Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/YW1hjZcECO_e-0edVIPSxYfb76o.roa
File: YW1hjZcECO_e-0edVIPSxYfb76o.roa (raw, json)
Hash identifier: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=
Subject key identifier: 61:6D:61:8D:97:04:08:EF:DE:FB:47:9D:54:83:D2:C5:87:DB:EF:AA
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207FD75B149956830A3C1D5725B00B
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/YW1hjZcECO_e-0edVIPSxYfb76o.roa
Signing time: Thu 02 Jan 2025 03:47:54 +0000
ROA not before: Thu 02 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212260
IP address blocks: 213.135.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7f:d7:5b:14:99:56:83:0a:3c:1d:57:25:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=616d618d970408efdefb479d5483d2c587dbefaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:8c:8e:51:3c:28:ee:d2:ec:35:6d:9d:68:
f0:77:41:89:b7:9b:db:97:db:71:23:f6:3a:a4:ce:
7c:99:a4:1c:1c:d6:dc:d3:9c:eb:78:48:21:06:66:
7f:57:9b:98:10:5d:d3:2e:67:6b:e1:68:0f:c6:3a:
ed:61:f6:9f:af:53:a2:71:cc:ed:75:ba:79:b5:78:
c0:64:44:81:ba:ca:28:bd:51:86:6b:33:7c:6d:4c:
8e:a1:75:e1:3a:91:1a:84:8e:2a:9c:17:4b:78:89:
e7:ec:a2:02:27:9b:8d:83:83:7a:d7:1e:3f:2d:ce:
c8:05:cb:c6:ab:8f:13:00:9d:71:e2:28:81:ad:68:
ac:25:76:35:83:53:73:31:80:7f:cc:11:26:83:1e:
7d:ec:74:da:f7:45:75:bc:83:9f:63:98:fb:99:5c:
91:e2:6a:24:80:0f:0a:ed:8e:7c:1d:2e:ae:58:82:
c1:d8:1f:79:ad:c3:05:15:3c:e7:5c:f3:2f:64:0a:
f8:21:8e:a7:12:f8:dd:22:af:19:94:19:47:3b:e8:
4f:25:fe:93:f4:88:ac:d1:64:66:cf:da:f0:3e:a1:
34:cd:fb:61:e2:3a:fd:23:bd:c9:6f:aa:ec:35:40:
14:73:ef:c7:a8:12:45:f8:65:e2:ce:54:d8:7a:30:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6D:61:8D:97:04:08:EF:DE:FB:47:9D:54:83:D2:C5:87:DB:EF:AA
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/YW1hjZcECO_e-0edVIPSxYfb76o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.66.0/24
Signature Algorithm: sha256WithRSAEncryption
90:57:a7:05:b2:b5:0b:75:42:8b:2a:dd:7d:24:6c:ac:10:ee:
13:02:86:94:32:87:a2:c0:07:e3:21:4a:42:1e:42:20:e6:6c:
00:9f:7d:25:a9:ad:26:0f:55:08:4f:5d:56:14:eb:b1:af:90:
3c:69:e7:67:be:5f:6b:ad:61:c5:2f:52:d9:c8:fa:c3:6a:01:
c9:72:ce:67:87:5f:69:8f:fc:97:a2:b3:e5:3d:83:ee:04:5c:
e1:c1:8a:5a:3c:47:49:63:93:57:96:8c:ac:30:c3:e4:16:7b:
e5:28:a8:9d:1d:6b:75:85:a4:d3:7a:ee:81:bc:ca:64:b7:6c:
3e:bc:79:96:f6:fa:aa:18:e0:4e:c2:97:6a:a1:19:06:f2:bf:
9e:de:98:56:a0:7b:f6:e4:aa:49:47:15:8b:bc:7d:79:cc:54:
81:e6:47:74:4a:10:7c:2f:63:d0:02:60:eb:91:49:b9:78:23:
40:05:ad:02:be:75:a5:b2:23:cf:11:95:af:8a:a1:16:e3:2d:
41:6b:96:d6:e5:45:64:9c:42:bf:6e:1d:91:e9:a7:18:39:58:
7f:89:b6:22:35:c4:20:64:ba:bf:50:c4:75:22:d7:0d:16:ac:
1d:0a:3b:98:ad:dd:2c:f7:85:da:0c:fd:df:8a:bc:eb:a8:4f:
14:c9:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:33 2025 by rpki-client