Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/eAjr1B6zd3STbzt4qEn7NeiMfZQ.roa
File: eAjr1B6zd3STbzt4qEn7NeiMfZQ.roa (raw, json)
Hash identifier: wD7UtlrknZpSgT990yj5twOoR6vSkkajpcpLaiA//84=
Subject key identifier: 78:08:EB:D4:1E:B3:77:74:93:6F:3B:78:A8:49:FB:35:E8:8C:7D:94
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D7149DDC866BC5A6FAF483CF58254A
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/eAjr1B6zd3STbzt4qEn7NeiMfZQ.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213274
IP address blocks: 213.238.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:14:9d:dc:86:6b:c5:a6:fa:f4:83:cf:58:25:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7808ebd41eb37774936f3b78a849fb35e88c7d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:14:7b:2d:26:c5:32:1b:20:9c:13:6b:78:
97:a1:53:e7:05:9b:e5:6e:ab:14:53:2d:4b:4a:e1:
7e:2e:e6:1a:46:c3:be:bb:16:82:be:c0:95:b4:40:
ed:0c:72:0f:23:f7:20:a2:4a:b9:09:09:56:e7:47:
8e:77:50:64:06:ab:c3:44:e1:bc:b0:44:2f:d1:48:
77:0a:05:ec:92:d5:1f:7c:28:c5:ca:27:7e:4a:8b:
8e:13:ae:1c:d5:ef:73:42:da:f9:88:93:b7:df:f8:
43:3a:f2:4a:00:40:af:a8:50:26:ee:77:f6:bb:ce:
94:80:df:60:db:dd:f2:e7:b0:49:08:5c:27:a9:3a:
86:34:52:16:b4:36:20:7b:bc:b4:80:31:c4:00:5f:
5e:ac:3b:2f:26:31:70:ee:13:a5:cd:d2:cf:f7:70:
6b:ce:0a:a3:eb:13:7b:9a:08:d1:a8:97:55:ca:e5:
a9:64:8b:6e:5f:ac:20:ba:b7:88:ce:59:b4:85:8a:
ee:e8:97:89:7c:22:c7:20:44:cb:dd:cb:7f:30:49:
94:7e:20:bf:29:5a:80:8a:bf:96:51:db:3c:c4:75:
f5:ba:11:10:ae:49:10:a0:df:a1:2d:e7:76:45:7e:
48:fb:74:5a:7f:b0:a0:c4:9a:1d:05:1b:8c:42:b6:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:EB:D4:1E:B3:77:74:93:6F:3B:78:A8:49:FB:35:E8:8C:7D:94
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/eAjr1B6zd3STbzt4qEn7NeiMfZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ff:d3:a9:a9:48:b9:67:e6:2c:e9:5a:9b:99:4f:f3:59:d2:
9c:3a:80:d6:29:d1:f2:15:88:02:e4:ff:c4:bf:7f:99:cc:1f:
87:22:8d:0b:2e:5e:ba:50:e9:e4:1c:83:06:cc:91:88:a9:d2:
21:b1:51:5d:b3:f5:1f:2a:fc:ae:26:7c:9c:b3:7c:94:39:15:
06:fa:1f:3e:6e:c8:ce:70:a1:06:d3:06:1f:2a:cf:55:95:a4:
35:94:bc:2f:99:a2:83:8f:bb:83:db:d0:20:b7:e1:4d:ba:f5:
10:79:1d:03:f1:4d:4c:18:f6:46:2c:34:e0:32:43:5c:84:d1:
47:47:78:50:1e:fc:98:d3:f9:6e:49:f6:d1:76:b1:45:80:79:
39:f0:ab:cb:07:09:ee:f5:1a:e0:6a:60:44:b9:0c:29:00:27:
11:6c:86:6a:9c:8f:52:ae:6b:6f:31:60:bc:82:21:7a:18:b7:
27:70:7d:f0:54:35:70:eb:61:43:36:38:08:e7:83:95:0c:74:
80:f6:a1:36:19:7f:7e:26:b4:17:ce:b2:76:07:d1:60:85:9d:
06:51:0d:d4:03:55:a0:16:e3:77:36:56:c6:e2:45:ea:5f:b0:
3a:43:ff:f5:25:32:1d:ee:ad:72:2b:37:ab:9e:c8:c6:20:f6:
c0:81:0c:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xSd3IZrxab69IPPWCVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwMTAxMjE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODA4ZWJkNDFlYjM3Nzc0OTM2ZjNiNzhhODQ5ZmIzNWU4OGM3ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMsUey0mxTIbIJwTa3iXoVPnBZvl
bqsUUy1LSuF+LuYaRsO+uxaCvsCVtEDtDHIPI/cgokq5CQlW50eOd1BkBqvDROG8
sEQv0Uh3CgXsktUffCjFyid+SouOE64c1e9zQtr5iJO33/hDOvJKAECvqFAm7nf2
u86UgN9g293y57BJCFwnqTqGNFIWtDYge7y0gDHEAF9erDsvJjFw7hOlzdLP93Br
zgqj6xN7mgjRqJdVyuWpZItuX6wgureIzlm0hYru6JeJfCLHIETL3ct/MEmUfiC/
KVqAir+WUds8xHX1uhEQrkkQoN+hLed2RX5I+3Raf7CgxJodBRuMQraNBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgI69Qes3d0k287eKhJ+zXojH2UMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvZUFqcjFCNnpkM1NUYnp0NHFFbjdOZWlNZlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6uMA0G
CSqGSIb3DQEBCwUAA4IBAQAe/9OpqUi5Z+Ys6VqbmU/zWdKcOoDWKdHyFYgC5P/E
v3+ZzB+HIo0LLl66UOnkHIMGzJGIqdIhsVFds/UfKvyuJnycs3yUORUG+h8+bsjO
cKEG0wYfKs9VlaQ1lLwvmaKDj7uD29Agt+FNuvUQeR0D8U1MGPZGLDTgMkNchNFH
R3hQHvyY0/luSfbRdrFFgHk58KvLBwnu9RrgamBEuQwpACcRbIZqnI9SrmtvMWC8
giF6GLcncH3wVDVw62FDNjgI54OVDHSA9qE2GX9+JrQXzrJ2B9FghZ0GUQ3UA1Wg
FuN3NlbG4kXqX7A6Q//1JTId7q1yKzernsjGIPbAgQwh
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:31 2025 by rpki-client