Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Y0o2EorBs4tnHTlXBx9_Em9SKl4.roa
File: Y0o2EorBs4tnHTlXBx9_Em9SKl4.roa (raw, json)
Hash identifier: lsJ5/zTAbPj7ZjFMhWfBe1d9ApZiCPOo7iqoKCPqSiM=
Subject key identifier: 63:4A:36:12:8A:C1:B3:8B:67:1D:39:57:07:1F:7F:12:6F:52:2A:5E
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70C9B796A3D183A3356ABA0980A3E
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Y0o2EorBs4tnHTlXBx9_Em9SKl4.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209275
IP address blocks: 213.238.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:9b:79:6a:3d:18:3a:33:56:ab:a0:98:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=634a36128ac1b38b671d3957071f7f126f522a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:c0:b6:37:a4:06:7d:49:e2:98:08:38:24:
66:a7:b1:5e:f5:0e:ca:ab:62:a1:03:b5:13:67:92:
a3:6d:84:c7:36:4c:c4:ef:d0:48:cb:ba:13:91:1b:
0d:74:3b:88:6e:d8:a8:0d:a6:45:a3:1b:4f:8f:c7:
03:2b:98:1b:a3:48:c7:bd:a2:e5:8a:bc:59:bc:dc:
f0:9b:74:43:9f:d9:8e:97:b2:98:46:62:29:b2:c7:
bc:47:54:80:ba:52:c5:9b:7f:e4:b1:00:e3:94:85:
13:8c:5d:ca:c6:95:c8:70:87:68:a0:6c:ec:61:43:
d1:36:a0:ea:33:54:c2:13:a1:f1:43:c7:48:03:73:
58:6a:b8:bb:77:ab:00:13:18:9b:be:94:2d:2a:51:
aa:f2:87:8a:8c:1b:08:4d:b2:98:ac:f9:f4:66:9b:
bf:8c:5d:92:07:91:72:9c:8e:00:05:71:4f:62:f6:
2e:99:e9:20:6f:c9:a3:a3:ac:e9:5d:14:87:0f:62:
fd:a5:b2:8e:62:76:c1:be:57:08:ae:c2:d7:e4:c9:
b1:2e:01:3b:4c:94:6d:40:8e:45:a9:2f:04:46:96:
34:3d:7f:10:97:c3:57:64:ee:5d:18:88:00:a2:7b:
a1:7c:01:37:b0:1b:86:41:f2:9c:a9:f4:2a:b9:c2:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:36:12:8A:C1:B3:8B:67:1D:39:57:07:1F:7F:12:6F:52:2A:5E
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Y0o2EorBs4tnHTlXBx9_Em9SKl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0/24
Signature Algorithm: sha256WithRSAEncryption
25:72:c2:1f:21:6f:92:40:1d:ef:f3:72:84:08:1e:db:5e:74:
b2:2a:a3:88:fc:ac:6e:c0:c9:c8:cf:a7:71:bf:48:56:5e:3a:
de:2d:a5:0f:91:bc:a8:8d:f6:89:a2:d9:f9:68:f8:7a:e3:93:
09:bb:1b:1e:f2:85:73:d1:30:65:16:ee:78:13:e7:6f:50:42:
28:d8:5d:78:87:e5:54:5c:c1:db:ee:47:c0:1f:af:2b:d0:a2:
ce:db:dd:ec:d8:63:8d:98:59:ce:3e:70:ac:6e:ac:4f:9b:95:
f7:f3:bd:99:46:6f:83:60:8f:f2:11:9a:90:a4:16:8f:92:f6:
7c:8f:35:d5:2d:88:0b:fe:53:54:46:02:db:d8:a7:1c:dd:6e:
af:e8:75:4d:1b:b6:dd:b6:2b:8b:75:83:80:49:c2:98:c2:14:
00:7e:f1:26:83:a9:7b:d7:b3:dd:23:6f:ae:da:44:ef:3c:0a:
7c:91:44:80:c2:33:ab:d5:d4:8d:fc:43:79:31:cc:9f:44:7d:
b6:0c:b5:1a:1f:18:57:25:ef:df:b1:4f:82:00:26:3c:9d:d9:
44:53:51:aa:29:32:42:3c:78:46:b6:02:fb:6a:c4:86:eb:2d:
88:62:0c:ab:85:36:a5:ac:a5:9f:df:ee:c7:c5:c1:18:14:97:
91:2f:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:23 2025 by rpki-client