Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/q-JjYx1P175XqX9M2R7212WmEfE.roa
File: q-JjYx1P175XqX9M2R7212WmEfE.roa (raw, json)
Hash identifier: 5OfWqpzkp8tv7YHR3+1bxCxus2V9XzzpunbvM0qg7bI=
Subject key identifier: AB:E2:63:63:1D:4F:D7:BE:57:A9:7F:4C:D9:1E:F6:D7:65:A6:11:F1
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2A41E10BB6A0C830A06BE67A24C5
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/q-JjYx1P175XqX9M2R7212WmEfE.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34521
IP address blocks: 213.215.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2a:41:e1:0b:b6:a0:c8:30:a0:6b:e6:7a:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abe263631d4fd7be57a97f4cd91ef6d765a611f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:13:3d:ec:d0:2a:90:f1:b7:37:9c:73:22:
b2:87:60:92:ee:44:14:7e:23:40:26:dd:a0:40:f7:
29:bb:50:f1:f2:26:f9:5c:0c:9c:88:8d:d6:d7:24:
c5:29:e7:d6:50:f1:ab:23:0e:e4:2c:cf:b8:87:81:
36:44:4c:cb:00:f4:97:26:ef:92:7d:26:a0:e7:ec:
75:c9:c3:24:4d:8b:89:f0:34:f5:b1:83:47:cf:4d:
81:6a:e2:e7:5a:91:eb:a9:28:5b:38:fb:98:bc:a3:
ef:f1:86:74:ad:15:0c:f1:4f:50:63:76:a6:ed:e2:
86:32:73:0d:b5:04:10:a9:90:f2:85:3f:ce:73:f5:
71:ae:d0:da:58:6b:dc:26:b0:32:12:ea:70:69:d0:
a8:54:9d:c7:0a:c6:d5:0b:b3:75:1a:91:da:9e:df:
d4:4d:6f:31:56:ea:01:9e:f4:4e:12:d1:26:2f:d1:
57:47:25:0f:13:fc:28:12:3e:8d:95:ee:58:31:c0:
e0:9e:9c:2a:94:54:c4:16:c6:f6:61:33:72:c6:bb:
0b:f9:70:4a:51:b6:40:8e:90:6d:4b:52:e6:b8:32:
85:5b:8b:d7:a3:2e:e1:35:b9:87:ba:91:ea:49:90:
f9:5d:cb:5f:db:75:3e:27:54:09:77:44:7c:74:83:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:63:63:1D:4F:D7:BE:57:A9:7F:4C:D9:1E:F6:D7:65:A6:11:F1
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/q-JjYx1P175XqX9M2R7212WmEfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.69.0/24
Signature Algorithm: sha256WithRSAEncryption
66:16:01:52:70:9d:fb:c9:13:7a:fc:f4:59:f2:4d:31:f1:68:
f8:fa:47:38:f6:1c:82:a0:b8:58:a4:e2:77:48:43:d2:e4:47:
c1:25:ab:cd:b0:35:75:73:ca:f8:27:aa:5a:df:ad:8f:4b:7f:
71:a1:02:a8:6d:bc:d3:69:09:08:25:c7:47:a6:da:83:10:3d:
a0:e5:08:ca:a5:3d:b0:40:bc:45:04:fe:d9:48:f5:fd:9c:3a:
b7:8e:c8:2c:08:ac:c8:d9:53:8e:ca:1d:16:28:de:85:68:f6:
4b:ff:e4:f9:13:22:75:6b:08:de:af:79:61:5a:7f:e2:79:2e:
73:7d:95:23:a3:78:41:3d:0b:22:cc:04:42:f6:a3:ff:19:f6:
a6:3c:7e:93:6e:01:63:09:da:64:0e:e8:e6:20:db:f3:c3:3f:
39:8b:d0:d4:3a:8e:5b:55:1f:bf:bd:1d:64:4f:21:59:fa:4f:
a4:76:94:29:91:59:dc:04:27:fe:3d:19:48:70:1c:79:b4:ab:
d5:49:38:38:f4:67:f1:a2:32:e3:2c:f7:b2:07:37:55:b8:41:
d7:3b:ad:d0:58:41:f9:8e:fd:54:e3:fd:2c:1b:25:0c:ac:97:
79:ba:a6:5b:16:a8:9f:98:a2:3c:b3:9a:9e:8a:92:21:71:be:
c8:7a:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:24 2025 by rpki-client