Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa
File: aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa (raw, json)
Hash identifier: crXyg1I0M6v1iZUeG0Vpk1mS5J8AlR2ziEDMO6PLwNs=
Subject key identifier: 68:45:AB:EB:E1:2A:B6:42:95:06:7D:5A:88:2E:EB:1D:D8:CA:B7:C6
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 019427B56AE55E2E33CB6F671CBCB8F882B5
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60123
IP address blocks: 213.240.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6a:e5:5e:2e:33:cb:6f:67:1c:bc:b8:f8:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6845abebe12ab64295067d5a882eeb1dd8cab7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:6d:a1:70:51:99:53:ae:b6:e2:2d:a0:dd:
e9:11:d7:98:4c:1d:e2:03:07:c3:98:19:37:23:c6:
cf:96:a1:a0:df:6b:48:ac:10:cc:cf:6f:75:3e:53:
c8:7a:3d:32:9d:e9:f3:4b:1e:c8:76:8b:d2:27:1d:
4b:e1:19:c2:a1:00:cd:0d:67:5a:07:6b:e9:da:e5:
7d:2e:29:55:75:32:5e:84:ea:4e:4f:f9:f0:a3:3b:
a2:50:bb:9b:e7:0f:81:d7:a1:47:65:50:bf:c1:7f:
2d:51:0a:f8:b7:0f:a7:fd:ba:d3:a2:b1:67:d7:c3:
59:0a:40:b7:c0:f9:9a:b0:ad:bf:5e:a9:8c:a7:63:
26:29:4a:9f:eb:03:9e:eb:eb:91:de:5a:8c:f8:0f:
0f:a6:8e:c2:43:7b:27:6e:96:4c:8a:68:a6:2f:0f:
45:c3:c6:06:f3:e5:16:ad:d3:c7:f8:12:a2:bb:d4:
00:5f:70:c0:a0:30:92:f9:c3:26:6c:8b:d0:71:13:
05:55:48:1b:2a:b3:5b:dd:8f:43:56:d8:4a:36:65:
0d:ba:11:0c:44:48:42:8e:74:43:ad:82:a2:5d:27:
8e:4b:dd:1e:81:c1:fb:36:7a:ea:15:c7:86:02:26:
de:57:8a:fa:9a:ef:4b:73:16:cd:22:00:7a:91:de:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:AB:EB:E1:2A:B6:42:95:06:7D:5A:88:2E:EB:1D:D8:CA:B7:C6
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.240.148.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ad:8d:cd:67:1b:9f:45:e9:0a:c4:a8:88:0a:1c:1f:97:e4:
c0:8b:66:76:da:84:1b:1c:77:6d:85:e0:3b:8f:31:25:c0:db:
29:ec:79:6c:bf:74:36:25:2b:f8:ba:26:1f:06:59:c6:58:28:
20:79:ce:ea:bd:db:c3:b0:e6:5a:60:cf:30:5a:27:95:51:22:
d1:1f:b7:bd:7f:9a:25:5c:58:f1:7a:5d:16:bd:25:4c:a2:88:
85:ac:35:07:8f:2a:3b:8f:14:da:18:3d:cf:f3:29:05:f5:1b:
72:8c:8c:bb:67:c8:d2:89:ee:b4:03:53:df:54:b5:ee:cc:a5:
d9:67:3e:f3:d6:82:7b:e8:20:28:26:d7:25:23:18:7e:7b:c6:
15:9d:cc:9d:a2:9a:07:6f:5b:34:6b:ae:51:9f:f8:4a:fa:a7:
e1:c0:e0:5e:2a:9e:55:59:8f:25:4e:35:4b:34:1c:be:49:9e:
b5:bf:e0:e3:3d:1e:48:df:36:a5:78:ba:7e:c2:4a:ef:9c:92:
4b:04:37:9b:c1:05:c5:49:77:3a:32:b7:b7:1e:c3:95:9a:a3:
e8:47:f3:f4:49:ee:e9:7e:26:f4:08:5b:c4:6e:73:65:f0:ec:
eb:40:21:2d:3a:a2:58:00:74:42:eb:c9:1c:1e:3e:97:3a:d0:
81:67:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:44 2025 by rpki-client