Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa
File: vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa (raw, json)
Hash identifier: s+4rmOMySoNQOi+H+sRt31xxTfChmW9KgSsCZve3tZg=
Subject key identifier: BD:A8:99:64:13:16:EE:02:66:5F:64:92:27:F1:AC:5E:D3:10:B3:10
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 019426D99441D5472FB458CA47A107CD5021
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 213.230.214.0/24 maxlen: 24
213.230.224.0/24 maxlen: 24
213.230.225.0/24 maxlen: 24
213.230.226.0/23 maxlen: 23
213.230.228.0/23 maxlen: 23
213.230.230.0/23 maxlen: 23
213.230.232.0/24 maxlen: 24
213.230.233.0/24 maxlen: 24
213.230.234.0/23 maxlen: 23
213.230.236.0/23 maxlen: 23
213.230.238.0/23 maxlen: 23
213.230.240.0/23 maxlen: 23
213.230.242.0/23 maxlen: 23
213.230.244.0/23 maxlen: 23
213.230.246.0/23 maxlen: 23
213.230.248.0/24 maxlen: 24
213.230.251.0/24 maxlen: 24
213.230.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:94:41:d5:47:2f:b4:58:ca:47:a1:07:cd:50:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda899641316ee02665f649227f1ac5ed310b310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:e7:26:01:d1:52:09:f4:29:9a:fe:77:a4:
9f:0c:c0:fe:b0:71:a7:4c:ee:ef:18:c4:95:a5:96:
a8:08:3c:0c:9f:05:87:f4:ab:12:36:51:e8:79:1d:
f5:83:af:70:d0:33:a6:74:53:c6:26:0a:d6:42:34:
e5:ea:9d:7a:38:77:be:dd:01:03:91:e0:f8:6c:0e:
fc:49:c0:af:71:0b:9b:12:6d:be:5a:cf:59:6a:f2:
15:b6:a4:12:99:12:c2:e1:7d:8c:d6:a2:1d:94:1b:
be:3e:1b:dc:27:1a:e5:72:79:43:b7:5a:48:73:05:
cd:5b:87:b8:56:56:d3:49:6f:bf:0d:d9:2f:1e:4a:
58:a3:34:e2:32:96:b2:1a:cf:e9:07:99:3a:f8:f3:
f1:47:e9:08:a0:16:3c:1c:b5:52:9c:e3:39:ad:c2:
44:6d:9b:68:90:46:87:1e:fc:9b:bf:c7:80:08:3f:
c9:e7:6d:e0:02:9d:92:a9:51:8a:e2:d7:ed:6a:1e:
14:1e:50:4e:e8:e4:20:c0:2a:44:10:f4:aa:31:7a:
b1:6f:51:f1:33:0d:81:a3:8e:1a:fc:80:ed:5d:88:
75:bc:ac:73:2c:b4:14:80:f5:6c:79:57:75:61:45:
5c:72:e7:a2:97:2a:91:ee:2c:52:28:f4:4f:ff:f7:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:99:64:13:16:EE:02:66:5F:64:92:27:F1:AC:5E:D3:10:B3:10
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.230.214.0/24
213.230.224.0-213.230.248.255
213.230.251.0-213.230.253.255
Signature Algorithm: sha256WithRSAEncryption
66:da:81:fc:ec:53:ec:5a:fd:f4:a9:5e:c8:e5:a2:68:af:17:
ae:2e:44:76:74:98:fe:fe:45:34:2d:ad:98:fa:08:88:03:af:
eb:e2:62:40:04:e4:35:15:f2:d2:58:b7:2d:c8:7b:c6:5e:d0:
d0:05:90:ad:34:69:d4:3b:9d:a3:d8:8f:fb:ad:e1:1a:4a:e4:
cd:cb:1f:32:93:24:5c:35:d3:c6:63:07:90:c8:cd:30:c9:14:
0a:4e:bd:10:7e:d3:96:cb:d2:4e:44:21:69:83:e1:b2:c8:e7:
16:fa:3f:10:f9:8b:0e:61:2d:9c:2a:3b:86:38:dd:57:dd:ea:
c4:98:ee:a0:69:21:4f:36:09:98:47:75:c9:3a:d7:d1:22:54:
47:ba:ed:ff:c7:7b:ad:3c:06:8b:bf:05:8e:a2:a9:49:5d:a1:
4d:0f:ac:c9:67:2a:69:40:a0:98:99:78:68:cb:ed:8c:4e:48:
00:5f:a2:01:22:b6:6f:08:25:45:87:89:67:93:65:4f:14:f6:
5f:d0:34:8c:03:c9:98:56:8c:b9:af:19:f4:4b:ae:a4:de:19:
6a:0d:77:6e:98:62:fa:3d:41:03:6c:11:3e:1f:dd:08:3c:93:
8b:79:55:76:39:9c:81:7c:d6:a6:a2:3d:3e:d6:39:96:e6:78:
55:2d:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:29:48 2025 by rpki-client