Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/xBNBAykD7UjoP2A6ym40DYlnoSc.roa
File: xBNBAykD7UjoP2A6ym40DYlnoSc.roa (raw, json)
Hash identifier: oBy7+mmoXXVFQaYagnQmI+BJwG//i/qwABhTBVrDzYI=
Subject key identifier: C4:13:41:03:29:03:ED:48:E8:3F:60:3A:CA:6E:34:0D:89:67:A1:27
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DAE2240A4FFAED8A3260FE9E9CA8A
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/xBNBAykD7UjoP2A6ym40DYlnoSc.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205935
IP address blocks: 213.14.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ae:22:40:a4:ff:ae:d8:a3:26:0f:e9:e9:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41341032903ed48e83f603aca6e340d8967a127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:5b:47:d6:05:fe:a7:fe:6c:22:5d:35:fa:
68:b8:0b:52:53:61:04:6c:87:33:88:3d:4d:d1:2e:
1f:75:1c:19:9d:fb:e0:70:1a:42:93:07:1c:65:25:
d3:a3:67:da:b8:0c:99:c7:61:d7:e1:3d:a3:76:19:
06:24:d5:80:84:bd:88:d9:73:86:62:4d:f7:d4:89:
16:48:a4:59:8d:bb:9b:24:ad:fb:d5:ad:31:db:86:
41:50:d7:d2:be:0f:05:2e:4d:cf:54:89:4a:98:cd:
bf:84:03:13:a6:1d:af:ed:63:23:2a:59:f8:33:ba:
cd:aa:ab:1b:4b:5c:48:b5:60:34:e1:6c:d6:7e:f9:
2d:11:d5:b1:e0:b7:17:43:30:2c:42:ab:06:b2:9e:
08:87:e7:2b:a4:1c:c5:70:26:c8:0b:47:1f:b7:93:
72:11:e9:98:4d:06:12:40:10:e6:48:98:2c:e8:26:
db:58:26:11:bb:01:db:cb:60:59:80:24:2c:8b:b8:
b5:de:1d:ea:a0:f9:0d:fa:b9:66:0c:31:6d:3e:0f:
d0:57:07:04:61:f9:d4:cc:66:19:96:34:cf:55:09:
3a:28:29:12:65:3d:47:0e:4b:75:0a:5a:ab:4a:6d:
3b:13:8d:b8:8c:46:ec:84:8c:68:d1:36:d0:be:f5:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:41:03:29:03:ED:48:E8:3F:60:3A:CA:6E:34:0D:89:67:A1:27
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/xBNBAykD7UjoP2A6ym40DYlnoSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.244.0/24
Signature Algorithm: sha256WithRSAEncryption
43:54:90:6a:36:1d:a5:70:f1:0b:03:c2:e5:90:4e:3b:c7:e8:
5b:0a:97:8c:ca:53:3c:60:ad:29:80:5f:12:1a:fe:54:76:65:
42:89:5c:b9:bf:a6:68:d8:55:bf:71:f2:e0:8f:73:51:3c:b3:
56:73:8b:33:9f:4d:3c:24:8a:35:d5:49:3f:79:94:a0:37:cc:
3f:d5:46:d8:5e:b2:44:96:75:b8:b3:68:88:2e:da:ec:b1:f2:
b5:de:54:cc:51:80:3e:0b:29:5c:eb:70:75:ba:25:d3:08:d0:
63:36:2a:31:2b:6f:5e:cf:eb:b6:2b:06:f8:e2:2b:ce:a2:a9:
0c:53:98:ba:72:91:a1:5f:b1:ee:b3:1b:78:54:cc:0b:ef:17:
60:e6:c0:ca:92:98:ac:74:82:32:20:63:e8:72:96:55:9e:e4:
e6:a8:7f:0c:96:7b:95:62:29:2e:2c:09:a3:26:a2:8c:8e:54:
8c:e4:04:61:6f:36:aa:73:7e:a6:6d:b9:d4:e2:09:06:30:e4:
33:47:a4:96:c2:33:8b:ae:27:70:0a:a6:52:58:89:00:39:4c:
47:21:f5:2a:f0:40:4b:58:56:90:83:11:fa:2a:84:b6:bf:35:
b8:b3:ae:81:af:ef:47:96:c8:9b:38:94:41:23:29:c6:6f:fa:
c2:de:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:25 2025 by rpki-client