Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa
File: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (raw, json)
Hash identifier: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=
Subject key identifier: 71:8C:30:CC:08:1A:5C:40:49:BC:43:DE:DA:DB:FF:EA:18:2F:D9:3C
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D703649674BE5992B9781A59F080AD
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25145
IP address blocks: 213.238.160.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.165.0/24 maxlen: 24
213.238.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:03:64:96:74:be:59:92:b9:78:1a:59:f0:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=718c30cc081a5c4049bc43dedadbffea182fd93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:14:c8:01:16:e0:90:f5:44:1e:46:a4:26:
e0:0b:ee:42:40:b9:99:a5:12:49:9f:fb:05:3e:57:
c0:41:d3:4e:80:e5:b4:31:1d:25:7e:60:20:55:76:
10:b9:f1:8c:68:84:03:60:7d:9a:d0:20:83:05:99:
36:c7:de:30:b5:0d:36:0c:e4:8d:c1:34:fa:79:fd:
54:bd:0e:51:d5:60:70:4b:b8:7c:aa:d5:80:65:2a:
9f:fc:17:7e:bf:63:f3:c5:74:36:05:37:d1:6e:07:
11:82:13:10:d3:e6:51:cf:b0:db:b7:13:b0:78:ae:
34:4d:7c:11:0c:4d:07:bd:66:a8:ea:e0:e3:6a:fe:
47:3b:e2:57:24:74:3a:02:2d:b0:0b:2d:86:c3:5a:
52:bf:df:fd:db:dd:a0:c0:6c:9c:e4:a6:fa:ed:ce:
17:1f:42:6e:6e:94:55:cf:be:91:35:ef:6c:c4:6a:
b9:c0:2b:15:26:05:fb:66:b1:d9:36:f1:7a:5b:29:
0c:e5:ae:f9:0e:e0:eb:28:a5:14:2a:c1:cf:18:42:
97:f7:2e:b8:df:b6:50:8c:39:b2:4d:3f:82:8c:03:
9c:73:72:31:18:12:57:12:6c:78:37:91:16:e1:02:
04:5a:f6:d9:7a:2b:9a:6b:47:88:e4:98:f6:43:83:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:30:CC:08:1A:5C:40:49:BC:43:DE:DA:DB:FF:EA:18:2F:D9:3C
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
213.238.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:45:5c:13:61:d8:d4:e0:90:9e:85:1c:e3:0e:c2:81:61:45:
6a:e5:64:52:83:65:60:2e:2b:9d:ef:b2:79:8a:41:c5:fe:73:
31:0f:fb:ea:82:75:f8:c6:36:7b:25:1e:bb:a7:1f:a1:cd:ae:
19:25:05:a5:68:a3:fd:df:c6:02:e3:98:c8:6b:d8:a9:d3:ae:
36:0f:af:4f:f9:c7:d1:5e:0c:35:33:9c:cc:c9:7f:a6:ec:80:
af:5e:9a:d5:72:9d:7d:ac:1b:a2:48:a0:4f:41:c1:36:ad:eb:
d8:37:70:79:b3:b8:ab:db:6e:f9:20:e3:f5:ee:61:33:c2:68:
c8:ef:6c:bc:64:6d:05:ea:ff:a2:ba:f7:a8:f9:07:60:ec:1d:
33:4a:8d:ce:84:57:16:a7:72:e5:25:fa:d3:49:76:f9:f6:0e:
02:eb:ad:1c:bb:41:8c:b4:d6:0a:53:22:b9:9d:08:2a:16:61:
30:90:83:c7:84:ce:26:0f:55:a6:fd:01:31:a8:aa:3c:06:00:
49:b2:a0:46:9f:fc:0a:e4:da:86:9b:ae:4f:ed:43:c0:62:21:
55:51:ca:89:c8:aa:77:81:10:75:4b:15:e5:97:ec:36:81:dd:
d4:b8:68:6f:27:41:00:9d:e9:9c:5e:cd:45:8f:09:4e:e3:c9:
8c:6e:91:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:03 2025 by rpki-client