Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cyM7dnfMr7EvPZ7pGrfoF-dVt1o.roa
File: cyM7dnfMr7EvPZ7pGrfoF-dVt1o.roa (raw, json)
Hash identifier: YAJzypx1b34Ery1+o2PRzp+uU+C6QB41uq0KGi8MgMc=
Subject key identifier: 73:23:3B:76:77:CC:AF:B1:2F:3D:9E:E9:1A:B7:E8:17:E7:55:B7:5A
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B578D7FF388BC32D667A2D29DDF735
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cyM7dnfMr7EvPZ7pGrfoF-dVt1o.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62044
IP address blocks: 213.152.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:78:d7:ff:38:8b:c3:2d:66:7a:2d:29:dd:f7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73233b7677ccafb12f3d9ee91ab7e817e755b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:52:ae:77:f0:50:1e:60:70:57:39:a2:f5:
e9:02:63:9c:09:23:69:88:0c:d0:75:d8:28:3a:b1:
ec:45:2f:84:48:40:93:f3:7d:c0:57:1b:32:90:b6:
28:62:12:1b:bd:bf:5b:c6:d5:f3:70:24:c1:3c:65:
03:56:b3:7e:ca:09:55:2f:5e:1b:56:7d:8f:e9:f6:
b2:7b:be:36:65:7b:05:20:89:6e:29:0f:04:ab:66:
4d:5d:6b:bb:b8:b3:28:4c:61:08:dd:88:ac:a7:b0:
c3:dd:78:61:30:59:8c:33:08:47:24:ae:bc:66:5a:
a1:c2:c5:91:d4:68:91:6d:f1:23:93:24:a2:4b:a0:
1f:d0:1d:37:db:d3:2a:e6:8b:4c:cf:d3:29:d7:c7:
26:02:93:64:0c:cf:ec:b9:8a:46:23:2a:be:d6:ee:
ff:87:06:42:6b:a7:2b:34:27:86:26:96:02:33:8e:
c4:f5:60:dc:e2:58:77:35:36:8b:e1:6a:02:6e:2c:
7d:36:0b:64:ae:e6:34:00:d0:42:9f:9a:d8:72:10:
b5:69:21:18:17:09:23:bc:a2:04:3a:73:07:1c:7c:
ef:d3:21:9c:69:69:7f:d5:a5:44:04:0d:9e:18:2d:
cf:a0:c5:d7:33:c7:54:6f:92:34:ef:f3:c2:23:b0:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:3B:76:77:CC:AF:B1:2F:3D:9E:E9:1A:B7:E8:17:E7:55:B7:5A
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cyM7dnfMr7EvPZ7pGrfoF-dVt1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:74:5f:cd:1d:5f:f9:5b:d4:21:1d:3f:de:22:3e:e0:99:9c:
f6:1d:9b:c7:35:8a:2c:bd:b8:3a:68:76:f3:3e:31:10:28:9c:
e5:67:5b:ae:14:12:ed:c3:c8:9c:7a:ea:2e:07:9c:e6:be:0e:
fa:70:22:12:64:ff:c6:34:8b:d8:a5:0c:01:42:9d:0a:af:e4:
f2:91:d5:3e:57:de:1f:3c:64:53:c3:ac:30:18:30:84:bf:67:
e6:af:c9:43:b2:98:43:2a:c6:01:c4:9c:d7:d0:25:dc:f7:d1:
55:62:ff:b5:d2:3b:5f:6b:f5:b1:95:51:48:4f:23:75:37:30:
1d:69:91:e3:bd:8f:2e:11:0a:6e:81:66:b6:77:17:16:75:c1:
bb:d8:39:1a:bb:0a:21:bd:8d:c1:b1:55:76:6e:cc:7e:10:48:
43:48:1a:14:13:db:02:c8:0c:7f:9a:9e:cf:b6:56:90:76:eb:
d4:85:a8:87:f4:75:f9:32:eb:02:8a:a9:bd:df:a1:fe:29:2b:
c8:25:e0:6b:7d:b1:5e:46:0b:57:b7:ae:44:a0:7f:a4:dc:7e:
2b:98:e2:bb:59:e7:10:aa:de:45:1b:4f:07:13:fe:c1:8d:0d:
e3:ee:4e:77:3c:34:bc:a4:e3:fa:c2:b0:11:d9:a7:00:25:ac:
2f:73:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:24 2025 by rpki-client