Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/6oLkOn5GISwlmdll-14fda6tccc.roa
File: 6oLkOn5GISwlmdll-14fda6tccc.roa (raw, json)
Hash identifier: ILojgs9AB9EfacEErML2swqTZvq6/Rd5+4+/mmEygZs=
Subject key identifier: EA:82:E4:3A:7E:46:21:2C:25:99:D9:65:FB:5E:1F:75:AE:AD:71:C7
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0188715D7D1CC86D927E429F5922747EF670
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/6oLkOn5GISwlmdll-14fda6tccc.roa
Signing time: Wed 31 May 2023 10:32:12 +0000
ROA not before: Wed 31 May 2023 10:32:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 213.137.83.0/24 maxlen: 24
213.137.81.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:5d:7d:1c:c8:6d:92:7e:42:9f:59:22:74:7e:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 31 10:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea82e43a7e46212c2599d965fb5e1f75aead71c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:d3:63:38:ec:f4:50:2f:e1:2a:76:86:6a:
07:10:c6:b6:85:a3:1f:3f:7b:b0:4b:83:e3:e9:98:
f5:29:1b:ae:43:fa:2c:e2:f0:10:e1:a7:35:07:cf:
c2:91:e8:77:de:e6:92:59:32:05:4b:87:24:a0:29:
e2:83:89:1c:83:3c:9c:6d:66:84:3b:c5:ff:e0:13:
20:a8:7b:c1:da:f2:51:c5:bc:32:30:76:4f:bc:78:
48:e1:79:5a:6e:5b:3a:19:31:d0:fb:49:80:87:61:
67:31:44:c0:98:d5:0c:cf:52:51:f2:8e:af:b6:90:
5f:4d:90:0a:ad:8c:26:5c:f0:ec:81:cf:9f:08:f5:
a0:6b:9b:91:72:7d:76:17:45:a9:26:db:29:e9:a9:
28:cf:2b:37:ef:6a:5a:a1:70:c6:a8:1c:e9:d6:4b:
80:25:36:1e:ac:e0:4a:8c:29:07:b0:06:98:d8:c4:
04:8b:47:cd:98:00:6b:21:b6:80:8f:ef:20:c4:0b:
a3:cd:3c:ec:4d:94:f2:e3:a0:37:82:1f:3c:0c:97:
15:0c:6c:a7:bb:b2:06:3a:5e:05:3b:2b:04:ab:7d:
3b:14:ce:47:f1:83:4c:69:df:e3:92:9a:b6:76:1f:
ea:4d:a9:de:16:fc:c0:8a:f1:f5:73:7d:83:d4:e4:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:E4:3A:7E:46:21:2C:25:99:D9:65:FB:5E:1F:75:AE:AD:71:C7
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/6oLkOn5GISwlmdll-14fda6tccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.80.0/23
213.137.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4d:72:83:25:64:e4:4b:83:45:68:c9:1f:19:02:f4:7f:d3:
0a:40:9a:4e:d1:d7:0f:00:b2:f2:6b:50:19:79:1d:b3:a9:dc:
bd:07:62:32:df:bf:42:eb:50:4d:94:71:5c:ec:d6:6e:ed:40:
86:e0:5e:40:dd:fc:fc:7f:db:63:3b:39:0d:df:a6:c7:e5:c4:
c1:e7:dd:df:14:db:49:c9:60:b1:1e:7d:f4:55:d9:2b:0a:2c:
56:23:bc:d2:33:b0:0c:0c:40:20:14:ce:1b:52:d1:81:89:a8:
98:1d:a0:0c:ca:c8:6a:0c:aa:ca:cb:9b:55:70:f5:74:d1:d8:
e2:4d:4b:14:b5:7e:09:6a:f5:72:d5:9f:95:3d:28:95:5a:dc:
b4:e4:dc:09:18:6d:a7:e6:e4:cf:17:a6:33:12:54:98:e9:03:
5f:0c:2e:b9:b9:9d:cb:b0:7f:01:6f:f2:a7:4a:6b:41:15:88:
64:54:6e:6d:60:c5:3c:3a:62:50:43:ca:8c:d6:ef:e4:c8:d6:
59:60:5f:b9:d8:19:b0:5d:76:ee:85:bd:2c:c6:3f:53:ae:a9:
f4:92:3b:ea:80:f3:8a:82:60:6a:ef:7c:29:11:08:0b:99:f6:
4b:69:47:0b:bf:36:b7:94:ec:81:ef:31:5d:38:c4:3d:94:76:
d9:5f:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:46 2025 by rpki-client