Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_pcRw0gjOHEnZrcBGX08ny-Tjdo.roa
File: _pcRw0gjOHEnZrcBGX08ny-Tjdo.roa (raw, json)
Hash identifier: FAPkUs4H802YgU5oLCCgHCNS//aWM367T8M6iJKFosI=
Subject key identifier: FE:97:11:C3:48:23:38:71:27:66:B7:01:19:7D:3C:9F:2F:93:8D:DA
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5DE17992708369260D17D83A9805C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_pcRw0gjOHEnZrcBGX08ny-Tjdo.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213808
IP address blocks: 213.108.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:de:17:99:27:08:36:92:60:d1:7d:83:a9:80:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe9711c3482338712766b701197d3c9f2f938dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e2:3d:dd:3b:43:22:3f:ea:03:d8:65:88:2f:
f8:db:be:27:44:67:d2:c2:75:bf:7f:aa:81:53:04:
e8:81:d4:30:82:53:65:5f:c2:7f:c9:d9:db:81:50:
07:12:6f:ce:6a:23:1a:98:c2:46:e4:16:df:bb:22:
ba:35:ba:0f:d5:f8:b1:f3:2f:7a:ec:22:f0:83:cf:
10:3a:4e:13:f1:cd:23:f9:91:63:25:70:f3:bb:80:
08:63:94:32:03:55:7b:06:1e:0e:6b:c9:ff:8c:76:
f9:52:bc:38:5b:fc:32:a0:e2:62:e7:91:6e:3c:61:
04:1a:f0:59:61:19:8b:4b:1b:c2:f4:98:0a:b6:e8:
58:db:1d:96:9c:f3:06:2d:98:d3:1b:db:29:e8:d3:
00:3c:fd:60:98:86:04:5c:95:a0:8f:5e:76:7a:59:
7c:61:ef:71:df:c8:00:75:0c:f0:ef:29:cf:0b:a2:
9c:b1:11:d2:a1:f5:9a:eb:f7:9b:d6:1f:3d:22:ef:
7c:bc:08:0c:fd:4c:f4:98:91:c1:b6:1f:6d:89:2c:
b4:d9:50:4f:5e:83:a1:41:08:5b:db:ee:6e:47:78:
50:a7:04:7a:1b:d6:be:5a:fc:4e:72:56:17:30:a9:
05:b4:17:a5:fe:7a:0f:4d:34:6e:58:90:e9:18:7d:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:97:11:C3:48:23:38:71:27:66:B7:01:19:7D:3C:9F:2F:93:8D:DA
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_pcRw0gjOHEnZrcBGX08ny-Tjdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:30:5e:7f:3d:04:82:99:2a:90:89:bb:83:49:a7:0c:ff:1b:
29:f2:b0:23:49:e0:2f:8e:b4:ba:e9:b9:df:d6:a3:27:b9:a2:
0c:5b:65:5b:26:dd:c9:bb:2a:0f:6f:a9:f1:5a:c3:41:d7:cd:
28:cb:fe:10:c1:f1:e1:7a:68:22:74:97:78:34:c0:87:3a:57:
92:35:92:dc:8d:df:fe:ce:49:75:08:be:24:12:96:a6:93:26:
e8:38:e0:c5:88:f9:6b:ad:4f:c1:56:9b:3c:f1:1d:71:2c:18:
c5:0d:e1:b3:8c:53:81:ec:2e:71:49:71:ac:2f:14:31:67:7b:
6f:25:62:0b:c8:ee:ff:57:dc:d9:2e:15:40:5c:75:78:66:41:
00:55:6b:68:ef:34:6a:f0:e4:8c:12:83:65:d9:97:df:af:c0:
f0:79:88:f4:aa:70:0a:a6:48:58:0f:1d:82:f4:4d:53:5e:bc:
4b:3d:a1:56:ca:fa:c2:6c:49:0b:50:4c:9d:ae:f4:dc:89:4a:
eb:82:cc:8a:1f:f7:d9:3c:7a:bf:71:f7:48:89:f7:f6:e5:ed:
da:25:ea:06:c1:76:18:1c:51:5f:99:3c:a8:0f:a2:a2:d1:86:
c3:a9:5d:77:fd:b7:74:99:43:83:1d:34:99:91:e2:28:b3:15:
7f:90:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:40 2025 by rpki-client