Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/K6yZ47047hF0NwFQI7xiX1bObME.roa
File: K6yZ47047hF0NwFQI7xiX1bObME.roa (raw, json)
Hash identifier: b/I7AMY4ip5rwAIqGPd13gBwMCp1guYxQ+s4M8Er1LU=
Subject key identifier: 2B:AC:99:E3:BD:38:EE:11:74:37:01:50:23:BC:62:5F:56:CE:6C:C1
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D707CA676BEDA48EB01DF4815FCCB5
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/K6yZ47047hF0NwFQI7xiX1bObME.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 213.238.173.0/24 maxlen: 24
213.238.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:07:ca:67:6b:ed:a4:8e:b0:1d:f4:81:5f:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bac99e3bd38ee117437015023bc625f56ce6cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:cf:c7:df:d7:6f:da:14:bd:29:c7:8e:c5:
de:00:85:3c:45:77:d9:b3:80:3d:71:e9:fb:ed:e0:
3c:3f:c4:dd:9b:9c:6b:65:e0:21:52:19:33:d1:15:
92:76:ee:fb:d6:33:9c:b6:75:3d:96:31:c0:de:b0:
50:98:a2:5f:b0:88:64:81:66:32:50:bc:54:2c:38:
58:20:83:40:31:38:61:ef:5a:5d:f0:14:a6:b1:17:
ea:df:8f:f3:e9:12:79:d0:93:dd:eb:30:5d:ec:bd:
e8:67:57:73:93:4a:61:b2:ea:2f:b5:d9:7e:0a:d7:
c5:eb:0c:bc:5c:c5:58:71:b5:80:ac:f3:4b:e1:d4:
d0:80:79:39:a5:39:87:7a:ac:c6:8a:ca:d0:de:90:
f4:b7:4c:05:05:41:b3:8e:ae:c8:dd:08:b5:f7:52:
e6:39:8d:4c:fc:9f:29:7a:3f:e2:a0:ed:83:12:e0:
d0:ff:01:01:42:07:b9:76:c6:60:85:65:f8:68:8d:
05:59:ef:f0:9e:b2:00:d5:6d:b7:0c:cb:96:d6:bc:
f6:6b:c8:d8:fc:72:16:a6:e2:18:b4:56:9f:f2:3b:
c6:fd:da:63:9c:7e:fc:94:2a:10:aa:c4:e7:21:5a:
4b:a7:00:a9:bb:59:19:ef:7f:a6:b6:7f:6b:b9:97:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:99:E3:BD:38:EE:11:74:37:01:50:23:BC:62:5F:56:CE:6C:C1
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/K6yZ47047hF0NwFQI7xiX1bObME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.173.0/24
213.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
75:74:15:fd:e7:c3:a6:77:59:c0:d3:3f:51:cb:ea:c1:cd:8e:
43:c0:86:e0:00:c5:a5:62:5d:21:8f:29:95:9d:36:55:1a:ae:
a1:03:3a:36:38:34:c6:cf:c5:7c:05:16:11:17:10:35:ba:cc:
6a:d6:ba:d6:a7:d0:88:8a:18:2e:cb:15:e7:d3:30:e9:15:a4:
c1:ca:b0:5f:8c:77:5e:a7:41:2b:6f:26:cb:0b:67:63:56:81:
44:c1:8a:2d:e0:d3:5e:a8:03:43:de:45:73:cf:23:fd:9a:eb:
49:73:56:32:0b:3d:ff:94:29:bd:1b:fc:06:e4:e3:8b:54:e4:
32:61:a2:35:60:ab:5e:12:27:26:97:86:13:f3:32:6b:44:d7:
cf:cc:07:b4:d2:68:47:c1:41:1e:89:50:89:0b:47:68:33:b9:
59:3d:6b:ed:ab:75:5a:fd:9a:f8:fb:55:9e:6e:99:76:78:3d:
68:d7:6e:b3:b7:37:23:ff:dd:28:e7:30:0e:aa:ee:cb:03:9a:
5b:1e:2c:20:8a:da:c5:dd:3e:1f:00:38:0a:55:67:d6:27:0f:
0a:6c:fc:3d:e9:45:98:9f:3c:a0:9c:7f:96:99:5e:3f:37:a1:
ad:c2:dc:af:61:4d:7c:e5:f6:2c:86:ab:52:ef:e3:3a:6e:02:
ec:ce:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:47 2025 by rpki-client