Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6xosF9Z4lTqamX7SY9BrDsf4yuY.roa
File: 6xosF9Z4lTqamX7SY9BrDsf4yuY.roa (raw, json)
Hash identifier: upmPss51e6BH69TQS41N9IhTplp6OirUUdWKGfGrFlc=
Subject key identifier: EB:1A:2C:17:D6:78:95:3A:9A:99:7E:D2:63:D0:6B:0E:C7:F8:CA:E6
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D71664FD9B1131D982FF3CF010A589
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6xosF9Z4lTqamX7SY9BrDsf4yuY.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214941
IP address blocks: 213.238.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:16:64:fd:9b:11:31:d9:82:ff:3c:f0:10:a5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb1a2c17d678953a9a997ed263d06b0ec7f8cae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:62:98:b5:f2:cc:ff:38:7e:68:d0:d2:7c:
a0:ed:36:e2:37:74:59:6a:1e:dd:1d:6d:55:fc:bc:
c9:1d:b0:32:38:20:41:4e:c4:f1:57:63:55:a5:c7:
bf:61:fc:eb:97:61:88:12:56:53:20:07:ca:12:09:
bc:b0:19:c5:25:0e:8f:6a:01:d8:47:39:7d:12:21:
40:66:30:85:22:c0:dd:0c:a8:d3:a1:76:ce:c2:85:
70:93:2f:d3:de:ba:35:7d:3a:e5:eb:78:f6:c7:a0:
2e:05:54:9b:a9:5c:31:30:de:0b:dc:1f:82:1e:04:
86:89:f3:1c:1e:04:d0:a7:34:b3:40:bf:64:77:42:
52:47:20:49:b4:04:05:08:72:c9:2d:96:67:69:fd:
02:6c:94:95:52:22:c6:81:18:e1:66:26:9b:17:4e:
61:18:1c:b0:d8:44:2e:55:12:45:06:4f:8e:30:fc:
a3:bc:f6:99:13:4a:91:4e:f1:54:e6:7b:56:2f:8b:
47:2a:b3:c3:80:66:b9:18:42:30:1f:6b:1a:f7:43:
56:ab:10:70:2b:cb:ae:f1:83:7a:7a:cf:6d:93:50:
f7:d2:82:c7:c6:d8:15:9e:d5:27:f1:7c:ad:6e:8d:
19:52:f8:52:a7:f0:cb:8a:cd:eb:cc:40:27:31:67:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:2C:17:D6:78:95:3A:9A:99:7E:D2:63:D0:6B:0E:C7:F8:CA:E6
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6xosF9Z4lTqamX7SY9BrDsf4yuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.178.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:fe:18:35:f3:06:85:76:39:6b:7c:78:1c:ad:ff:ae:25:f1:
48:60:72:44:cf:9b:0c:fc:20:06:66:e1:55:53:e3:1a:60:74:
e6:3f:0f:f7:fa:e1:bc:ff:34:cc:a3:6b:a2:3a:68:b7:20:09:
a2:cb:7b:3b:84:b5:a7:05:a6:cf:7b:20:f2:8f:8f:da:dd:07:
24:db:4d:23:6a:92:e0:57:39:5f:47:81:5d:80:94:8e:6c:cf:
45:b2:10:c7:cd:02:0e:9d:55:56:3e:5a:9f:a1:28:57:5f:93:
c3:de:e1:93:1d:94:3e:bf:4f:34:cf:11:1c:ec:8c:ee:8b:fd:
cb:b6:f2:49:df:19:cc:8f:9d:54:9b:c4:e5:a5:be:e9:89:b7:
82:05:65:2e:98:cf:1a:89:98:9a:f7:df:d9:9d:da:8b:ec:f4:
4d:e8:da:75:e3:94:33:8e:4e:c9:e1:1f:5f:09:7c:ad:cc:ed:
c5:b2:1a:79:15:42:49:7a:15:d9:aa:83:78:a9:46:ef:01:8e:
e0:f8:a7:41:fe:bd:b4:d7:35:60:82:a4:33:7e:c4:18:ab:bf:
0a:62:10:3a:f4:6a:02:ee:ae:60:cd:4f:d0:dc:d9:9b:e3:1a:
28:ee:e0:0e:12:37:c9:1d:e5:ca:8d:4d:f7:f2:19:ad:a1:e6:
9a:aa:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:05 2025 by rpki-client