Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa
File: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (raw, json)
Hash identifier: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=
Subject key identifier: 3D:7C:F4:C4:40:94:E9:38:E1:62:AC:62:21:7B:44:3B:95:AD:EB:07
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B427C59F1E1812109DFDB0D382EDD1
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa
Signing time: Thu 02 Jan 2025 15:48:25 +0000
ROA not before: Thu 02 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61272
IP address blocks: 213.252.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:27:c5:9f:1e:18:12:10:9d:fd:b0:d3:82:ed:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d7cf4c44094e938e162ac62217b443b95adeb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:6f:9c:6b:4a:4b:28:02:51:4c:eb:f5:5f:
2d:a1:0b:85:70:a2:d8:b1:97:ec:49:74:5c:a9:a6:
d2:a5:55:74:20:54:4f:cf:72:03:c3:b8:b3:cb:9b:
41:7b:3b:bb:26:22:e4:bd:dc:8c:4e:b9:63:70:0c:
b8:1d:64:e9:75:03:0f:a9:4f:89:df:29:04:c6:bd:
4b:f3:89:42:0a:2e:0f:37:f6:26:0a:c8:2f:71:ed:
60:41:5d:93:02:9e:47:b6:46:83:bd:a0:00:80:64:
95:d4:6f:88:94:03:9d:d2:61:52:f2:ff:60:bd:b7:
1e:0c:b3:45:60:ce:9e:c8:4d:9e:ed:41:f3:2b:c8:
ca:24:2a:ca:7d:d6:9a:43:6d:ab:06:7d:76:88:19:
6a:d8:c4:89:3e:3a:5e:26:06:ae:02:12:67:26:cc:
c7:86:9e:da:63:50:15:8c:9c:0f:9f:0f:cf:34:20:
53:62:18:92:ec:4e:6c:3c:6a:5f:fc:f3:50:00:40:
cc:63:37:52:53:03:9d:2d:79:0f:85:d5:2c:1f:40:
5e:9a:89:00:dc:50:f7:7e:a7:82:07:76:ac:c4:d3:
c2:3e:21:a7:cc:2d:2b:3b:ef:de:04:27:ae:91:a1:
26:72:3b:e4:0f:9c:69:32:45:c7:68:13:3c:d5:61:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:F4:C4:40:94:E9:38:E1:62:AC:62:21:7B:44:3B:95:AD:EB:07
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:d4:7d:ad:64:d9:b3:f9:10:dd:3d:0c:48:73:d4:37:c4:9e:
6a:3e:03:28:70:ba:2e:d6:27:39:cf:0f:1e:34:af:13:4e:df:
49:80:6a:1e:02:3b:97:e3:07:d4:79:df:5b:7b:4c:d9:8b:99:
19:24:c9:f0:90:a4:1a:8c:0d:97:24:63:59:a2:da:0a:03:87:
f3:11:4a:3a:db:e9:b5:ff:e8:9d:f7:6c:e8:ab:5c:65:03:8c:
00:df:d6:35:f1:25:bf:26:dd:df:a8:6c:3a:75:db:fc:20:d6:
de:ef:49:7a:de:f6:bc:cb:1a:a4:a3:5c:2a:aa:2b:ff:eb:ea:
c7:99:d2:e3:e1:03:23:a7:48:5f:60:32:c3:ac:bb:46:e8:2b:
23:49:34:aa:33:ef:9f:e2:f4:25:54:d2:5b:f0:54:9e:cc:8c:
7a:76:d8:55:cc:25:75:70:a2:48:de:42:5f:6c:8c:2f:53:e7:
f7:f8:14:0b:8e:be:c4:b7:fb:07:09:17:98:e8:e5:c5:a3:91:
d4:3f:46:c2:d6:c4:cd:67:2f:ca:5e:d4:46:73:4a:e0:fa:0e:
73:3f:04:2b:03:90:e1:5c:f3:89:c7:16:06:83:3b:27:05:a4:
f7:b7:7a:01:2c:5c:c1:f2:a1:02:03:fc:c2:39:1b:9c:ee:9c:
51:07:24:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntCfFnx4YEhCd/bDTgu3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjUwMTAyMTU0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDdjZjRjNDQwOTRlOTM4ZTE2MmFjNjIyMTdiNDQzYjk1YWRlYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3pvnGtKSygCUUzr9V8toQuFcKLY
sZfsSXRcqabSpVV0IFRPz3IDw7izy5tBezu7JiLkvdyMTrljcAy4HWTpdQMPqU+J
3ykExr1L84lCCi4PN/YmCsgvce1gQV2TAp5HtkaDvaAAgGSV1G+IlAOd0mFS8v9g
vbceDLNFYM6eyE2e7UHzK8jKJCrKfdaaQ22rBn12iBlq2MSJPjpeJgauAhJnJszH
hp7aY1AVjJwPnw/PNCBTYhiS7E5sPGpf/PNQAEDMYzdSUwOdLXkPhdUsH0BemokA
3FD3fqeCB3asxNPCPiGnzC0rO+/eBCeukaEmcjvkD5xpMkXHaBM81WH5rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD189MRAlOk44WKsYiF7RDuVresHMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvUFh6MHhFQ1U2VGpoWXF4aUlYdEVPNVd0NndjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1fz0MA0G
CSqGSIb3DQEBCwUAA4IBAQBr1H2tZNmz+RDdPQxIc9Q3xJ5qPgMocLou1ic5zw8e
NK8TTt9JgGoeAjuX4wfUed9be0zZi5kZJMnwkKQajA2XJGNZotoKA4fzEUo62+m1
/+id92zoq1xlA4wA39Y18SW/Jt3fqGw6ddv8INbe70l63va8yxqko1wqqiv/6+rH
mdLj4QMjp0hfYDLDrLtG6CsjSTSqM++f4vQlVNJb8FSezIx6dthVzCV1cKJI3kJf
bIwvU+f3+BQLjr7Et/sHCReY6OXFo5HUP0bC1sTNZy/KXtRGc0rg+g5zPwQrA5Dh
XPOJxxYGgzsnBaT3t3oBLFzB8qECA/zCORuc7pxRBySr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:17 2025 by rpki-client