Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2P3YV-8GvOz7keAcAWm3Y_-XK9o.roa
File: 2P3YV-8GvOz7keAcAWm3Y_-XK9o.roa (raw, json)
Hash identifier: J8KukgFQFTlk+NZTgcepEdSt6c8hFW7FgGWi62uPXrQ=
Subject key identifier: D8:FD:D8:57:EF:06:BC:EC:FB:91:E0:1C:01:69:B7:63:FF:97:2B:DA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE4BDB94139C5917327CAC43C1779C7F5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2P3YV-8GvOz7keAcAWm3Y_-XK9o.roa
Signing time: Sun 07 Jan 2024 16:24:48 +0000
ROA not before: Sun 07 Jan 2024 16:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 213.181.200.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:bd:b9:41:39:c5:91:73:27:ca:c4:3c:17:79:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 7 16:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8fdd857ef06bcecfb91e01c0169b763ff972bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:5d:f2:3c:a4:1e:0f:11:03:ec:73:99:32:
b9:54:ae:7c:86:f6:f9:8b:7c:24:5e:c7:f2:70:c9:
69:d8:27:e7:fa:f2:77:58:51:db:17:5f:e9:5f:bf:
19:dc:85:6d:2e:99:39:a4:9a:61:54:3d:8d:80:74:
a4:ff:7a:ec:16:cf:d8:39:42:da:fa:48:54:08:c9:
72:08:c6:19:69:02:ce:68:c6:67:ff:b3:20:aa:5d:
9d:f0:df:4b:af:f5:a7:5d:70:47:9f:9c:bb:07:1c:
59:d0:cf:60:14:d2:11:ea:01:b6:9b:5c:e7:28:7e:
ec:70:81:0c:88:c6:4e:3d:04:56:ed:ad:5b:78:f2:
9a:fc:38:ad:a2:d2:a6:55:b3:0a:52:5e:ae:9d:6d:
77:85:c0:ec:cf:ba:c6:7b:bb:bc:d8:99:ad:ec:71:
86:e8:c9:22:fd:01:44:b1:7a:82:c4:98:0f:96:a5:
3c:a7:61:49:c4:ba:90:d8:1e:1b:49:48:8c:8b:b3:
46:0b:cc:20:bb:12:86:39:8c:79:0e:ff:15:42:b7:
24:e1:33:8f:d4:85:18:70:64:79:f9:7e:8c:dd:0c:
fc:77:df:74:f5:58:7d:8a:5f:2d:38:f4:95:78:58:
76:73:f4:de:8b:72:c7:72:ff:c1:0f:55:24:ed:0f:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:D8:57:EF:06:BC:EC:FB:91:E0:1C:01:69:B7:63:FF:97:2B:DA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2P3YV-8GvOz7keAcAWm3Y_-XK9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.19.0/24
87.229.54.0/24
213.181.200.0/24
Signature Algorithm: sha256WithRSAEncryption
40:92:2a:5b:80:e1:ef:95:77:12:c5:02:20:01:2e:49:55:2b:
04:14:7f:d7:94:bc:30:5c:10:bb:ff:e5:a6:ce:29:9b:3c:75:
42:51:e8:9d:37:ce:b8:e3:a7:4a:7b:d1:d7:1a:d9:0c:71:6e:
f6:0f:fe:58:77:71:7a:4c:d1:d3:3a:4d:24:6a:0b:17:33:6c:
28:57:8c:90:20:20:70:1d:6c:35:fb:23:3f:ec:33:0f:e2:cd:
96:5b:af:da:55:8e:da:4e:fd:31:6b:be:78:05:c3:1f:1a:ac:
45:fa:2a:61:2d:12:d3:52:5d:3a:f1:e4:de:8e:77:1b:28:f7:
fc:2c:7f:d3:42:62:d6:66:3b:21:20:03:a1:27:b8:4a:2c:a2:
2b:35:69:0c:c9:13:90:d7:7f:b5:05:f4:2c:06:e2:4f:c6:bd:
8b:ce:a5:46:bc:65:fa:86:a6:86:2d:64:2d:f2:ff:06:3c:a7:
bf:29:f4:28:07:1a:5f:9b:2b:7a:8d:89:6d:a7:a7:8a:47:26:
1f:d5:81:34:b8:5b:56:cb:24:b4:16:b5:d3:a2:86:a0:50:9f:
a8:a0:e9:a4:f5:6f:87:f9:3d:2d:6e:bd:69:7e:af:8a:1b:39:
24:1f:51:cc:13:4f:2e:e7:59:6c:0f:83:90:26:3b:ca:fc:ac:
69:a5:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:09 2025 by rpki-client