Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/pA-X0SaB0DP88NQK6S16CRpbIws.roa
File: pA-X0SaB0DP88NQK6S16CRpbIws.roa (raw, json)
Hash identifier: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=
Subject key identifier: A4:0F:97:D1:26:81:D0:33:FC:F0:D4:0A:E9:2D:7A:09:1A:5B:23:0B
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019420D6139CB3D2E668777DBEBBA0612E48
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/pA-X0SaB0DP88NQK6S16CRpbIws.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209848
IP address blocks: 213.190.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:13:9c:b3:d2:e6:68:77:7d:be:bb:a0:61:2e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a40f97d12681d033fcf0d40ae92d7a091a5b230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:18:78:cc:84:6d:ef:bb:fd:27:bc:7d:9a:
c4:3a:ed:62:69:f7:0a:d4:36:24:61:15:f9:88:d1:
b9:13:9a:60:c0:b0:c7:07:aa:b2:2c:02:4c:0b:b6:
e7:5c:1c:11:35:c2:85:3b:64:0d:15:ac:c9:3e:86:
1f:1a:5f:11:4b:b7:e2:fd:5c:b3:b8:c8:98:5e:8e:
cc:a4:24:aa:bb:50:63:53:35:da:e3:4d:a6:2a:77:
9f:c1:06:20:bb:57:3f:dd:10:bb:0d:08:4a:72:62:
6d:de:4c:bb:4d:76:e1:0d:60:b5:aa:ff:30:e6:4c:
ec:5f:d4:40:0c:05:b1:a0:62:67:1f:b3:9d:ca:49:
30:1c:2c:9b:c7:11:c3:13:aa:92:35:5b:eb:b2:79:
2f:d1:c9:8d:b0:7b:dd:f8:e8:48:87:27:0d:22:10:
f6:3c:04:dc:97:e5:64:4f:32:39:57:9f:54:a0:b5:
e9:17:59:9f:62:4a:ff:bd:ae:7b:d3:91:f8:fa:08:
53:e4:94:7b:3d:2c:2d:d4:0c:3b:b7:1f:f2:7f:2d:
1a:d6:fc:44:eb:f9:0c:91:36:d4:97:4d:32:9f:07:
e4:c2:ab:38:8f:18:e1:a0:df:9d:09:05:11:92:9c:
a0:73:e6:5c:bf:bc:c1:93:7c:bc:77:52:8b:0f:34:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:97:D1:26:81:D0:33:FC:F0:D4:0A:E9:2D:7A:09:1A:5B:23:0B
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/pA-X0SaB0DP88NQK6S16CRpbIws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.0.0/22
Signature Algorithm: sha256WithRSAEncryption
22:d6:88:e1:ff:6a:ed:bf:1e:f5:b0:de:b2:08:a7:89:ba:65:
0a:36:ce:5a:ea:68:e7:38:2f:d6:b0:8a:9d:07:dc:72:68:78:
af:c8:f9:59:00:d5:72:22:c9:52:c1:e0:7d:09:ca:38:6d:af:
f2:93:db:cd:6f:be:7c:ac:12:fb:53:86:6e:9f:49:5f:74:05:
7f:1f:7b:1c:d3:d7:17:a6:ea:ca:8c:3d:5b:f9:59:5b:d8:30:
76:5f:0c:dc:5c:b5:97:f9:db:ca:61:8e:ce:71:83:0b:7a:0f:
1f:e9:1e:1f:cc:97:dc:89:c7:7f:9d:67:b1:cb:2b:a2:4f:7a:
4e:4b:ea:da:81:a7:6d:de:bf:da:0a:f7:9a:be:be:ad:b5:7a:
95:66:ee:63:cc:65:8d:e9:a6:ed:b9:5e:c9:6d:25:0d:ed:72:
48:b7:1a:42:b8:26:48:7d:1e:ee:b8:a7:8c:cf:98:92:ed:09:
15:26:2f:49:c2:8d:f0:3f:6d:29:b2:a4:79:8f:96:66:b2:c0:
92:e8:18:29:55:c6:34:de:18:b2:9b:15:f8:30:9d:22:3d:62:
f7:26:20:3f:cd:1d:b3:82:7e:30:d2:c7:06:a6:d3:5c:e0:c4:
7e:6a:f3:c4:f0:ef:8a:58:26:02:0a:60:43:2d:47:48:9b:a3:
b0:c2:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:54 2025 by rpki-client