Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0cO4ncofuOOavd4WKDZZp3uCU2A.roa
File: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (raw, json)
Hash identifier: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=
Subject key identifier: D1:C3:B8:9D:CA:1F:B8:E3:9A:BD:DE:16:28:36:59:A7:7B:82:53:60
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01948893AB7ED22798212C71E72610FABB41
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0cO4ncofuOOavd4WKDZZp3uCU2A.roa
Signing time: Tue 21 Jan 2025 11:16:06 +0000
ROA not before: Tue 21 Jan 2025 11:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209275
IP address blocks: 213.238.160.0/24 maxlen: 24
213.238.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:93:ab:7e:d2:27:98:21:2c:71:e7:26:10:fa:bb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 21 11:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1c3b89dca1fb8e39abdde16283659a77b825360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:c0:e6:34:be:29:41:fc:9e:89:b4:41:1f:
de:05:de:42:0f:8d:47:ac:14:5e:57:2e:36:98:11:
f9:f7:e7:de:ed:07:1b:d5:fa:38:12:25:e7:3d:62:
3b:06:85:28:85:45:7a:91:b8:cd:a5:d9:5f:ea:4d:
30:69:df:86:d7:16:41:6f:6b:ed:e1:ed:ee:b5:49:
ba:c4:b4:17:41:48:37:5c:0f:11:6e:2d:fa:df:eb:
ab:c7:28:2d:55:da:fa:be:3d:0a:d2:f5:68:c3:e0:
b5:5f:34:dc:87:d0:79:03:bb:20:31:69:58:44:52:
c1:a0:09:98:ed:39:29:b3:9b:c0:24:4f:36:ac:40:
6d:4d:7d:c2:81:b5:12:9c:3c:be:f0:d6:57:66:21:
f9:1b:b8:d6:4f:9b:fd:6d:b9:57:fd:2b:29:18:e9:
79:58:8d:c6:fd:76:a4:a0:47:45:47:99:c7:33:66:
27:a9:5b:89:0a:e8:12:bb:e4:d5:7e:d4:00:79:d3:
12:1c:fd:d6:87:c1:18:ec:3c:af:6d:30:64:27:e5:
46:dd:12:71:0c:d5:b8:da:4d:98:4e:5f:54:3f:92:
99:b1:ec:31:8a:12:45:c6:67:ef:df:77:f1:62:40:
f6:ba:b6:30:48:80:c3:90:88:e9:ea:ed:27:58:5e:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C3:B8:9D:CA:1F:B8:E3:9A:BD:DE:16:28:36:59:A7:7B:82:53:60
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0cO4ncofuOOavd4WKDZZp3uCU2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0/24
213.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e6:f2:69:46:0b:be:5c:87:42:a9:f1:07:8a:29:61:b1:66:
8f:bd:8d:db:6b:c3:1e:a4:5e:6f:91:e0:9f:0d:7c:06:95:50:
52:59:c5:c2:65:24:a2:4e:e1:8f:e5:e6:26:a2:35:7d:43:f6:
e5:8f:34:1d:a4:a5:8a:d7:55:40:53:38:88:56:76:f1:aa:5b:
c2:cd:39:2f:5a:01:b7:df:d5:d3:c1:31:82:61:18:7c:86:7c:
72:63:96:dc:71:b6:5a:a7:4f:ac:6e:c2:00:f8:1d:36:bb:1d:
56:7d:1c:2d:eb:c1:22:59:6a:95:cd:17:03:00:28:0f:1d:5a:
4f:96:23:fd:16:f1:6a:7c:1d:37:88:2f:3b:c3:39:7a:db:3b:
b4:e8:4a:32:50:fd:36:1e:bf:a3:3d:c0:ee:03:57:9a:53:89:
26:3b:60:de:38:40:de:8b:f2:06:56:fb:4d:e4:64:41:09:e2:
a9:59:2f:62:96:52:4c:05:bd:d1:69:e5:49:f1:dd:f1:f9:45:
23:c7:39:db:45:94:79:b3:23:a1:15:ec:3f:1c:6d:15:79:0f:
53:de:cb:bd:f2:38:b4:3f:48:1f:55:4d:92:f1:03:91:6b:f1:
30:93:16:d8:38:b0:ea:85:00:47:70:6b:d1:f4:55:a8:a1:7c:
7a:f7:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:20 2025 by rpki-client