Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa
File: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (raw, json)
Hash identifier: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=
Subject key identifier: 01:FB:A8:79:83:01:92:7E:6C:11:E5:88:3D:B1:80:6D:5B:7E:03:C0
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01948892C14E6E268EF320EFDFA74E8C9B59
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa
Signing time: Tue 21 Jan 2025 11:15:06 +0000
ROA not before: Tue 21 Jan 2025 11:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 213.238.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:92:c1:4e:6e:26:8e:f3:20:ef:df:a7:4e:8c:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 21 11:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01fba8798301927e6c11e5883db1806d5b7e03c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:d4:65:7e:ab:33:02:37:16:b6:61:9e:da:
21:5f:41:6a:cb:1e:cf:2d:91:19:9b:11:98:e3:0e:
87:cd:11:c8:ea:a2:4a:84:0b:6d:d6:23:ff:eb:b5:
77:80:5e:b3:04:09:03:a7:9c:91:00:12:f8:5d:4a:
28:46:3c:62:e8:61:ed:83:40:d2:4c:13:7a:3b:5e:
e9:89:57:4f:8c:fa:59:d7:3a:15:46:2f:7c:80:59:
54:3e:e1:10:73:fd:b5:e0:fb:10:3f:fb:68:a1:55:
4e:ba:77:e1:cd:f2:90:d9:71:b1:e1:2d:88:21:22:
6e:07:02:cc:e7:c0:0f:70:af:5b:c3:5b:e4:80:e7:
e9:a7:60:e2:0a:7b:0b:83:ea:42:32:13:6b:8f:6a:
97:dd:27:8d:c5:66:23:99:6a:1f:f0:88:74:9a:ee:
5a:aa:32:95:a8:e7:c1:90:74:0d:10:7a:6a:86:b6:
2d:ac:a9:4c:05:08:2d:38:a5:71:76:c3:e9:df:e2:
7e:d8:2c:48:5d:13:65:7c:d4:ec:27:19:84:10:a9:
91:7c:d2:f9:22:bf:4f:2f:2e:5d:66:0e:28:77:40:
03:86:72:89:3f:d9:c2:bd:1b:6b:8f:d2:ee:e6:05:
fe:38:2a:7c:55:cd:94:98:ce:7a:2c:86:6e:37:e5:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:A8:79:83:01:92:7E:6C:11:E5:88:3D:B1:80:6D:5B:7E:03:C0
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.182.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:86:ea:6b:c2:d3:dc:a6:d0:30:af:f6:bf:62:f0:65:ff:06:
c4:7f:9a:fc:a4:6c:c3:91:57:89:b2:1e:01:31:cd:b0:74:c2:
32:c4:78:2d:c6:dd:0e:0f:c1:de:9f:ea:9a:9a:d2:d4:d5:ff:
cb:0c:c7:b0:43:7f:8e:e9:17:a8:f2:bc:36:e7:55:51:35:60:
22:45:59:d1:ac:72:ac:78:7e:4a:a4:7b:f4:fc:d4:b8:61:08:
69:41:13:18:5a:af:78:0e:27:bd:c4:11:17:ec:83:ae:6f:73:
6e:f7:e8:cc:35:1a:3e:6c:67:df:71:3d:fe:5a:68:2d:f2:57:
82:3b:33:94:b8:00:44:bf:4c:82:34:87:51:ed:f1:e4:76:ca:
31:b3:d4:1b:fe:25:6d:1e:7d:d1:b4:b7:4f:dc:d3:c1:e7:6b:
26:ef:28:6f:a6:de:e6:28:f9:15:a7:00:4c:74:4b:88:87:ad:
f9:4a:16:c8:f2:33:e4:75:7a:d6:23:0a:2b:78:f4:bf:65:9d:
85:37:41:64:b2:d1:6d:8c:82:36:df:6e:54:4f:b7:f4:27:14:
ea:59:e6:99:09:d2:1d:03:cf:38:e5:b6:df:f7:63:76:6c:2e:
1b:24:20:0c:86:ae:7b:c3:ad:b7:55:13:97:50:e7:1e:56:7a:
8b:8c:e3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:43 2025 by rpki-client