Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZCpy5ZPbMRxdX6mU4OTtsQwJCtc.roa
File: ZCpy5ZPbMRxdX6mU4OTtsQwJCtc.roa (raw, json)
Hash identifier: cAA0zCP85cLkpNhPjvpeveRKx40J/X0mPNAZN4tpGH4=
Subject key identifier: 64:2A:72:E5:93:DB:31:1C:5D:5F:A9:94:E0:E4:ED:B1:0C:09:0A:D7
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0808F6FB
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZCpy5ZPbMRxdX6mU4OTtsQwJCtc.roa
Signing time: Sat 01 Jan 2022 11:54:16 +0000
ROA not before: Sat 01 Jan 2022 11:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202085
IP address blocks: 213.252.216.0/22 maxlen: 22
213.252.221.0/24 maxlen: 24
213.252.211.0/24 maxlen: 24
213.252.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134805243 (0x808f6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 1 11:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=642a72e593db311c5d5fa994e0e4edb10c090ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:eb:ea:03:08:b5:0e:33:50:e7:10:2f:75:
13:33:19:a8:e3:bd:ad:65:bb:44:f7:74:d3:f5:f7:
7a:06:1c:7a:ae:48:0b:9e:65:c3:4c:4e:7b:ae:32:
82:2b:a2:a1:eb:ec:3c:95:e7:ba:06:86:ae:41:c6:
06:42:1b:86:ae:60:70:9a:fb:84:df:35:a3:65:15:
93:0b:7a:e1:31:c9:06:ec:d0:5d:24:79:b1:18:e7:
65:de:64:c9:95:6f:3e:c7:8e:a5:90:12:dd:bf:85:
19:6a:7a:2f:59:3b:f9:94:d9:0d:4e:73:ea:7f:5d:
ce:14:0f:1e:0f:1e:e3:c7:7c:2d:32:a1:2b:bf:3a:
3a:cc:c2:09:4e:0c:fb:17:41:b0:07:b1:5a:d1:c4:
01:d5:d5:6c:8e:5c:dd:13:bb:1b:81:5b:ea:43:d3:
a0:f6:67:f2:43:a1:f1:0f:eb:e5:78:35:e4:fa:4d:
6a:49:44:02:af:ce:da:62:19:d3:8c:06:fc:2d:0a:
c7:af:b7:d6:95:ce:d6:8c:51:10:0a:33:38:9d:6d:
83:21:7e:16:9d:0d:8b:3a:47:9a:1f:ed:aa:0f:0a:
98:2e:b1:a8:73:51:0b:9b:6a:0b:df:27:40:06:4a:
e4:75:37:93:f3:66:aa:0f:5f:ac:91:5a:ec:70:4a:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2A:72:E5:93:DB:31:1C:5D:5F:A9:94:E0:E4:ED:B1:0C:09:0A:D7
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZCpy5ZPbMRxdX6mU4OTtsQwJCtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.211.0-213.252.219.255
213.252.221.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0d:ef:f6:fb:fd:43:2b:35:61:53:21:33:0c:32:ce:14:14:
44:55:1b:a3:e4:79:9f:4c:46:db:d2:6c:56:a7:0a:9e:c6:db:
40:cc:55:b3:96:a9:1b:b8:81:99:81:77:be:48:ed:e7:5d:47:
09:e8:b5:43:65:20:4c:f5:75:ec:47:fa:33:ed:cf:9e:cf:45:
e2:6c:f1:c4:89:2b:05:ce:a8:ff:f2:c9:84:e7:df:cd:54:fd:
ab:52:17:3d:d3:43:d2:50:02:a0:5a:c4:95:ff:4e:be:3f:a2:
e4:72:a2:ef:f4:52:92:d7:04:30:55:4e:36:11:e3:90:0f:a1:
0d:6c:01:13:df:59:58:e2:09:3b:ec:0b:4d:cc:8d:09:10:97:
c1:8b:69:16:2c:35:50:c1:b6:67:89:08:0f:3e:03:35:99:bd:
5a:26:31:9b:16:f2:b2:33:02:4f:a5:fd:14:4a:26:81:1e:c2:
0b:14:4e:16:d6:ca:41:ee:fa:e1:34:5d:24:03:8a:78:17:bd:
93:69:9d:7b:9c:55:91:70:21:cf:e9:a4:1b:2e:90:35:53:58:
b0:79:e2:af:da:4a:6a:05:e1:20:b3:ad:03:d4:9f:12:d3:a3:
f4:11:fd:02:17:2b:80:ef:c8:35:ea:8d:2b:d0:cf:b6:c1:32:
3c:1a:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:52 2025 by rpki-client