Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa
File: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (raw, json)
Hash identifier: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=
Subject key identifier: D9:21:F3:78:48:C0:AA:F7:0B:81:DA:79:5B:05:F5:BD:45:60:FD:BE
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70292101B157D74D2E9ABF0FAF81A
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15464
IP address blocks: 213.238.128.0/20 maxlen: 20
213.238.144.0/21 maxlen: 21
213.238.155.0/24 maxlen: 24
213.238.156.0/24 maxlen: 24
213.238.157.0/24 maxlen: 24
213.238.158.0/23 maxlen: 23
2a02:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:02:92:10:1b:15:7d:74:d2:e9:ab:f0:fa:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d921f37848c0aaf70b81da795b05f5bd4560fdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:b2:32:91:b1:01:3c:36:fd:cc:83:bf:26:
01:e8:a6:b2:53:d2:85:d9:5d:02:60:86:ae:26:f4:
24:28:50:52:e4:1a:93:01:94:ea:5a:29:ee:4e:e7:
09:57:ae:9a:f1:dd:38:06:db:91:80:c0:58:fc:d5:
39:aa:9c:a4:34:08:46:ea:a0:a5:e2:99:a9:0c:14:
0a:25:b3:11:ce:db:26:a6:3a:ac:a8:92:28:9b:1a:
c9:7a:c9:5a:42:bc:2f:16:1d:7d:a3:e1:83:ff:0e:
55:f0:69:2c:33:27:7c:84:8e:6b:d7:56:77:83:c7:
c8:58:cd:49:28:ad:5c:31:8f:af:0b:00:9d:d8:71:
d6:7f:f2:0e:b9:1e:38:fa:a1:dc:08:c1:01:e6:ec:
c0:16:c1:5d:d1:6b:05:f1:9b:85:58:5d:52:40:da:
bb:19:7d:8a:0e:b1:9c:72:b5:55:6e:04:65:10:19:
db:16:b2:1a:17:82:ab:12:65:ef:ce:6f:49:e4:49:
66:9b:46:25:31:8c:c4:e4:74:f1:d8:44:58:77:bb:
2a:d1:91:17:8c:d2:0a:08:34:c7:d9:e6:be:32:2d:
29:e0:62:8b:68:fa:08:17:f6:6b:43:cd:b9:d9:c5:
44:b2:3f:35:f5:9f:c6:f8:25:0f:63:ba:34:c6:57:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:F3:78:48:C0:AA:F7:0B:81:DA:79:5B:05:F5:BD:45:60:FD:BE
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.128.0-213.238.151.255
213.238.155.0-213.238.159.255
IPv6:
2a02:50::/48
Signature Algorithm: sha256WithRSAEncryption
5d:0a:ef:ed:67:74:e3:e0:74:c8:db:e6:d1:a2:0b:a3:be:59:
b0:dd:0a:a2:13:67:cb:23:93:80:ba:88:85:3e:33:26:eb:1e:
b0:49:67:74:bd:3d:9b:82:87:a8:21:bb:8a:8f:fc:d7:4c:cd:
a7:ae:c5:d4:5a:1f:10:78:e9:2e:e7:76:25:24:97:94:96:11:
06:e5:06:44:31:4e:f9:63:3b:5d:48:d4:f5:79:97:11:a4:e8:
80:7b:f6:c0:c0:82:96:32:d5:4e:90:39:c5:63:82:9e:b4:62:
d5:a3:8b:07:4b:f9:13:6b:75:5e:74:5b:31:69:d5:77:90:17:
38:3d:ad:14:6a:ee:e8:17:b5:c0:7e:74:48:26:a0:8f:56:44:
d0:07:b7:35:82:f9:e7:f3:8c:96:cf:37:c3:65:77:3c:4e:c4:
86:b7:44:cf:76:09:68:ea:a2:e7:03:64:86:18:53:43:85:5c:
e2:57:80:fe:da:3d:ce:3a:61:c3:d7:48:bc:b9:d8:3b:eb:5d:
77:74:c6:42:de:b7:a9:5e:53:75:28:55:85:6c:43:41:d9:a9:
7c:2d:95:b6:d3:e1:7e:0c:ea:49:61:24:4a:40:b2:e8:69:49:
5e:48:13:08:3b:05:26:61:0b:7c:5b:e6:f9:38:7c:34:32:42:
8f:38:66:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:18 2025 by rpki-client