Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/bijRliPCnbFotmMqItnp-5jqXj4.roa
File: bijRliPCnbFotmMqItnp-5jqXj4.roa (raw, json)
Hash identifier: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=
Subject key identifier: 6E:28:D1:96:23:C2:9D:B1:68:B6:63:2A:22:D9:E9:FB:98:EA:5E:3E
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 0194206840AC824516DA5D1C2B7E67C32D38
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/bijRliPCnbFotmMqItnp-5jqXj4.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 213.148.64.0/24 maxlen: 24
213.148.65.0/24 maxlen: 24
213.148.66.0/24 maxlen: 24
213.148.67.0/24 maxlen: 24
213.148.68.0/24 maxlen: 24
213.148.69.0/24 maxlen: 24
213.148.70.0/24 maxlen: 24
213.148.71.0/24 maxlen: 24
213.148.72.0/24 maxlen: 24
213.148.73.0/24 maxlen: 24
213.148.74.0/24 maxlen: 24
213.148.75.0/24 maxlen: 24
213.148.76.0/24 maxlen: 24
213.148.77.0/24 maxlen: 24
213.148.78.0/24 maxlen: 24
213.148.79.0/24 maxlen: 24
213.148.80.0/24 maxlen: 24
213.148.81.0/24 maxlen: 24
213.148.82.0/24 maxlen: 24
213.148.83.0/24 maxlen: 24
213.148.84.0/24 maxlen: 24
213.148.85.0/24 maxlen: 24
213.148.86.0/24 maxlen: 24
213.148.87.0/24 maxlen: 24
213.148.88.0/24 maxlen: 24
213.148.89.0/24 maxlen: 24
213.148.90.0/24 maxlen: 24
213.148.91.0/24 maxlen: 24
213.148.92.0/24 maxlen: 24
213.148.93.0/24 maxlen: 24
213.148.94.0/24 maxlen: 24
213.148.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:40:ac:82:45:16:da:5d:1c:2b:7e:67:c3:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e28d19623c29db168b6632a22d9e9fb98ea5e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:cd:39:65:e4:5a:d0:e9:c5:0d:16:47:4f:
da:2b:5b:8e:0e:c6:60:91:1b:ce:ea:29:c4:b5:c4:
fc:60:4a:ca:dd:04:e0:9d:31:d8:f4:b7:d5:61:aa:
80:c1:e9:bf:af:ed:c8:54:74:39:6d:4e:9b:1e:c4:
c4:13:e1:da:0a:08:09:f6:e2:88:11:00:58:84:15:
b9:3d:c3:8f:a4:ba:f2:73:83:cd:09:68:c2:a7:9b:
f4:8b:f5:15:e2:4c:e0:da:7c:e8:b5:b5:7d:2d:34:
69:e6:4d:94:3b:5b:c4:84:17:af:cc:23:70:3c:58:
7c:93:e5:dc:1b:db:89:5f:87:71:16:eb:69:54:9f:
53:33:a9:12:ab:2f:e3:14:1c:9b:8a:3e:a1:13:fd:
cc:7b:f8:cb:23:87:bf:87:98:94:02:49:e5:e2:1b:
a3:7f:e9:ea:60:2d:6c:45:32:ba:8e:63:3c:56:29:
bb:52:5e:8e:5c:8f:50:de:8b:89:77:fc:61:c0:ba:
aa:42:6b:05:17:e9:92:03:7f:61:28:5b:4c:a7:05:
10:56:75:25:6e:8d:2e:f5:b3:6f:95:8d:0e:b0:5f:
54:96:ac:a2:88:7f:a7:ba:14:c2:67:37:73:4c:06:
c1:24:e0:34:74:bb:4b:fb:d4:8d:76:78:bd:64:6c:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:D1:96:23:C2:9D:B1:68:B6:63:2A:22:D9:E9:FB:98:EA:5E:3E
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/bijRliPCnbFotmMqItnp-5jqXj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.64.0/19
Signature Algorithm: sha256WithRSAEncryption
44:0e:b7:64:e7:98:d5:e2:8e:a3:ea:50:74:1e:c7:4b:f6:e4:
df:06:94:e0:84:8f:07:93:c4:0b:df:d1:f0:73:04:45:e9:60:
28:f8:8a:89:1d:ed:74:76:ed:b4:f5:97:54:dc:03:4a:75:32:
3d:ad:49:2e:03:c3:71:82:38:7f:31:a9:ed:19:2c:66:b6:52:
67:2d:64:64:54:23:4e:a6:78:5e:fe:1b:f8:3d:ba:09:63:00:
f0:06:3f:e1:2b:de:46:93:2b:69:c7:b7:99:94:f7:e6:12:13:
1e:b4:de:57:dd:64:6a:2b:ba:82:71:2c:bd:98:c4:f6:28:f8:
c7:73:17:b8:ba:a8:a1:ec:d6:8b:a0:1d:e4:e6:72:2c:f3:d7:
5d:e4:ba:f8:00:95:d3:14:57:8d:25:21:7c:4f:44:d1:5a:ad:
d6:a0:29:e5:b9:18:b8:cd:da:65:8f:7d:28:4b:e8:a1:f4:63:
a0:46:c7:e5:11:41:97:d2:22:5d:23:e1:73:84:4a:38:5b:b3:
cf:a5:dd:fa:22:5b:66:ed:97:5f:58:2b:b5:72:d1:13:43:71:
e3:16:4d:c3:e2:dd:67:dd:65:86:b8:bd:a4:9e:65:f1:da:3c:
e7:fb:37:15:e8:82:31:3b:c5:d9:7b:19:00:58:2f:84:0e:f0:
8f:09:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:50:37 2025 by rpki-client