Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa
File: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (raw, json)
Hash identifier: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=
Subject key identifier: E8:5A:C3:B8:26:35:BC:A2:6F:62:23:52:8D:40:96:BC:52:CF:15:54
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70C35247A8CDF01889F9A21D69E00
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207279
IP address blocks: 213.238.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:35:24:7a:8c:df:01:88:9f:9a:21:d6:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e85ac3b82635bca26f6223528d4096bc52cf1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:54:ba:28:61:45:20:41:86:52:24:62:78:
16:41:7b:50:69:32:f1:54:73:98:f1:07:6c:5e:90:
6d:5e:17:4a:d8:53:e0:7c:5e:32:ba:56:78:cb:ee:
a5:2c:98:ee:be:82:61:f4:dc:85:10:c4:bd:08:40:
7a:24:87:40:f0:cd:26:a3:91:58:14:3b:44:a5:74:
a9:c3:92:01:c8:18:a7:63:fe:b7:0f:44:82:1d:3a:
b7:50:76:56:27:28:05:8a:b1:6c:93:ce:b2:e0:57:
9c:d3:0d:87:67:bc:af:4c:a5:a6:58:4b:7e:d7:c1:
1d:d7:14:ef:2a:52:ab:b5:95:7e:59:80:13:e8:18:
87:2f:9e:50:74:1a:91:4a:20:f9:fb:05:d2:75:b1:
58:33:a3:61:a7:f5:aa:51:2d:96:18:58:5f:11:50:
17:1f:70:56:7d:4b:ce:d3:8a:eb:b0:10:9d:56:18:
e9:30:f5:52:68:33:3f:a9:ca:5d:31:72:c9:c2:46:
67:87:1a:e9:85:06:76:99:b1:82:6d:45:39:af:a4:
bc:44:38:c7:44:c1:45:98:f8:c1:f4:1c:4d:06:cc:
56:2d:67:ea:14:e7:50:f0:73:42:f3:78:5a:77:fd:
6c:c3:fd:68:44:a2:9d:48:07:1e:b0:a6:e1:ab:a7:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:C3:B8:26:35:BC:A2:6F:62:23:52:8D:40:96:BC:52:CF:15:54
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.182.0/24
Signature Algorithm: sha256WithRSAEncryption
73:79:7f:69:78:e2:f0:14:4f:8e:b6:78:6a:2e:d1:81:c6:3c:
31:4d:08:cc:6e:28:2b:27:e9:f7:56:48:66:c7:5a:7c:de:6f:
9f:d7:59:8f:13:8f:38:e2:06:85:f2:6e:bc:9e:9f:b2:21:73:
53:72:23:ea:52:62:da:c0:2c:f6:04:d7:2e:bf:c1:a0:0c:77:
3f:59:84:a5:a7:b9:cd:ed:9e:ef:48:fc:4f:0d:d2:16:4d:7c:
ab:73:0b:6b:32:e0:9d:51:f0:6e:a9:35:23:ec:dd:ed:6d:0b:
14:9e:84:f7:33:0e:7e:79:33:17:ff:f6:8f:ba:80:12:aa:aa:
38:5a:c7:6a:14:be:a2:e2:df:38:5b:af:0c:08:74:1d:ef:bd:
f0:8b:83:fd:53:11:13:c4:7a:67:77:bf:47:bb:84:66:db:81:
5f:43:db:cc:79:ef:23:1e:c8:9c:8c:e8:22:24:8d:ae:ce:b7:
a4:9a:46:4d:5f:25:8f:51:8f:34:4c:46:f9:fd:1a:6f:ba:bc:
8a:5e:d3:5c:34:4a:bd:82:93:56:38:f0:8a:4b:c3:4b:f5:2b:
f1:77:55:af:2d:ee:37:ab:19:f9:52:b5:6a:00:4c:7e:4a:8e:
b3:45:6e:bf:be:68:26:56:f3:93:f0:e1:a5:5f:9c:16:f1:b7:
2e:bf:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:53 2025 by rpki-client