Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/M7xYsaYf8_mEpSp_Y-518Zl_9w0.roa
File: M7xYsaYf8_mEpSp_Y-518Zl_9w0.roa (raw, json)
Hash identifier: kgnRVDK5LsTrqbHbNsnAqmmVL76DXMzMo5cd/dO734w=
Subject key identifier: 33:BC:58:B1:A6:1F:F3:F9:84:A5:2A:7F:63:EE:75:F1:99:7F:F7:0D
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 0194236981366C578F8DF887736E5BB63B3C
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/M7xYsaYf8_mEpSp_Y-518Zl_9w0.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3225
IP address blocks: 213.132.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:81:36:6c:57:8f:8d:f8:87:73:6e:5b:b6:3b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33bc58b1a61ff3f984a52a7f63ee75f1997ff70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:61:bb:c8:a9:49:a6:34:4c:31:52:2d:e3:
84:e7:3e:7c:95:2e:9f:be:e8:96:c8:65:3d:2f:dd:
2d:20:13:82:cb:36:a9:58:a9:77:0f:14:7a:c2:fc:
d6:d9:88:cc:40:46:d7:fe:e3:49:25:8e:e6:31:8c:
a0:35:fe:91:d5:c8:2b:b1:7b:59:3b:fd:d5:04:8a:
48:40:20:a5:1a:b7:bc:2c:27:8b:58:75:4e:b9:d4:
ff:32:12:3a:62:14:90:3f:91:8f:2d:18:16:1e:dd:
e4:2f:06:82:da:9a:d1:5d:79:27:ba:45:de:51:29:
05:3d:f7:a9:7e:c8:25:2b:6c:7d:47:3b:d5:f3:e4:
7b:27:9c:24:cf:cf:ea:04:6d:f6:1d:a9:6e:89:da:
27:29:9c:5f:24:c2:b8:6c:2a:74:6e:05:3a:07:10:
b3:07:d2:2d:5a:0d:7e:24:78:bd:a2:d6:f2:ae:63:
32:09:cf:dd:76:b1:3a:3c:76:f7:5b:98:61:89:f8:
12:93:70:01:eb:8b:5a:42:17:1a:52:83:70:06:c6:
a3:53:13:a6:89:82:43:5a:12:57:60:1c:09:50:d4:
28:9b:58:d2:90:46:bd:4f:59:29:7c:6a:17:ef:30:
1f:18:0e:69:4e:8c:26:7e:fe:75:f8:9e:c6:14:06:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:58:B1:A6:1F:F3:F9:84:A5:2A:7F:63:EE:75:F1:99:7F:F7:0D
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/M7xYsaYf8_mEpSp_Y-518Zl_9w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.251.0/24
Signature Algorithm: sha256WithRSAEncryption
19:35:14:c3:95:3d:2d:7a:f5:c0:16:74:ae:93:9e:6a:9c:8f:
4a:58:6b:60:70:1b:09:56:5a:8d:b2:78:4a:d5:3e:d1:ee:2e:
6d:01:8d:4f:a2:05:a6:9e:c9:32:6f:7f:69:cc:a0:33:91:8e:
2c:84:54:d4:df:61:ec:bb:ca:e2:99:47:f8:91:2c:4d:e8:76:
34:60:00:d3:af:a3:a8:6e:70:dc:e1:67:7d:2d:46:05:69:36:
3e:ca:79:7a:4c:f1:17:09:d7:d1:9b:d4:48:6c:a9:e7:f3:8d:
a5:42:f9:ff:e0:c7:bf:cd:b4:89:aa:76:26:79:09:87:5f:9c:
38:e2:72:fa:10:ce:81:f6:e7:aa:e3:d3:3f:6c:0c:46:9d:48:
6b:f2:4d:da:e2:cc:29:dd:68:bb:d5:f5:be:75:99:f1:6f:c7:
9b:d7:28:5b:4f:3f:43:18:c0:f4:0e:4c:8a:c2:eb:71:ad:85:
71:85:74:27:99:cf:dd:46:65:5f:28:b4:48:ba:36:44:f1:12:
8c:7a:04:e6:be:e0:d4:8d:b2:fe:57:dd:0c:e6:7a:15:2a:38:
99:d1:70:5e:b6:46:08:3c:e0:1c:41:85:31:15:14:2d:30:78:
57:74:d8:fa:d4:0a:20:87:c3:73:ae:9f:34:ee:a7:76:31:44:
32:fc:38:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaYE2bFePjfiHc25btjs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh
MDRiM2QwHhcNMjUwMTAxMTk0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2JjNThiMWE2MWZmM2Y5ODRhNTJhN2Y2M2VlNzVmMTk5N2ZmNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcJhu8ipSaY0TDFSLeOE5z58lS6f
vuiWyGU9L90tIBOCyzapWKl3DxR6wvzW2YjMQEbX/uNJJY7mMYygNf6R1cgrsXtZ
O/3VBIpIQCClGre8LCeLWHVOudT/MhI6YhSQP5GPLRgWHt3kLwaC2prRXXknukXe
USkFPfepfsglK2x9RzvV8+R7J5wkz8/qBG32HaluidonKZxfJMK4bCp0bgU6BxCz
B9ItWg1+JHi9otbyrmMyCc/ddrE6PHb3W5hhifgSk3AB64taQhcaUoNwBsajUxOm
iYJDWhJXYBwJUNQom1jSkEa9T1kpfGoX7zAfGA5pTowmfv51+J7GFAYlsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDO8WLGmH/P5hKUqf2PudfGZf/cNMB8GA1UdIwQY
MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt
MjhkYTZhMWJhMTI4LzEvTTd4WXNhWWY4X21FcFNwX1ktNTE4WmxfOXcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4
LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YT7MA0G
CSqGSIb3DQEBCwUAA4IBAQAZNRTDlT0tevXAFnSuk55qnI9KWGtgcBsJVlqNsnhK
1T7R7i5tAY1PogWmnskyb39pzKAzkY4shFTU32Hsu8rimUf4kSxN6HY0YADTr6Oo
bnDc4Wd9LUYFaTY+ynl6TPEXCdfRm9RIbKnn842lQvn/4Me/zbSJqnYmeQmHX5w4
4nL6EM6B9ueq49M/bAxGnUhr8k3a4swp3Wi71fW+dZnxb8eb1yhbTz9DGMD0DkyK
wutxrYVxhXQnmc/dRmVfKLRIujZE8RKMegTmvuDUjbL+V90M5noVKjiZ0XBetkYI
POAcQYUxFRQtMHhXdNj61Aogh8Nzrp807qd2MUQy/DjT
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:06 2025 by rpki-client