Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7NoekW-HkxHn4P8-jBcdVtp5hPY.roa
File: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (raw, json)
Hash identifier: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=
Subject key identifier: EC:DA:1E:91:6F:87:93:11:E7:E0:FF:3E:8C:17:1D:56:DA:79:84:F6
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B0A074CEDA4F6D92B41EDC2903F4
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7NoekW-HkxHn4P8-jBcdVtp5hPY.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200131
IP address blocks: 213.109.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b0:a0:74:ce:da:4f:6d:92:b4:1e:dc:29:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecda1e916f879311e7e0ff3e8c171d56da7984f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:d1:d5:6b:08:b8:53:1a:d6:bd:e1:6a:3a:
e7:37:f5:e5:ca:5d:16:81:1f:99:00:ff:5f:82:02:
60:69:a1:4f:ab:0b:62:00:2e:9b:b8:d7:ce:2c:8d:
93:6a:2b:21:c4:d9:e0:29:11:89:41:25:24:11:0c:
c5:23:08:36:01:e7:b2:dd:8b:42:3a:96:bc:7b:b1:
da:6d:45:8e:87:18:cc:00:a6:ae:d9:3d:26:60:b9:
24:e5:e2:6b:a8:a1:7a:3d:e7:8a:6f:7f:63:79:fc:
7a:8b:7e:63:70:8e:e9:1c:83:45:de:48:1e:89:b5:
d3:03:0b:09:6f:64:1a:ed:66:37:f5:f5:3e:d7:f8:
2e:c2:a6:72:26:90:e9:09:cf:bc:bb:60:1a:cc:06:
55:3b:05:c9:61:31:f4:12:2e:66:bb:49:da:60:f3:
b4:42:9d:6f:13:b0:7b:16:36:4c:62:c3:e2:50:7e:
3f:ae:8a:3f:4e:85:46:0a:50:9b:5a:82:f4:48:e6:
b7:e5:e8:2a:77:a5:ae:ea:3c:4b:5a:04:50:3b:b2:
40:53:55:eb:e7:bd:2e:c7:83:4f:2e:84:c9:8a:19:
ec:bb:76:7c:1f:92:b2:8d:5d:c4:11:f5:94:76:e7:
30:03:23:62:00:e7:73:e5:d8:60:95:e4:f6:c0:5d:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:1E:91:6F:87:93:11:E7:E0:FF:3E:8C:17:1D:56:DA:79:84:F6
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7NoekW-HkxHn4P8-jBcdVtp5hPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.154.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ff:4d:d3:e6:a4:44:af:44:dc:d3:5f:67:2f:71:1a:e6:6b:
71:f8:aa:62:94:91:f7:33:d5:6d:35:45:13:f9:18:91:95:89:
07:d9:9a:82:27:00:26:d4:d6:fc:95:0e:81:57:7c:64:c3:8b:
d4:be:5a:2c:ff:e9:49:0d:8a:61:0c:13:49:64:a9:76:4c:8d:
f9:6c:da:07:21:ab:c9:84:fc:eb:eb:41:28:5a:af:13:99:6a:
79:6d:10:c5:e2:cb:1f:48:51:7c:5d:fe:59:60:9d:8c:25:73:
7b:6f:97:03:5a:73:e6:4c:21:59:7f:3d:56:e1:39:00:78:b3:
09:d2:d4:98:44:e7:d5:95:89:d9:75:5d:ab:61:e8:76:3b:9c:
41:f0:3d:af:90:06:49:25:1f:ae:8a:41:3a:46:f7:4c:81:29:
c2:33:89:a7:a6:8c:37:e2:78:7c:47:60:7c:f5:37:5d:a8:f5:
b6:1e:0b:61:d1:c2:63:94:c8:e3:14:83:27:d9:ef:3b:5b:32:
3b:59:80:41:ae:11:c8:1b:24:4a:51:e7:46:8d:bf:9c:be:02:
a8:2c:87:74:67:52:7f:1d:2f:96:44:c5:4d:a1:32:b0:a8:2e:
fd:f7:c1:75:8c:ad:b7:8d:f8:1f:5f:7d:e2:4a:89:c3:6a:5e:
86:74:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:09 2025 by rpki-client