Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/SDOeahJ9HzvHWDc9gp9HArCt1C8.roa
File: SDOeahJ9HzvHWDc9gp9HArCt1C8.roa (raw, json)
Hash identifier: gp8qAl6lLUH2UfE4h8FnrPhfkkwTPurGL4goT8DtJI4=
Subject key identifier: 48:33:9E:6A:12:7D:1F:3B:C7:58:37:3D:82:9F:47:02:B0:AD:D4:2F
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 20351B
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/SDOeahJ9HzvHWDc9gp9HArCt1C8.roa
Signing time: Sun 22 May 2022 22:29:29 +0000
ROA not before: Sun 22 May 2022 22:29:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 213.139.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110747 (0x20351b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: May 22 22:29:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48339e6a127d1f3bc758373d829f4702b0add42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:f7:98:ce:6b:55:51:e1:6d:5a:57:0a:e9:
de:00:37:2d:7a:b0:21:6f:ae:b8:ca:cf:59:77:e3:
d3:a0:74:5f:79:f3:81:da:47:c2:80:c3:6b:ca:44:
a9:5e:2b:83:7a:cf:ac:ad:f2:49:b1:a8:93:e1:56:
54:cf:7e:b3:19:d4:87:38:8b:b5:ba:80:30:e1:9e:
70:80:57:8d:aa:f3:26:ce:4a:82:97:92:7e:1a:7d:
5b:3c:58:3b:d7:2f:a7:f5:f9:5a:c6:d8:a2:97:45:
c9:ad:f6:e0:80:93:a3:49:39:48:e4:e3:0d:08:64:
56:38:c2:d1:de:8f:02:f6:db:96:17:14:67:94:e2:
1e:9d:c8:59:4c:2b:2a:57:26:29:30:17:ed:40:3a:
61:32:93:3a:e0:27:13:3c:86:08:26:67:b2:ed:68:
f3:4b:bd:55:cb:3a:c1:38:6b:e4:67:82:51:9f:c6:
25:a6:2e:a9:e1:de:3a:c5:21:16:5f:1c:26:da:9e:
34:5a:4c:05:30:e0:53:b0:21:a7:77:b9:67:e3:d5:
57:22:07:b6:02:35:1d:b5:9f:a5:54:17:ec:69:7d:
4b:88:7f:b9:5e:98:f2:f4:24:93:54:7f:a5:7d:b4:
b4:e4:65:9e:cc:d1:79:2b:5f:82:7b:15:1b:bd:9e:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:9E:6A:12:7D:1F:3B:C7:58:37:3D:82:9F:47:02:B0:AD:D4:2F
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/SDOeahJ9HzvHWDc9gp9HArCt1C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:52:78:f4:9a:55:c3:c7:d0:d6:92:31:73:a9:eb:2c:35:73:
8b:c1:77:38:d3:a7:54:ed:87:f5:d0:30:73:fc:7d:6f:a3:c0:
41:74:6c:5d:6e:5a:65:64:72:d4:e1:83:78:4b:bb:d3:71:fb:
dc:9d:dc:8d:2b:1b:aa:ee:21:25:3b:c8:06:f6:a6:93:7f:32:
ee:04:ca:f5:5c:4a:48:5b:8a:d7:68:45:34:47:c5:94:76:3b:
b3:5b:2a:7c:1a:5b:44:b2:40:86:5b:69:80:c2:a9:7f:b7:dd:
72:52:40:e8:40:df:85:7f:24:e4:7a:d4:c7:f3:66:91:7d:a7:
bf:ab:f5:fb:2c:93:3b:01:8d:1a:06:36:ed:06:79:92:d5:88:
9b:8a:b4:04:ab:62:9d:81:fa:f4:a1:a7:83:fb:53:90:01:73:
2b:e1:96:83:80:56:e7:ad:e1:0e:7a:91:8b:da:49:09:ef:20:
2e:4d:a1:1c:a7:80:97:89:2f:96:b5:80:ff:4b:4b:9c:36:f4:
b2:e5:13:62:fc:4c:d5:ed:58:e2:e7:5e:af:98:7c:d5:96:82:
79:3f:79:06:32:1d:79:d9:ab:ac:4f:a6:55:eb:bd:69:c3:88:
18:05:39:85:d3:d5:95:c2:33:20:1a:c8:45:7c:d9:3b:38:e3:
d4:a3:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:30 2025 by rpki-client