Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/XNvY3Sdb0Wi6xPah4ildir3PLsI.roa
File: XNvY3Sdb0Wi6xPah4ildir3PLsI.roa (raw, json)
Hash identifier: r8zrh6wKgiC8K5mQMnGs+P0Ia/CaSvDlIPB7Z6oNXjc=
Subject key identifier: 5C:DB:D8:DD:27:5B:D1:68:BA:C4:F6:A1:E2:29:5D:8A:BD:CF:2E:C2
Certificate issuer: /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial: 01837933E83443C56BDE80F2F011B1D471FB
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/XNvY3Sdb0Wi6xPah4ildir3PLsI.roa
Signing time: Mon 26 Sep 2022 09:49:48 +0000
ROA not before: Mon 26 Sep 2022 09:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210633
IP address blocks: 213.109.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:33:e8:34:43:c5:6b:de:80:f2:f0:11:b1:d4:71:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Validity
Not Before: Sep 26 09:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cdbd8dd275bd168bac4f6a1e2295d8abdcf2ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:43:6c:2b:bd:95:bc:1b:bd:f8:f7:8d:d1:
04:dc:c2:93:51:79:13:59:9a:64:52:7f:7c:8d:72:
b3:2e:5a:8b:a1:ff:2c:f9:cd:b2:05:3a:a6:34:1b:
3a:4e:2d:35:b8:de:68:32:1c:b7:d9:2a:54:da:e3:
71:fe:f9:cd:ec:87:c9:03:32:75:d6:b0:40:2a:b3:
18:0c:b0:dd:52:a9:fc:29:41:8e:62:a0:ad:d0:65:
17:b0:e7:45:2d:dd:7b:ef:17:46:09:2c:19:f6:90:
cc:9f:66:66:a5:95:85:63:18:88:12:9c:bf:ac:c6:
9f:44:36:e8:87:da:dc:0e:bf:b7:eb:ff:99:de:f9:
d9:36:f2:6d:c9:f6:16:37:6c:e9:ce:b7:8f:b4:8a:
ec:55:99:d1:1d:30:29:8c:56:9a:54:d0:58:56:ca:
20:f0:3f:a6:34:eb:64:94:ee:59:6e:f9:3b:a1:39:
28:a2:c1:06:3f:8e:c1:74:5b:16:5e:6b:10:3a:3e:
b1:8b:f7:99:94:a6:fb:7d:0f:46:2e:2d:1e:f0:bc:
30:a3:8f:56:e0:fb:24:57:23:c3:65:03:fd:75:29:
a5:09:a6:32:38:95:65:fc:ec:d7:a9:ce:87:18:6f:
ae:72:d1:0d:76:6a:73:dd:b5:b6:b9:3a:01:0e:78:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DB:D8:DD:27:5B:D1:68:BA:C4:F6:A1:E2:29:5D:8A:BD:CF:2E:C2
X509v3 Authority Key Identifier:
keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/XNvY3Sdb0Wi6xPah4ildir3PLsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4e:a6:d3:a6:2d:84:20:5c:b8:3d:e2:fa:c9:fd:40:cc:6e:
a6:78:53:66:f2:f5:9d:5b:fa:05:1f:cc:31:1c:6f:e0:5e:76:
3f:6e:f8:b6:fc:3c:04:be:b3:b8:90:e0:ef:20:cb:12:7b:fa:
cb:72:94:af:b6:ac:eb:9c:0e:8c:ee:d7:91:45:e3:21:b3:ba:
11:35:ee:3d:73:72:84:e4:60:76:34:53:01:75:c3:f1:ce:a2:
28:a9:06:c5:ba:7d:be:5f:a6:75:ab:be:7d:e0:e9:34:c8:e3:
cd:95:8d:e4:1b:9a:59:46:f9:6e:c9:5c:3d:cc:bf:6d:a7:2c:
77:f5:0e:0e:75:34:02:d6:13:db:fd:15:0f:78:6c:db:4a:6f:
e5:67:56:42:ea:85:8c:f6:32:6b:df:e7:37:ca:34:07:9f:61:
c0:30:c1:94:63:6f:ce:a9:c6:4f:a7:a1:57:2d:66:a0:6c:9e:
09:87:04:35:c9:4c:3b:ea:87:3f:49:a7:a5:66:c4:1a:9e:e7:
60:64:c0:c5:7d:c9:dc:4b:5b:19:49:7b:f5:4d:69:a0:3a:7e:
09:23:fe:bd:38:a3:50:ca:37:64:c0:b1:a8:d6:e3:80:4f:78:
67:91:d9:fe:77:b6:a6:69:21:40:ec:1f:59:dc:7e:1d:77:8c:
f0:8b:80:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN5M+g0Q8Vr3oDy8BGx1HH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmMzODIwZmI2NjUwNTEzNGMyOTJmMmM4ZjRiYWRjZTRl
YjFhYjUwHhcNMjIwOTI2MDk0OTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2RiZDhkZDI3NWJkMTY4YmFjNGY2YTFlMjI5NWQ4YWJkY2YyZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnBDbCu9lbwbvfj3jdEE3MKTUXkT
WZpkUn98jXKzLlqLof8s+c2yBTqmNBs6Ti01uN5oMhy32SpU2uNx/vnN7IfJAzJ1
1rBAKrMYDLDdUqn8KUGOYqCt0GUXsOdFLd177xdGCSwZ9pDMn2ZmpZWFYxiIEpy/
rMafRDboh9rcDr+36/+Z3vnZNvJtyfYWN2zpzrePtIrsVZnRHTApjFaaVNBYVsog
8D+mNOtklO5Zbvk7oTkoosEGP47BdFsWXmsQOj6xi/eZlKb7fQ9GLi0e8Lwwo49W
4PskVyPDZQP9dSmlCaYyOJVl/OzXqc6HGG+uctENdmpz3bW2uToBDnh5QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFzb2N0nW9FousT2oeIpXYq9zy7CMB8GA1UdIwQY
MBaAFBZsOCD7ZlBRNMKS8sj0utzk6xq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm13NElQdG1VRkUwd3BMeXlQUzYzT1RyR3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mYmJhYWItM2RhZi00MmFiLWI0ZjIt
ZjAwNzAyZDI0YmEwLzEvWE52WTNTZGIwV2k2eFBhaDRpbGRpcjNQTHNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9mYmJhYWItM2RhZi00MmFiLWI0ZjItZjAwNzAyZDI0YmEw
LzEvRm13NElQdG1VRkUwd3BMeXlQUzYzT1RyR3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W3GMA0G
CSqGSIb3DQEBCwUAA4IBAQAOTqbTpi2EIFy4PeL6yf1AzG6meFNm8vWdW/oFH8wx
HG/gXnY/bvi2/DwEvrO4kODvIMsSe/rLcpSvtqzrnA6M7teRReMhs7oRNe49c3KE
5GB2NFMBdcPxzqIoqQbFun2+X6Z1q7594Ok0yOPNlY3kG5pZRvluyVw9zL9tpyx3
9Q4OdTQC1hPb/RUPeGzbSm/lZ1ZC6oWM9jJr3+c3yjQHn2HAMMGUY2/OqcZPp6FX
LWagbJ4JhwQ1yUw76oc/SaelZsQanudgZMDFfcncS1sZSXv1TWmgOn4JI/69OKNQ
yjdkwLGo1uOAT3hnkdn+d7amaSFA7B9Z3H4dd4zwi4AR
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:18 2025 by rpki-client