Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/L_qI58UHz7A1G3jr9KMVQdw-N8M.roa
File: L_qI58UHz7A1G3jr9KMVQdw-N8M.roa (raw, json)
Hash identifier: npu1F2Ny91U219oriv3ulczEgxUKtP2Dyq68OCFdu7I=
Subject key identifier: 2F:FA:88:E7:C5:07:CF:B0:35:1B:78:EB:F4:A3:15:41:DC:3E:37:C3
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228D9E7C7680064D972DBC2765FE929C
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/L_qI58UHz7A1G3jr9KMVQdw-N8M.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43331
IP address blocks: 213.14.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9e:7c:76:80:06:4d:97:2d:bc:27:65:fe:92:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ffa88e7c507cfb0351b78ebf4a31541dc3e37c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:10:65:99:14:63:95:cc:68:5e:bc:75:23:
c6:da:c2:ae:c6:71:fd:9f:ad:63:49:64:19:97:c5:
9d:4c:68:4f:8f:f3:52:6b:9a:0d:99:e3:36:b3:ee:
ab:8c:d7:21:79:48:0a:59:20:a0:de:ec:b9:0b:44:
f8:9b:3b:1a:a1:c1:ed:36:1e:91:9e:c5:a5:46:ec:
a9:fe:3c:76:f3:f0:df:91:7e:82:14:b9:e1:b3:fb:
13:2f:92:74:f7:7e:58:fc:e4:28:d1:aa:8f:f2:2d:
c8:02:f8:40:66:45:68:98:69:d4:c0:71:3f:c3:75:
c9:18:e3:b8:cc:49:27:5f:88:d9:1c:a4:05:1b:90:
b8:1e:d4:ae:3d:97:0b:ec:9a:32:60:ee:7b:58:ea:
23:5e:42:c0:d0:04:de:76:64:7f:c1:e5:2c:72:d1:
bd:81:1f:94:fd:f9:81:93:04:38:d8:0d:a0:b2:97:
d7:e1:d3:d8:1e:39:a3:52:e8:8e:a4:46:79:45:95:
f4:c2:c4:30:ae:43:fc:a4:71:70:c0:3c:92:34:93:
c9:3f:f5:a3:9d:03:49:23:9e:5b:08:1c:41:c4:40:
6c:0d:6e:11:0f:54:65:2e:c9:74:ba:23:04:b1:02:
33:b6:5f:b6:3e:59:f7:33:6b:2b:50:40:09:e0:13:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FA:88:E7:C5:07:CF:B0:35:1B:78:EB:F4:A3:15:41:DC:3E:37:C3
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/L_qI58UHz7A1G3jr9KMVQdw-N8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.220.0/24
Signature Algorithm: sha256WithRSAEncryption
15:87:31:11:63:50:d2:19:2b:ac:54:a0:3e:64:bc:ce:ae:3a:
7f:a8:62:a1:15:22:c3:0d:3c:31:58:d4:32:eb:ae:5a:83:47:
fd:41:95:2c:0a:fd:93:c7:e9:33:60:0e:75:06:17:3e:b9:29:
2a:29:c4:e1:50:30:d8:9b:39:7a:68:c8:b4:89:d2:5b:c3:9f:
a5:ee:83:8c:28:2e:cf:a8:c1:ab:4b:e0:2e:9c:6d:d5:d7:2c:
94:b5:f9:88:88:c1:2a:4d:9a:7c:fe:7f:6b:4d:17:7d:44:97:
ed:e4:22:95:b0:99:06:53:37:6f:0b:1f:34:ad:42:f7:ac:2e:
fe:26:a8:d6:3c:d3:bf:4e:10:6f:f5:12:7f:97:df:57:d8:f9:
dc:d2:e9:ad:5f:73:28:a3:da:c8:5d:ae:bb:59:45:47:25:27:
e2:11:b3:3c:89:03:f7:9f:6d:ba:fd:2c:c0:68:d8:a6:e7:91:
1d:09:d0:28:6d:3f:2c:fe:c8:5d:92:3e:56:c8:b7:87:4f:e5:
2c:99:10:ef:bc:7d:49:fc:2a:10:3f:97:e5:12:15:8f:12:a0:
56:2f:e5:e5:a8:63:d6:91:5b:ff:48:12:c8:38:91:db:28:94:
b6:c0:01:f7:41:0d:26:78:31:7e:f0:b7:ba:e1:79:16:dc:95:
cc:31:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:53 2025 by rpki-client