Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xef1sD6H9G7wfZWWmMvhHHwiUDw.roa
File: Xef1sD6H9G7wfZWWmMvhHHwiUDw.roa (raw, json)
Hash identifier: efT4sEVxkSG+qyI5k0YnJBhWu0I0DclE294i3LW0rEw=
Subject key identifier: 5D:E7:F5:B0:3E:87:F4:6E:F0:7D:95:96:98:CB:E1:1C:7C:22:50:3C
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018572BA630B60EB2740FD99019A7B17D1C4
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xef1sD6H9G7wfZWWmMvhHHwiUDw.roa
Signing time: Mon 02 Jan 2023 13:44:55 +0000
ROA not before: Mon 02 Jan 2023 13:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202085
IP address blocks: 213.252.216.0/22 maxlen: 22
213.252.221.0/24 maxlen: 24
213.252.211.0/24 maxlen: 24
213.252.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:63:0b:60:eb:27:40:fd:99:01:9a:7b:17:d1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 13:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5de7f5b03e87f46ef07d959698cbe11c7c22503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:ec:48:3a:81:37:19:e4:b0:0f:8f:4c:0a:
9e:ef:c2:2f:0d:2b:78:21:ab:ae:eb:78:2c:f7:68:
d1:04:58:ee:81:b5:94:83:ff:ff:d9:3c:56:d8:35:
3d:a8:9e:29:d2:69:4e:e0:57:15:3a:59:ef:ac:9d:
df:43:1e:39:da:13:b3:3a:c7:d2:39:fd:37:f5:b1:
80:43:59:76:eb:40:ba:9e:eb:1e:02:1c:c2:9a:56:
ac:a1:b1:9f:5a:49:69:d0:b3:c5:84:5c:fe:ff:8f:
cb:3e:03:08:c6:f7:85:e0:db:9e:36:21:25:c7:fc:
35:a7:19:df:47:a9:c0:7d:ea:46:2e:fc:12:b8:fd:
2e:1b:6c:08:98:3d:6f:c0:9d:a9:b8:1c:8f:3c:22:
16:5e:f4:ac:a9:f0:6d:01:9d:8b:ed:04:0a:74:a5:
f8:14:b9:d4:4e:bd:d9:4d:d5:bd:55:31:fa:8d:d8:
95:4e:5c:7c:ff:84:bd:42:a8:ff:a3:c8:9b:8a:e3:
6a:7b:fd:d3:eb:9d:da:dc:a9:f7:9e:10:10:89:4b:
99:94:d1:59:4c:ff:65:5f:96:30:32:90:0f:28:76:
a4:02:31:63:71:fe:4e:8d:48:5c:51:ee:7c:8f:fa:
a7:0b:0c:bd:f6:61:3f:9d:a5:b1:6e:3d:2f:f1:d0:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:F5:B0:3E:87:F4:6E:F0:7D:95:96:98:CB:E1:1C:7C:22:50:3C
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Xef1sD6H9G7wfZWWmMvhHHwiUDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.211.0-213.252.219.255
213.252.221.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b5:6a:8b:d8:94:4d:57:0e:94:76:4f:e5:47:17:20:98:78:
12:13:8c:de:1a:39:d4:89:8a:79:50:9a:a6:73:9b:b4:60:93:
72:0c:37:b5:59:1c:75:6c:12:b5:27:50:2b:e9:d3:dc:54:d9:
5c:a4:8e:e7:95:36:24:8c:6b:81:8f:5f:d9:7b:9a:ea:08:ae:
dc:34:c8:22:6f:d9:62:d3:9b:32:a6:4d:5d:2c:ed:06:20:ff:
9f:1e:4f:81:ee:8b:c0:93:33:4a:f8:67:03:d4:8a:b5:e5:7e:
84:c8:5a:90:55:51:01:5a:4d:38:61:b6:de:56:dc:8a:20:ab:
b7:a5:bd:53:fe:cf:04:98:1f:4c:13:f7:a6:37:ee:32:0d:44:
79:bd:b9:ab:71:b6:f0:87:85:4e:e5:8f:3d:f3:b5:03:29:24:
69:79:f7:8b:20:7c:1e:3e:71:ae:43:d9:92:3a:e0:2c:e1:5e:
12:c0:9d:89:b2:fe:1f:af:d7:57:df:a1:e2:b3:d4:37:9b:d6:
a7:e6:71:ba:fd:fb:db:cd:07:d3:24:8a:17:ea:6e:e7:42:29:
ec:bd:01:71:9a:1a:a8:a9:fc:1f:a7:c1:78:1b:e7:45:03:50:
1e:5c:1d:fa:f0:69:81:be:83:91:0d:20:12:0c:86:80:b5:ae:
9e:77:cf:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:00 2025 by rpki-client