Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/UY4hvm0cVip_kxsyhvVz3v5cphI.roa
File: UY4hvm0cVip_kxsyhvVz3v5cphI.roa (raw, json)
Hash identifier: EX4AoiWIZnkdhYaErfqZvGUFNJV+k58yg8wxmSGV2l8=
Subject key identifier: 51:8E:21:BE:6D:1C:56:2A:7F:93:1B:32:86:F5:73:DE:FE:5C:A6:12
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE8FC57966AAC8FBD7663662BFD5D25A8
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/UY4hvm0cVip_kxsyhvVz3v5cphI.roa
Signing time: Mon 08 Jan 2024 12:11:40 +0000
ROA not before: Mon 08 Jan 2024 12:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28924
IP address blocks: 213.181.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:fc:57:96:6a:ac:8f:bd:76:63:66:2b:fd:5d:25:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 12:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=518e21be6d1c562a7f931b3286f573defe5ca612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:cc:f1:95:52:33:45:0e:46:3f:41:c6:97:
e1:33:0e:49:55:10:ac:08:5e:6f:ee:6f:fd:a4:92:
2e:c1:c0:20:4b:56:e4:71:d1:a3:e8:08:28:0b:6f:
b1:a0:08:db:df:df:9e:ea:f1:20:57:11:fe:e2:79:
ed:b1:40:47:3b:65:7a:23:8f:b5:65:93:5f:4e:c3:
2a:81:fe:0a:01:eb:e6:ed:9a:bf:c5:66:c2:14:95:
10:64:6a:2f:25:ae:c4:8c:33:2f:c2:5f:ee:97:cb:
1d:25:33:a1:d3:47:f2:c6:2a:79:f6:2b:86:cc:2a:
f0:38:7b:88:ec:11:b9:69:06:2c:5c:15:a0:91:2e:
e0:47:f1:aa:34:af:14:f6:42:fa:ba:d4:ac:d1:72:
ca:a0:55:1f:ed:8e:7c:06:d5:bf:7a:a6:29:fd:9b:
d6:19:a3:f4:f2:41:f3:55:6f:44:34:dd:7c:41:ef:
01:e2:3d:31:98:b0:93:71:12:92:c2:45:b5:10:d2:
eb:d2:1d:fc:b4:1e:91:5f:9b:46:4c:31:dc:4c:c6:
f1:21:17:86:e7:ea:f2:34:40:b2:7a:3d:48:01:d1:
f1:84:99:ae:c9:70:6d:ed:e7:5f:b3:2d:3e:ea:5a:
24:ec:29:72:09:26:5f:9d:c7:77:86:ec:e8:e9:45:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:21:BE:6D:1C:56:2A:7F:93:1B:32:86:F5:73:DE:FE:5C:A6:12
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/UY4hvm0cVip_kxsyhvVz3v5cphI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.181.220.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ac:95:94:ad:a5:89:72:64:32:8c:e5:ec:90:6b:a0:47:ba:
3b:36:4e:c2:54:c3:79:3d:32:5d:94:c6:7f:0d:6b:b2:c3:c7:
22:e1:ff:7a:55:f9:c8:6b:cb:12:a0:22:78:b1:6d:82:eb:cb:
74:58:95:cc:ca:85:38:50:8a:00:21:ba:13:7b:bb:2b:bb:10:
44:f3:ee:fa:1e:c4:2c:b6:7f:85:f5:b2:7f:a0:d6:7a:72:61:
47:09:0d:c5:6d:af:0c:c1:55:ea:f1:c2:58:35:ff:a8:af:5c:
df:db:f3:56:e2:d8:15:25:1b:a7:e6:b3:40:0a:2b:c3:9a:b3:
53:f7:4d:d7:b0:9b:bf:d5:2e:13:c6:7a:9c:34:b4:0a:f9:83:
7f:6b:c1:66:a2:4a:4c:84:51:f4:d5:48:11:6d:48:f5:70:ea:
93:c5:42:91:66:4d:b0:33:18:fb:aa:28:81:d2:0a:88:0c:20:
02:a9:9c:74:66:8e:a3:a3:78:13:21:1a:be:54:0b:6d:3a:ad:
88:eb:98:d6:e0:ba:e9:6c:8a:ec:24:fc:eb:67:ff:4a:fd:db:
96:eb:01:54:a8:85:79:ca:db:aa:eb:63:7a:ad:3c:74:41:69:
9a:c0:06:aa:54:cd:4a:98:07:54:82:c3:a6:21:63:68:ff:a9:
7e:62:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:34 2025 by rpki-client