Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-F6HgXg3LQHhgcxuN2ZP32c7BrM.roa
File: 1-F6HgXg3LQHhgcxuN2ZP32c7BrM.roa (raw, json)
Hash identifier: m4PMK45TaoPn4Eoi4Inctzf0qz1IUtuuOIiIUl/Ks0I=
Subject key identifier: F8:5E:87:81:78:37:2D:01:E1:81:CC:6E:37:66:4F:DF:67:3B:06:B3
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0193CF1AD613862F9E01BB67F848CAF4C332
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-F6HgXg3LQHhgcxuN2ZP32c7BrM.roa
Signing time: Mon 16 Dec 2024 10:54:22 +0000
ROA not before: Mon 16 Dec 2024 10:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213710
IP address blocks: 213.18.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:1a:d6:13:86:2f:9e:01:bb:67:f8:48:ca:f4:c3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 16 10:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f85e878178372d01e181cc6e37664fdf673b06b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:e3:c9:9a:34:d0:43:0b:55:0f:1b:ce:68:
57:1e:e1:5d:8d:e8:47:88:c3:52:7a:1c:18:99:36:
7d:bf:4e:74:bd:80:7b:0f:f0:97:9d:9c:45:1e:86:
3f:6d:3e:27:b8:a3:55:7d:a0:be:64:f9:02:85:fb:
91:78:3a:66:d4:ee:b8:cc:90:8a:ef:51:47:fc:b3:
8c:22:f9:dc:83:f5:8f:30:2b:13:96:c5:eb:94:07:
7d:b6:d8:8b:67:f1:1e:94:b4:a7:8c:eb:69:09:f1:
9d:4d:36:b5:9a:d3:51:e9:e8:7e:04:00:e4:b3:14:
ef:6e:0b:38:28:73:2b:f1:eb:91:2b:86:db:c8:bb:
ff:54:12:ee:05:42:c1:20:66:9d:12:5d:b1:8e:64:
77:fe:ec:56:fb:30:5e:3d:b9:a1:91:94:b9:6e:1b:
73:f9:d7:c8:57:67:29:12:21:61:cd:eb:5b:e0:5c:
6b:92:9f:d5:a1:13:f3:f1:18:db:e4:34:45:94:03:
23:97:fa:6b:db:c9:30:b8:97:04:72:d4:36:62:08:
a6:d9:a8:bb:e4:b9:67:87:47:92:e3:9d:22:55:58:
0b:e2:47:3f:62:3a:ba:39:3f:c3:ef:b9:7b:97:7f:
f7:f1:bf:d3:2f:a4:4d:0c:bf:92:ff:dc:d9:2f:c0:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5E:87:81:78:37:2D:01:E1:81:CC:6E:37:66:4F:DF:67:3B:06:B3
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-F6HgXg3LQHhgcxuN2ZP32c7BrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
32:06:99:ec:b4:77:5c:71:8d:ef:e0:b5:0a:13:f3:0d:d2:c0:
a8:70:91:e5:a8:8e:85:b8:01:30:11:25:c6:f0:68:b5:1c:4e:
c6:96:c7:fb:93:a0:9d:34:c6:e3:fa:7a:9e:ca:eb:0d:dd:ce:
dc:c9:c8:1e:6c:00:11:1d:c2:8c:65:ad:87:c9:bb:2c:4f:45:
96:0c:16:2d:62:e9:24:ed:ff:59:e1:b6:18:35:6e:1d:b3:f1:
75:b8:1a:9e:9a:e1:b7:b9:cf:cb:53:09:83:b3:11:5c:e2:35:
6c:d8:b5:54:63:4f:7c:4a:b1:63:cd:df:f6:87:29:34:16:11:
37:7d:3b:23:e5:fd:91:31:2d:d3:90:2e:91:ae:55:a4:3c:7e:
fa:87:9b:f8:ac:a7:8e:13:3c:63:13:bc:34:0c:84:62:75:36:
ad:12:c3:fb:3d:86:7b:49:65:2f:14:5b:7d:6d:f4:b9:38:77:
79:27:0a:ca:8a:3b:71:84:87:6f:d7:00:52:fe:5d:4c:2e:48:
75:ed:9b:40:11:9c:53:63:cd:4b:5f:d8:57:ac:dd:4e:ee:2d:
9b:7f:bf:e6:b3:0f:cf:22:b9:29:be:66:00:3f:cb:27:ed:ec:
85:e8:b2:74:3b:86:9a:0f:c3:b5:e5:7a:b4:cd:98:74:b5:cc:
7d:ce:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:28 2025 by rpki-client