Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1-_JzNxAO__z6xFJ4Y0AdW7YWt1Q.roa
File: 1-_JzNxAO__z6xFJ4Y0AdW7YWt1Q.roa (raw, json)
Hash identifier: A0K1PhijtAX88MSJ9gwZMPuPgk4oMu55JhyZcLMY0TI=
Subject key identifier: FB:F2:73:37:10:0E:FF:FC:FA:C4:52:78:63:40:1D:5B:B6:16:B7:54
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A277BD1F8D67069FB327A95EEC4ED
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1-_JzNxAO__z6xFJ4Y0AdW7YWt1Q.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31679
IP address blocks: 213.215.82.0/24 maxlen: 24
213.215.83.0/24 maxlen: 24
213.215.84.0/24 maxlen: 24
213.215.85.0/24 maxlen: 24
213.215.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:27:7b:d1:f8:d6:70:69:fb:32:7a:95:ee:c4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf27337100efffcfac4527863401d5bb616b754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:f5:ae:9d:fe:6c:28:e0:52:a1:8e:5f:c9:
e0:fa:d8:70:3f:f7:71:61:e1:b0:24:9b:1d:85:5a:
2b:89:d9:82:2c:fc:04:d1:a6:81:cc:b0:20:1f:9b:
52:db:16:13:ac:26:dd:46:de:fc:56:4a:49:e3:73:
69:c9:2f:3d:46:35:35:b3:70:f7:33:93:08:f9:26:
4b:52:86:c7:42:10:32:1e:ce:19:50:00:07:ee:b9:
5c:21:86:96:e1:9c:05:60:1b:73:a7:9e:9d:af:38:
e7:69:54:df:87:12:e4:b3:15:5e:67:47:8c:32:9a:
ec:af:0b:0c:20:ea:4b:a0:f6:83:7e:12:e7:1e:c2:
b0:bc:91:2a:40:4e:e8:c8:8f:92:9b:99:f5:19:ab:
15:90:61:4d:5f:71:27:f5:9d:be:21:8f:6e:6a:72:
7b:5f:d8:28:76:20:2c:01:99:32:81:4c:3c:e5:61:
bc:5b:05:6a:84:dc:ad:a8:3f:5b:34:49:29:29:e7:
22:ba:fc:35:6f:c7:e2:98:e0:2c:8b:e1:33:b2:49:
e9:40:64:b2:0a:e2:a1:2a:a9:de:cc:83:25:2a:b9:
6d:93:a3:a1:56:4e:8b:57:02:50:89:d6:28:65:4f:
9d:35:f3:22:ef:3a:f4:69:bb:e0:d3:61:34:bf:8a:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:73:37:10:0E:FF:FC:FA:C4:52:78:63:40:1D:5B:B6:16:B7:54
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1-_JzNxAO__z6xFJ4Y0AdW7YWt1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.82.0-213.215.85.255
213.215.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c8:ae:ae:ae:91:f7:85:fa:04:7f:38:d9:8d:82:c7:04:21:
09:ef:16:6a:05:b4:9c:7e:c9:70:52:fc:58:3a:4c:ee:11:4a:
db:62:a6:76:e4:16:78:d6:04:7e:36:40:92:6a:0e:c5:37:d3:
72:12:9d:60:34:df:a9:5d:4f:4b:f1:a9:34:4e:7e:c7:bb:48:
81:ca:8c:3b:a1:98:09:13:92:5c:c7:1c:ec:2d:02:0a:33:1a:
06:af:47:bd:1c:35:3c:a6:da:07:3e:b0:55:17:30:a1:2b:af:
5a:03:5d:56:39:bf:dc:18:b7:52:20:8a:8d:2b:2a:99:82:3a:
09:26:3f:11:22:a6:5a:b2:d4:a2:72:73:8e:71:f5:86:51:71:
83:74:0a:6f:43:78:e1:20:4b:ed:09:40:1a:a5:69:41:ae:e3:
75:54:dc:d8:71:ea:61:aa:0e:f9:4a:1e:86:ac:51:2d:c0:f7:
41:7a:46:95:f9:7d:75:f1:0d:93:8e:a1:c1:8e:97:17:07:ea:
91:9f:f4:f0:a4:6b:a9:d5:8b:9b:12:be:e1:77:e8:93:dc:b6:
e3:db:70:3d:36:5d:4f:f4:dd:08:00:1a:84:3f:8e:0c:33:d8:
97:8d:84:ce:d8:74:8b:90:b3:18:d1:9b:92:7f:9a:d9:a3:c9:
9b:27:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:52 2025 by rpki-client