4:26:aa:84:63:3d:c3:b3:54:49:12:27:52:cc:
2f:91:ee:79:12:4f:2d:fd:e4:3a:2b:07:83:db:ff:b0:3e:4d:
25:01:f3:4c:e2:ae:e3:6b:c0:ed:72:c2:f5:80:da:02:03:ad:
3a:d6:a7:d5:aa:b4:fc:02:9b:a9:44:b3:2b:fa:45:d0:ce:68:
c3:37:a8:e3:e0:f2:99:f2:b1:80:59:a5:a1:a2:48:81:62:58:
62:7a:7c:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnRZpFQeJOqcm7I6eYGQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTAxMTM1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWVkMDM0NDM4ZWNhODM0MzE1NzNhMGFkOTkxMzQ1ZmRiNGI0ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLVxi07feeIEc/uZswEVtCt0HbM6
Wj0dFX3lhzyDFykwWheVHHHDBQqywVjO352q5OloJRI66o0wJM5TXeAWXIC/i+V1
FaRhzICVBYKK8oCnS7/EAoRyLBW8GPcWG9OZvgyDuZO481OXHIIRzp2sXjDbWQaT
mcJIVwX3oWxSLijplMLYNUQSwQA4CPeC/ejDkh1Ob+7/RHhPN1Slt5PlXYUXmn7E
EPDRGdwHQgAvBQWw/kX3davltY6SSfVTCbnEvwwuw3SxajP8lnPE+1xzMOm9Ml1s
GY7iKN00dGFKwI6F+CZEzCfPSzxQKyBL9UFMyhC2kQwnEEpfnjojx8XaqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHtA0Q47Kg0MVc6CtmRNF/bS0ghMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvd2UwRFJEanNxRFF4VnpvSzJaRTBYOXRMU0NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1eHsMA0G
CSqGSIb3DQEBCwUAA4IBAQB69bl+c6VVbi4EC7bVRtXuiGz+EysSu3ZMUoo0McG7
rMbsDBk2pqixL/uSTJLLrXlVvETM58WlrDEjD/pM5zQd5OkGC+wbusUpeMP36T9c
ShVQdEEx9MsMURB3IgnUKogiO/9tnBdxKEePR9j3rK4PTT2PqgPx2t+wm8mLvkuV
m6uWjQNhBmdQBWHPv83MIdWAtv0fOLihUHaOItt9C32ADb4GwZBzxCaqhGM9w7NU
SRInUswvke55Ek8t/eQ6KweD2/+wPk0lAfNM4q7ja8DtcsL1gNoCA6061qfVqrT8
ApupRLMr+kXQzmjDN6jj4PKZ8rGAWaWhokiBYlhieny/
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:00 2025 by rpki-client