Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/F6JCJHWNmAP2LWubFGF0kgcQllw.roa
File: F6JCJHWNmAP2LWubFGF0kgcQllw.roa (raw, json)
Hash identifier: 3vjfM2DsoeGWBaOxcOevxDfnWvJicHthaNg8MS17hIM=
Subject key identifier: 17:A2:42:24:75:8D:98:03:F6:2D:6B:9B:14:61:74:92:07:10:96:5C
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0195609FCC47DC026D36F5F9FEB36A2F817B
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/F6JCJHWNmAP2LWubFGF0kgcQllw.roa
Signing time: Tue 04 Mar 2025 10:07:20 +0000
ROA not before: Tue 04 Mar 2025 10:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 213.137.93.0/24 maxlen: 24
213.137.94.0/24 maxlen: 24
213.137.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:9f:cc:47:dc:02:6d:36:f5:f9:fe:b3:6a:2f:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Mar 4 10:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17a24224758d9803f62d6b9b146174920710965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:8c:af:87:03:73:75:2a:b0:20:94:62:e2:
61:cc:f3:56:a1:de:e0:60:d2:e2:ba:43:b1:ae:10:
e7:ee:5b:ad:e8:8a:88:0b:eb:b1:94:32:33:27:da:
a6:51:34:75:8a:62:c6:14:70:b9:cf:89:51:ce:19:
72:64:95:e2:c0:47:99:fa:28:29:a6:0b:e7:71:4f:
3a:ba:21:76:af:0e:d0:c9:c1:30:40:a5:9e:8f:df:
2e:ea:d6:d2:ec:2e:72:98:c3:01:51:17:1c:b4:5a:
3b:18:5e:f0:40:58:cb:ba:ce:5b:19:db:5d:66:7d:
e2:22:c6:4f:6a:42:53:dd:1f:8d:f1:ea:2d:99:78:
e8:f7:8d:82:7c:27:c8:a3:56:ed:11:a5:0d:ba:b9:
db:71:ce:7d:c0:66:3a:b6:4e:ee:d6:65:15:0d:1b:
96:14:4a:17:20:5d:28:bc:2e:4a:e3:df:38:65:e3:
a7:da:cb:9d:c7:c7:12:79:bc:72:e5:c5:6f:7a:5d:
60:13:cb:e6:71:99:79:2c:49:25:12:67:ac:e9:05:
68:1c:c9:b1:38:0f:e5:8e:f0:4c:13:ed:61:62:da:
db:06:59:e1:5d:86:47:3f:04:d0:46:86:18:c0:d7:
67:ef:11:47:90:21:6a:9a:cb:16:75:ff:bb:63:00:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:42:24:75:8D:98:03:F6:2D:6B:9B:14:61:74:92:07:10:96:5C
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/F6JCJHWNmAP2LWubFGF0kgcQllw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.93.0-213.137.95.255
Signature Algorithm: sha256WithRSAEncryption
78:72:06:f5:c0:35:ce:2b:38:7b:cc:bb:e5:6a:42:b8:99:33:
b4:26:00:b1:82:dc:a7:d7:4f:18:a9:c1:7a:3f:5f:98:f1:6f:
0d:79:0b:42:9d:7c:e1:5f:2f:b1:c6:41:bc:10:74:fc:ba:e5:
46:9c:12:c2:86:a7:9a:56:a6:60:be:a4:3e:b7:aa:60:77:aa:
29:d5:b7:80:e8:97:9b:8c:d0:a1:6c:89:17:ce:14:39:51:f2:
3b:85:3c:6b:08:a5:9e:20:80:4e:e7:fb:58:61:21:d5:e5:e6:
42:3a:8e:58:bf:d1:b6:3b:7c:62:85:f6:4b:ad:47:ab:78:d1:
1f:9e:0f:5a:1a:14:91:9a:93:e8:6e:32:c8:47:99:dd:a5:31:
5d:21:d5:77:eb:06:a5:64:91:89:d5:bb:59:e0:86:58:20:cd:
0b:f6:a3:1a:7d:fa:ae:05:10:75:42:5c:4a:50:19:57:94:17:
f4:33:9c:90:e1:c0:60:54:66:b5:2c:ee:8b:c8:21:42:69:16:
28:8d:a0:d7:84:eb:9d:61:60:d7:3c:ef:36:ae:dd:52:f8:f3:
a6:a5:6b:ed:d0:55:5d:20:00:c8:de:6b:80:9c:04:4b:c0:97:
0f:fe:b4:f5:8e:61:95:c6:ea:76:e1:80:a7:e5:ec:63:e9:81:
9c:5b:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:42:05 2025 by rpki-client