Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/9njdN6wFQUVuaLbOLXOmcWhn-a0.roa
File: 9njdN6wFQUVuaLbOLXOmcWhn-a0.roa (raw, json)
Hash identifier: inK9zy8rX263vMwaOOmEV+r0bTujKJTym53E8Eif+Jc=
Subject key identifier: F6:78:DD:37:AC:05:41:45:6E:68:B6:CE:2D:73:A6:71:68:67:F9:AD
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0194258FA0DD667F42CA6430B10DF601A3BD
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/9njdN6wFQUVuaLbOLXOmcWhn-a0.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47817
IP address blocks: 213.195.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a0:dd:66:7f:42:ca:64:30:b1:0d:f6:01:a3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f678dd37ac0541456e68b6ce2d73a6716867f9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:71:dd:5b:7f:ad:f7:8e:49:9f:09:b7:b5:
53:dd:a8:29:31:09:75:f6:f9:18:07:da:0a:44:ca:
47:ea:98:bb:fc:ae:d9:b0:c5:ed:65:77:e6:10:c8:
ab:df:c0:dc:1a:0c:4c:3c:ff:ac:99:84:5f:8b:fb:
45:58:51:fd:ff:c7:3c:1c:4d:93:31:51:ec:95:48:
c2:7f:21:6c:37:3c:48:5e:39:b6:78:50:8d:c2:cf:
85:e1:2d:d9:a7:03:03:0e:11:5d:47:3b:90:6f:45:
bf:21:c7:06:3c:5d:b8:bf:a4:89:05:a3:3f:42:c5:
8e:35:4a:45:f2:a8:51:0e:45:e1:6d:37:38:43:9b:
28:84:d7:13:4e:df:82:9f:67:6a:a0:2a:52:5d:ba:
7a:4e:40:06:01:ca:24:93:8f:45:b2:7d:38:62:93:
66:0b:d9:f4:ed:c0:64:62:d3:d1:a3:2a:33:b1:db:
1e:07:d2:43:20:80:23:4a:53:a1:a0:c3:26:37:a3:
e9:d5:bf:81:28:93:d1:fa:bc:37:81:1c:6e:5d:45:
42:ae:c8:85:7d:0f:84:b4:e7:07:b2:fa:ca:b0:6a:
82:c1:6f:4d:52:cc:f0:f9:64:90:93:f4:14:2c:e6:
ec:22:f7:4c:ea:69:5f:8f:cb:db:31:47:a2:db:86:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:78:DD:37:AC:05:41:45:6E:68:B6:CE:2D:73:A6:71:68:67:F9:AD
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/9njdN6wFQUVuaLbOLXOmcWhn-a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1d:3a:ad:4e:d4:44:3e:9e:7a:cb:c3:46:65:c5:d8:50:fd:
0a:84:ad:e9:99:ac:cf:76:af:ae:7e:24:42:00:33:cf:cc:09:
c1:a4:0a:50:c4:d1:e5:fc:3e:14:b9:86:28:7c:d0:1d:f3:ef:
66:ba:bf:86:5c:c4:67:f3:59:bf:55:17:c5:3f:18:19:f9:63:
16:03:d4:00:27:fc:68:8c:67:1c:4f:1b:9c:16:00:25:f7:1d:
40:4b:6a:37:18:f9:13:a1:7f:b4:8d:4f:b0:69:7e:29:a9:35:
7d:fe:13:a4:f2:4c:fb:1b:79:68:34:16:d7:cd:81:86:fb:27:
40:fd:96:4f:ae:a6:d8:07:a2:88:dd:29:b0:82:4f:93:ff:81:
fd:c6:75:57:20:a7:a4:6d:8f:93:05:ae:c0:9f:c7:67:f9:19:
c8:0f:50:3e:e8:81:1a:3e:bb:43:24:ee:0e:25:ba:bc:dc:d7:
f7:7c:19:cb:a5:89:88:80:21:19:4c:d7:3e:de:8c:56:0d:48:
54:5c:72:52:86:18:0f:67:94:3e:44:73:f3:3f:32:0d:46:a0:
45:0b:1b:7f:4c:de:13:c7:4c:68:f8:ff:c5:30:25:9e:d3:47:
0e:ef:88:7e:e7:a5:6d:40:26:1e:f5:02:23:a3:01:a8:fa:98:
e6:05:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:58 2025 by rpki-client