Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ffwYxVjqe8VGrQysX6_j_SSWpsw.roa
File: ffwYxVjqe8VGrQysX6_j_SSWpsw.roa (raw, json)
Hash identifier: drsEWKp+fno5D5JECGXPiTSopE0JkU+B49GvCx6Q+rw=
Subject key identifier: 7D:FC:18:C5:58:EA:7B:C5:46:AD:0C:AC:5F:AF:E3:FD:24:96:A6:CC
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019119B89C809382828C58EBA63847763FE5
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ffwYxVjqe8VGrQysX6_j_SSWpsw.roa
Signing time: Sat 03 Aug 2024 19:30:14 +0000
ROA not before: Sat 03 Aug 2024 19:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 213.137.82.0/24 maxlen: 24
213.137.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:19:b8:9c:80:93:82:82:8c:58:eb:a6:38:47:76:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 3 19:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dfc18c558ea7bc546ad0cac5fafe3fd2496a6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:9b:ce:e8:2d:b0:52:93:f5:9d:c0:b8:6b:
59:e1:06:1f:12:08:34:9d:8b:98:33:f5:e1:12:67:
62:63:60:5b:e0:81:cd:cd:7e:c8:96:6a:3b:3c:fe:
e2:5a:6f:1e:26:59:27:27:45:90:3d:69:21:77:a9:
87:af:af:bd:67:7a:9b:84:5e:41:f7:29:e7:b2:7e:
71:a6:71:5d:b4:d4:76:45:1a:12:5e:44:e8:66:9d:
47:60:1a:6e:58:47:a7:63:50:e1:b8:3c:29:b6:1e:
3b:59:3c:60:c2:88:30:fd:c7:9b:92:c3:1a:94:92:
5d:d9:de:b5:dc:c8:76:43:bb:15:98:f5:f7:17:45:
0d:74:0d:1c:89:20:33:e9:b0:b4:99:a3:61:80:12:
81:6c:7e:28:e3:29:e8:6f:7f:2e:8d:f1:17:33:36:
5a:76:8b:b0:77:e6:2b:45:a5:6a:04:5e:d4:a7:11:
8a:6c:ce:22:77:06:87:d7:a8:5e:83:75:a3:16:9d:
81:95:7e:93:c7:9b:cb:c6:12:04:cd:4f:07:7e:42:
b8:28:b6:6d:51:8a:5c:44:09:1b:11:f7:ac:cc:36:
ee:88:a1:40:2d:0d:2a:94:6d:9c:75:5a:45:b1:d9:
0d:60:fc:47:22:08:87:ef:ac:67:8f:38:88:81:77:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FC:18:C5:58:EA:7B:C5:46:AD:0C:AC:5F:AF:E3:FD:24:96:A6:CC
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ffwYxVjqe8VGrQysX6_j_SSWpsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.82.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:74:b2:c6:d6:54:5a:3f:99:f2:e7:0f:8c:32:e8:82:c1:e8:
ed:fc:ec:59:ea:e7:4b:96:ca:19:11:8e:7c:f4:22:2c:5a:97:
12:a7:a4:7e:ab:2e:70:05:1f:c9:88:30:ae:7a:f7:b3:c9:04:
43:99:79:b4:26:cd:09:45:69:00:50:16:e1:a3:de:33:2f:f7:
79:1e:b0:b5:dd:41:c4:12:eb:bd:6e:37:eb:6e:0b:6c:8b:7f:
d6:1e:63:81:02:11:0d:71:97:26:34:d3:d7:ff:80:1d:85:74:
1e:93:f5:b6:c0:66:94:4f:41:80:5d:fb:61:1d:8f:34:f5:d8:
e6:4f:ed:4b:03:0d:93:3a:07:04:e3:2b:9e:ce:2e:89:06:42:
79:df:dc:db:91:b5:1b:96:97:ff:53:dc:ec:63:01:33:3c:19:
af:bc:91:43:2f:25:9f:b8:10:f0:8a:5f:69:ce:40:79:f0:93:
9f:7e:c2:43:39:f8:bc:25:36:74:2b:96:56:aa:ac:9a:06:68:
14:30:8a:db:86:02:46:94:d3:c0:a2:ff:ff:44:ce:22:1b:37:
1e:86:f9:cd:39:56:95:35:e3:b0:e6:78:ba:02:7f:7a:39:fe:
9a:d5:8a:68:22:c3:26:1e:55:ba:84:25:73:1a:c9:ff:97:11:
fd:95:ae:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEZuJyAk4KCjFjrpjhHdj/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjQwODAzMTkzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGZjMThjNTU4ZWE3YmM1NDZhZDBjYWM1ZmFmZTNmZDI0OTZhNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4ubzugtsFKT9Z3AuGtZ4QYfEgg0
nYuYM/XhEmdiY2Bb4IHNzX7Ilmo7PP7iWm8eJlknJ0WQPWkhd6mHr6+9Z3qbhF5B
9ynnsn5xpnFdtNR2RRoSXkToZp1HYBpuWEenY1DhuDwpth47WTxgwogw/cebksMa
lJJd2d613Mh2Q7sVmPX3F0UNdA0ciSAz6bC0maNhgBKBbH4o4ynob38ujfEXMzZa
douwd+YrRaVqBF7UpxGKbM4idwaH16heg3WjFp2BlX6Tx5vLxhIEzU8HfkK4KLZt
UYpcRAkbEfeszDbuiKFALQ0qlG2cdVpFsdkNYPxHIgiH76xnjziIgXcpnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH38GMVY6nvFRq0MrF+v4/0klqbMMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvZmZ3WXhWanFlOFZHclF5c1g2X2pfU1NXcHN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1YlSMA0G
CSqGSIb3DQEBCwUAA4IBAQAddLLG1lRaP5ny5w+MMuiCwejt/OxZ6udLlsoZEY58
9CIsWpcSp6R+qy5wBR/JiDCuevezyQRDmXm0Js0JRWkAUBbho94zL/d5HrC13UHE
Euu9bjfrbgtsi3/WHmOBAhENcZcmNNPX/4AdhXQek/W2wGaUT0GAXfthHY809djm
T+1LAw2TOgcE4yuezi6JBkJ539zbkbUblpf/U9zsYwEzPBmvvJFDLyWfuBDwil9p
zkB58JOffsJDOfi8JTZ0K5ZWqqyaBmgUMIrbhgJGlNPAov//RM4iGzcehvnNOVaV
NeOw5ni6An96Of6a1YpoIsMmHlW6hCVzGsn/lxH9la5N
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:12 2025 by rpki-client