Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/AexxvHfZyLr0cw61OjpBts2b0GQ.roa
File: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (raw, json)
Hash identifier: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=
Subject key identifier: 01:EC:71:BC:77:D9:C8:BA:F4:73:0E:B5:3A:3A:41:B6:CD:9B:D0:64
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70637A439C667B77CF5276B986F10
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/AexxvHfZyLr0cw61OjpBts2b0GQ.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 213.238.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:06:37:a4:39:c6:67:b7:7c:f5:27:6b:98:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01ec71bc77d9c8baf4730eb53a3a41b6cd9bd064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:10:fe:58:bc:63:69:44:24:87:9e:14:df:
49:d0:4f:a8:c8:1e:80:cb:00:42:18:79:8d:b8:a3:
66:7d:c3:96:ee:ba:58:1d:7e:cd:3a:66:0b:16:a4:
0c:0d:94:16:87:4b:55:e7:3a:cc:91:d5:b3:f2:e0:
a3:bd:d1:f1:44:f8:4f:d1:0e:93:30:e3:bc:82:bd:
15:b2:8a:7f:bf:9e:1d:91:b7:9d:52:06:ea:e9:47:
63:a2:43:3c:de:72:41:01:d6:fe:d2:53:f9:63:5e:
29:b0:41:f9:18:d1:93:9c:44:d5:16:37:f8:89:bb:
30:df:78:c1:e6:66:50:a5:6e:4e:5c:5b:f6:b8:70:
2f:61:14:d7:9f:7a:06:42:21:de:b7:ca:e4:10:8d:
85:79:42:f7:1b:65:d0:5b:12:49:37:48:94:ea:4f:
b2:b7:37:37:8f:db:6d:73:53:d5:3b:f3:91:af:b5:
56:4a:c6:3f:d8:a3:da:e4:8b:95:45:7a:fe:8f:15:
5f:55:e4:f7:71:39:ed:d8:a8:6d:27:26:32:9d:4d:
20:fd:d6:9d:41:76:49:53:c7:d6:52:73:0e:bb:b9:
d9:1e:3d:12:ad:08:f7:31:ef:5b:b9:89:02:e8:a9:
f9:c7:6f:1f:8f:13:5c:15:ee:81:ff:3e:ed:85:bc:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EC:71:BC:77:D9:C8:BA:F4:73:0E:B5:3A:3A:41:B6:CD:9B:D0:64
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/AexxvHfZyLr0cw61OjpBts2b0GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:08:7f:e0:75:2f:d1:27:85:62:31:55:0f:03:97:f0:54:fd:
e6:50:d3:7f:a8:44:78:56:ee:2d:f2:ae:ef:1b:6b:b7:72:13:
7b:69:8c:a1:d5:79:ea:b6:40:ca:7f:8f:d2:b2:67:3e:02:ae:
a2:cf:a3:12:1e:09:26:cd:e8:fd:81:dd:dd:27:16:3f:c7:ba:
61:db:f7:62:79:69:6f:95:02:a7:32:b2:9a:01:a1:d2:67:23:
6b:39:fd:e9:fa:b8:04:78:b6:6a:58:04:4b:08:bb:f8:0c:96:
12:5a:55:39:7b:8e:34:e4:62:ba:6e:d6:27:c2:bc:e2:3e:69:
21:77:32:86:f9:93:09:e1:fa:ad:c8:29:89:ea:fb:cd:b6:ce:
78:bb:4d:1c:68:79:78:78:5f:cd:e3:3b:dc:19:7d:39:86:a5:
5e:fa:53:a2:ba:71:06:18:b5:cf:47:49:3c:18:18:5f:80:ac:
2d:66:2b:d0:8b:92:55:85:11:7e:a5:35:31:fb:7b:d8:34:df:
11:a5:20:e9:fe:65:a0:d4:ec:5d:7f:42:35:72:af:b4:96:73:
4a:95:f9:2b:b8:10:cf:09:35:9d:98:5d:f3:8a:b5:38:20:5f:
f1:67:a7:78:dd:4b:d4:24:79:98:7d:a9:50:b8:79:c1:2b:b1:
ba:c7:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:37 2025 by rpki-client