Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b2dJ9RSLaBaB8MDKQ3jr3a5rsfA.roa
File: b2dJ9RSLaBaB8MDKQ3jr3a5rsfA.roa (raw, json)
Hash identifier: zuFGWvKLmo8H+M9iMmNm4mjHYktPQ7P0HlM4HaZrlyg=
Subject key identifier: 6F:67:49:F5:14:8B:68:16:81:F0:C0:CA:43:78:EB:DD:AE:6B:B1:F0
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D7F603E49FD41314AB09EB3E59E8
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b2dJ9RSLaBaB8MDKQ3jr3a5rsfA.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64433
IP address blocks: 213.108.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d7:f6:03:e4:9f:d4:13:14:ab:09:eb:3e:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f6749f5148b681681f0c0ca4378ebddae6bb1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:07:a2:90:9f:6e:22:9c:d0:78:09:72:85:
52:73:9e:c7:9e:fb:6d:25:18:7e:cb:9d:0c:43:2e:
ff:05:57:a9:63:39:58:db:04:f7:23:30:66:5c:8f:
28:ac:07:7b:8a:69:37:8c:11:20:69:f1:11:40:a5:
23:2d:95:76:54:dd:55:7c:6c:c1:e5:26:2d:e8:bb:
35:73:93:78:2b:50:fc:90:87:56:1d:4b:6f:35:e5:
78:b1:15:86:ee:f5:2c:6a:3b:4e:f3:54:6c:84:55:
c3:25:9c:02:dd:83:5c:ff:a6:3a:a6:54:60:97:bd:
59:ae:54:f1:05:63:e9:8d:aa:2c:b7:b1:ec:c8:b5:
e0:eb:77:ee:6f:ab:65:eb:ec:d8:94:a1:ce:92:bc:
35:c5:39:58:b1:a0:ac:b5:80:1b:a5:c6:93:35:23:
da:1a:a1:1f:97:c7:3b:a2:ef:b5:9f:0d:be:0d:aa:
01:12:c0:0c:67:21:86:6b:bd:e0:09:d5:5d:f8:fc:
1f:7c:ed:67:64:5f:96:4f:c0:d5:0b:46:f8:5c:4a:
83:bb:f3:97:5e:16:fc:24:df:ee:f4:5a:9f:5e:e9:
54:f5:d1:88:b7:a2:59:53:66:1f:64:7c:10:55:23:
f8:24:97:4f:0d:48:35:75:6d:1b:46:94:37:8f:e1:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:49:F5:14:8B:68:16:81:F0:C0:CA:43:78:EB:DD:AE:6B:B1:F0
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/b2dJ9RSLaBaB8MDKQ3jr3a5rsfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:74:37:a5:81:79:5d:90:2d:a6:df:5e:f5:9c:9f:7a:95:63:
23:88:b5:bd:7e:3f:d1:2a:6a:07:e2:3b:ea:e5:a1:4f:13:7f:
56:69:5f:2d:b9:d6:45:95:e0:18:a2:c3:84:98:4c:43:f8:49:
d7:95:dd:2c:d4:1b:3e:36:4d:91:75:12:11:1d:fc:c5:2a:86:
9c:cb:9b:51:3e:17:c4:99:65:fb:92:44:a2:78:d9:60:84:b4:
bf:7e:c2:94:e0:8d:95:71:9c:98:f7:77:04:49:9a:1a:14:9b:
98:24:a8:1a:08:77:88:5e:90:f7:03:f6:e8:a1:84:35:0c:43:
fc:66:6c:2e:29:bc:a8:0c:3f:d6:74:3e:21:c4:e2:ab:27:ee:
1b:a1:de:e8:09:68:ff:e5:1f:ca:7a:a3:a8:3f:85:bd:ad:5e:
eb:50:a8:0c:a0:c7:30:25:b8:ee:f6:25:31:a9:4a:61:49:71:
9b:ac:62:a5:a6:dc:64:70:cc:19:b9:49:d0:82:42:55:07:5a:
be:b6:76:eb:2d:23:42:c7:21:d0:5b:2b:88:10:ff:15:57:5e:
1d:88:e5:4f:09:73:24:08:3b:fd:77:b6:3e:6a:8b:e9:9b:6a:
68:9e:32:47:74:0e:e9:13:1b:9d:4d:b5:25:25:2c:ac:be:35:
ec:84:bf:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1df2A+Sf1BMUqwnrPlnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMTAxMDc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjY3NDlmNTE0OGI2ODE2ODFmMGMwY2E0Mzc4ZWJkZGFlNmJiMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BYHopCfbiKc0HgJcoVSc57Hnvtt
JRh+y50MQy7/BVepYzlY2wT3IzBmXI8orAd7imk3jBEgafERQKUjLZV2VN1VfGzB
5SYt6Ls1c5N4K1D8kIdWHUtvNeV4sRWG7vUsajtO81RshFXDJZwC3YNc/6Y6plRg
l71ZrlTxBWPpjaost7HsyLXg63fub6tl6+zYlKHOkrw1xTlYsaCstYAbpcaTNSPa
GqEfl8c7ou+1nw2+DaoBEsAMZyGGa73gCdVd+PwffO1nZF+WT8DVC0b4XEqDu/OX
Xhb8JN/u9FqfXulU9dGIt6JZU2YfZHwQVSP4JJdPDUg1dW0bRpQ3j+FiIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9nSfUUi2gWgfDAykN4692ua7HwMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvYjJkSjlSU0xhQmFCOE1ES1EzanIzYTVyc2ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1WwHMA0G
CSqGSIb3DQEBCwUAA4IBAQC3dDelgXldkC2m3171nJ96lWMjiLW9fj/RKmoH4jvq
5aFPE39WaV8tudZFleAYosOEmExD+EnXld0s1Bs+Nk2RdRIRHfzFKoacy5tRPhfE
mWX7kkSieNlghLS/fsKU4I2VcZyY93cESZoaFJuYJKgaCHeIXpD3A/booYQ1DEP8
ZmwuKbyoDD/WdD4hxOKrJ+4bod7oCWj/5R/KeqOoP4W9rV7rUKgMoMcwJbju9iUx
qUphSXGbrGKlptxkcMwZuUnQgkJVB1q+tnbrLSNCxyHQWyuIEP8VV14diOVPCXMk
CDv9d7Y+aovpm2ponjJHdA7pExudTbUlJSysvjXshL8B
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:40 2025 by rpki-client