Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa
File: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (raw, json)
Hash identifier: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=
Subject key identifier: 35:7E:C3:0F:50:95:D4:59:BE:BE:B0:60:63:F5:37:03:31:53:07:1E
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70FCBDC55316CF2437266809CE4E9
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210574
IP address blocks: 213.238.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0f:cb:dc:55:31:6c:f2:43:72:66:80:9c:e4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=357ec30f5095d459bebeb06063f537033153071e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:cc:ef:8c:b0:64:a3:f2:1e:bb:3b:2f:89:
5b:93:dc:bf:f3:16:cc:3b:b6:49:a4:ba:29:05:bb:
3f:30:8b:7e:33:f7:df:9f:1a:2c:bf:bb:71:6f:10:
81:ba:bd:5d:e4:4d:7b:2a:07:69:bb:22:44:1c:1e:
97:56:45:0a:37:ba:bc:ac:3a:f4:5b:f9:4b:5c:c1:
0a:e6:e3:a4:5c:5d:4b:4f:9a:1c:13:58:a5:e6:27:
81:17:ab:d1:f6:5b:4c:f0:6c:0a:cc:43:17:9b:c1:
bf:8c:0d:36:f2:6c:f4:ef:27:ac:25:2d:ab:64:93:
43:78:92:ac:91:ec:74:dc:29:dc:52:4e:2d:1d:23:
b1:62:3e:e7:f8:a5:73:0a:4c:3f:9e:42:fb:de:ca:
eb:c4:be:1c:d9:08:b8:66:2e:38:fb:3f:32:aa:5b:
d2:8b:47:51:c2:ad:c3:6b:4b:b6:a4:59:c0:ed:d9:
b4:1e:65:d4:2a:07:b0:bc:7c:29:b3:73:a1:84:0a:
a3:5e:8a:86:65:fd:0d:59:83:41:ec:d1:cb:5f:9b:
9d:26:82:e6:36:a4:04:20:25:9b:54:10:55:42:dc:
4b:74:87:fa:4d:ea:09:71:ca:25:78:3b:38:d6:d1:
1e:3e:f0:37:df:a1:68:21:29:b6:3c:3c:9a:6f:cb:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:C3:0F:50:95:D4:59:BE:BE:B0:60:63:F5:37:03:31:53:07:1E
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:01:29:b4:8b:0d:bd:e7:47:42:3b:5e:74:46:97:a2:8b:a0:
b8:d4:e5:cd:07:37:6f:f8:87:fe:8a:ac:da:eb:39:5b:47:be:
6c:2b:01:bf:80:41:1a:ae:f9:a3:30:df:e3:91:f3:4c:c9:af:
bc:e6:6d:d3:d0:17:08:ea:a3:17:88:ea:4e:6f:a8:22:a8:20:
12:c0:53:09:94:de:16:49:ab:98:ab:7d:30:35:e3:70:09:9b:
df:07:bf:b1:be:8b:73:d4:47:50:c2:7d:4d:1a:ac:0f:66:a1:
49:2d:1a:fc:5b:d7:7e:c1:bf:22:a3:8f:b0:50:c1:71:09:9c:
78:26:3f:92:43:9a:a0:5b:f9:c1:2b:de:74:6f:7e:53:38:c7:
2a:2d:6f:34:58:fe:59:4b:04:7f:f3:85:f2:9d:9d:65:ab:6b:
70:d8:98:d9:4e:04:71:ef:98:fb:38:5d:ac:c5:09:65:da:a1:
7d:fe:1e:7f:18:99:37:81:97:e3:83:ee:e1:5a:2d:a5:5a:be:
f4:14:7c:5b:64:04:16:dd:a4:45:bd:15:6b:d2:53:5a:c1:ea:
d0:46:fb:4f:d2:6e:95:6a:fa:7e:31:96:d5:87:44:26:ca:76:
fa:cc:fc:6d:ab:d0:a0:62:24:1b:60:56:83:14:10:e4:f2:37:
46:81:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:29 2025 by rpki-client