Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8mMS3HIomrHZlr0tSi4nJre_iQ0.roa
File: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (raw, json)
Hash identifier: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=
Subject key identifier: F2:63:12:DC:72:28:9A:B1:D9:96:BD:2D:4A:2E:27:26:B7:BF:89:0D
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70F46C11DCA083575135914C806D8
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8mMS3HIomrHZlr0tSi4nJre_iQ0.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210388
IP address blocks: 213.238.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0f:46:c1:1d:ca:08:35:75:13:59:14:c8:06:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f26312dc72289ab1d996bd2d4a2e2726b7bf890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:4e:ab:fa:81:50:3d:a9:1e:7f:56:3f:a1:
e5:32:9e:f1:d4:21:1b:7c:2c:e4:c5:e3:25:02:27:
a4:17:81:cb:3d:f2:84:78:98:64:61:86:65:31:fb:
e7:b3:cb:7b:72:93:78:e8:36:7c:2e:41:eb:94:b5:
26:4b:b1:af:cf:61:f4:20:8e:75:8c:8f:77:a7:9f:
10:44:a6:c1:80:20:92:26:3a:2c:49:9e:0a:1e:18:
65:29:6b:07:53:6b:03:02:d9:d1:52:78:99:63:f9:
e3:a5:68:09:62:67:85:ab:76:29:2e:1a:2a:d9:01:
f2:c9:46:f8:c8:c4:1b:e9:89:68:c3:32:32:55:46:
6d:d9:12:d8:df:9d:84:f5:00:4d:b0:92:94:c0:f7:
f2:b0:23:f9:a0:72:4c:5c:36:01:29:73:94:37:62:
0d:41:b2:63:5d:47:1a:a1:16:b2:4d:8b:88:3d:94:
bf:01:02:24:c1:c6:0a:87:d3:c5:9d:b9:32:64:da:
32:b1:0c:fb:08:ee:a8:43:63:5f:15:a3:49:0a:36:
18:0e:b4:2a:cf:b9:d0:6d:8b:85:d7:42:3c:08:da:
7e:fb:66:1a:8b:de:b5:d9:c3:82:76:f0:5a:11:19:
ee:70:66:61:d6:d8:46:10:d3:95:e3:e7:e7:0f:9c:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:63:12:DC:72:28:9A:B1:D9:96:BD:2D:4A:2E:27:26:B7:BF:89:0D
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8mMS3HIomrHZlr0tSi4nJre_iQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f7:af:66:d6:48:ab:ad:c1:5b:e0:43:04:7b:8f:06:bb:39:
5d:95:3f:32:ab:41:5d:e3:89:28:a4:87:b3:5a:07:db:c9:3a:
bb:44:6f:68:19:a9:44:4c:a9:d3:7e:90:a8:e5:05:c3:dc:22:
e2:b1:36:08:4d:5a:f2:2b:c9:43:d4:20:94:0c:3c:06:b0:23:
9f:f7:35:ae:8b:89:3f:2d:e3:15:aa:3f:c5:67:37:5a:57:80:
bd:46:30:cd:28:d3:0e:68:bb:61:48:61:2a:44:fd:ad:88:a0:
09:84:8d:b2:0f:ee:34:3e:16:23:33:ff:12:4e:11:99:e3:6c:
2e:fb:31:19:1d:da:be:0b:5f:61:2b:bb:52:fe:2f:40:7f:e2:
9d:46:da:fc:81:85:52:fb:d0:2e:f1:b5:19:50:e6:a8:fc:5f:
89:bf:d1:ee:e1:ac:b9:01:50:f8:8b:e3:5f:8c:61:15:a5:96:
65:41:23:1c:70:91:9a:41:b3:e0:0f:af:fc:dd:23:83:00:57:
34:66:3a:23:df:45:16:2d:47:69:26:0c:12:65:f7:63:17:1b:
cc:1b:ac:4a:96:47:93:c0:72:fd:18:a3:bc:5a:a9:1b:73:17:
23:43:8b:07:be:b7:31:52:7f:eb:97:48:76:6a:9a:03:f1:23:
cf:b0:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:15:06 2025 by rpki-client