Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-qh5aMUBezSuvH0JjcvUF_iixiE.roa
File: 1-qh5aMUBezSuvH0JjcvUF_iixiE.roa (raw, json)
Hash identifier: GlrbsY82BOldDR14eSATpqLfZI/nsAaS85lrbyJJDNs=
Subject key identifier: FA:A8:79:68:C5:01:7B:34:AE:BC:7D:09:8D:CB:D4:17:F8:A2:C6:21
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019364AD76F8D2F08C31807D53E3CFB51965
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-qh5aMUBezSuvH0JjcvUF_iixiE.roa
Signing time: Mon 25 Nov 2024 18:55:10 +0000
ROA not before: Mon 25 Nov 2024 18:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 213.18.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:ad:76:f8:d2:f0:8c:31:80:7d:53:e3:cf:b5:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Nov 25 18:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa87968c5017b34aebc7d098dcbd417f8a2c621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:60:89:07:4e:d2:01:ec:7d:11:17:71:16:
79:ee:25:82:df:e7:04:10:e7:f5:27:c1:5f:c9:4f:
c5:8e:57:d8:fa:95:1f:13:55:ac:46:e9:e2:a9:23:
c7:07:a2:58:95:83:54:5b:c8:2d:5a:d9:f5:29:bc:
e5:0e:23:c0:0c:fb:3a:ec:5d:a0:4f:fc:16:1b:90:
b9:c8:6e:55:de:5b:66:62:a3:ab:28:26:49:ce:93:
d8:c6:29:68:c6:14:2a:04:25:8f:38:02:d7:a9:5d:
ff:54:5d:5d:a9:25:7d:a1:bd:aa:ab:60:66:c6:c1:
bd:8b:cc:61:b5:30:a0:a0:20:47:06:18:68:e8:b1:
90:07:f0:56:7a:96:98:ff:a3:bf:63:d4:77:40:2e:
dd:58:d5:47:38:e3:1a:c1:10:54:8d:b5:9c:7f:55:
81:94:cf:c7:f0:71:08:6f:a9:4d:67:f8:93:1d:b2:
9c:79:12:95:4c:da:c4:84:1e:b7:77:8e:3f:58:1e:
bd:e2:68:15:0d:f4:7b:ee:bd:a8:58:b0:41:c3:65:
6b:2f:3f:8f:b4:0f:22:10:d6:b3:21:8f:bd:44:94:
1e:13:e9:01:d8:09:ff:a3:d2:78:bc:e3:e1:55:74:
8f:d2:67:b2:f2:63:38:e8:bb:d2:f0:8d:1a:50:8d:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:79:68:C5:01:7B:34:AE:BC:7D:09:8D:CB:D4:17:F8:A2:C6:21
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-qh5aMUBezSuvH0JjcvUF_iixiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.192.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a7:7a:41:df:5f:13:41:3f:7d:d0:2c:dd:95:25:48:51:07:
ba:67:ac:58:e5:25:6e:22:bb:6b:a5:85:84:3d:9b:9e:1c:58:
20:70:37:1f:66:2e:f1:ca:a1:11:26:05:c6:fa:c0:75:31:c1:
af:62:a4:11:a1:c2:72:f9:e5:27:55:9e:ea:fe:3b:93:3f:13:
a8:b9:04:c4:6b:f3:1b:f8:ae:d3:87:93:4b:44:4a:66:07:6d:
6a:00:e6:64:8e:82:41:61:78:ba:18:00:a6:fb:e5:4c:18:3a:
3d:53:04:46:6d:33:0e:c7:38:17:43:2a:47:be:6f:93:92:4f:
e0:0c:90:6f:2c:37:c5:bf:e2:2e:6e:bd:2e:8f:f6:30:9e:20:
5d:d6:cd:56:a1:0d:e4:4f:30:bd:f4:7b:a8:67:0a:a2:b8:02:
f4:dd:ce:ab:1b:c5:8f:61:37:eb:4b:2a:28:27:a4:a9:3b:9e:
b2:ec:1a:33:53:0c:45:6f:c7:f4:da:fb:9c:13:ca:e8:33:5f:
f7:55:6f:ee:7e:05:94:49:11:fc:34:64:b8:b1:c4:9f:bf:3c:
06:09:38:3c:be:39:41:96:04:b6:56:3c:69:74:83:3f:94:f6:
0d:00:16:02:95:7f:de:c0:2b:23:64:5b:b7:95:34:b3:62:b2:
33:07:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:48 2025 by rpki-client