Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/2AbxtCHvObdv2WmmGxB_y9VPi8M.roa
File: 2AbxtCHvObdv2WmmGxB_y9VPi8M.roa (raw, json)
Hash identifier: y7FnWbEAcz274SS/XcCh36Fosj3FcGwsr58LGLrKstU=
Subject key identifier: D8:06:F1:B4:21:EF:39:B7:6F:D9:69:A6:1B:10:7F:CB:D5:4F:8B:C3
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01954665F8D7353BC419A2B418A78E19DDE2
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/2AbxtCHvObdv2WmmGxB_y9VPi8M.roa
Signing time: Thu 27 Feb 2025 07:54:02 +0000
ROA not before: Thu 27 Feb 2025 07:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 213.18.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:65:f8:d7:35:3b:c4:19:a2:b4:18:a7:8e:19:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 27 07:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d806f1b421ef39b76fd969a61b107fcbd54f8bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7d:09:05:85:e8:46:c0:5f:6a:c2:d6:d4:11:
70:4f:94:9f:93:45:0f:c6:51:df:d6:e3:f5:4b:9a:
31:ec:1b:43:3c:d1:21:82:e2:b6:89:e0:0a:32:ea:
74:20:31:93:51:f4:0e:98:85:8f:cc:1c:5b:69:7c:
e4:99:5f:32:41:4c:65:b5:2b:59:95:89:a5:92:00:
bd:12:30:c8:4e:d2:8f:79:dd:00:09:93:6e:58:e8:
cc:7b:d0:e3:40:1b:c3:89:8c:ce:a0:d9:eb:33:0f:
12:50:41:4a:3b:2d:8c:da:95:3a:06:3f:55:8a:03:
d1:b3:45:fd:a2:be:39:2c:c2:12:9c:63:21:90:9e:
a5:c6:53:79:c9:42:61:e2:92:a7:2b:0e:75:69:65:
c9:46:43:6d:cd:24:62:80:80:f5:a2:06:e1:d0:13:
78:96:bb:09:3a:2f:38:71:d1:7c:78:7f:a4:87:87:
de:df:ed:56:22:cb:75:ad:a8:d8:55:85:a9:5d:28:
90:a9:16:23:85:5e:cf:fc:70:26:1d:78:ff:1a:53:
d4:c6:48:d4:ee:eb:8a:47:8a:36:3e:73:0b:ed:dc:
ed:8f:6b:18:c8:7d:bc:22:dd:8f:a3:aa:e6:71:5e:
a3:76:a1:cd:31:05:9f:f8:ce:e4:e1:5d:24:bc:fe:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:F1:B4:21:EF:39:B7:6F:D9:69:A6:1B:10:7F:CB:D5:4F:8B:C3
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/2AbxtCHvObdv2WmmGxB_y9VPi8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4a:ab:84:27:4b:49:7a:a0:36:9a:4b:19:d9:05:5d:78:1a:
e0:fd:d8:85:f7:3d:fa:70:60:1e:37:c7:00:1f:d5:2f:01:49:
d6:d3:5c:a2:54:25:9e:9d:00:8f:7e:98:f7:ad:8f:21:15:2f:
af:30:77:b0:53:2e:c7:eb:e7:80:dc:85:ae:f6:bb:d0:26:f0:
15:cd:39:f1:fe:6c:e4:1a:40:05:f6:19:b1:c1:ac:56:40:63:
2c:75:8f:d4:ce:d6:ef:f4:ed:e2:7e:d9:32:aa:f4:07:dc:ed:
42:2a:e7:2f:5d:92:cb:dc:e2:bb:83:75:ef:81:a7:18:ed:59:
ec:5e:13:30:b2:33:57:db:b6:aa:db:2f:b4:a6:79:82:26:d2:
19:be:23:85:4a:9c:c5:8a:d9:ec:2d:6c:a1:5e:33:a9:2d:e9:
ec:ce:81:88:f2:3a:6c:a9:a4:29:43:45:28:0c:44:8d:67:22:
de:4d:5b:60:dc:3b:eb:6f:04:ed:b7:19:d0:0d:20:b4:29:47:
33:52:03:ba:f6:33:c8:6d:e0:0f:c6:5a:a3:33:b7:3a:cb:d4:
e7:f9:d9:8c:3b:15:52:3b:c9:c9:83:69:9a:b3:5d:c8:f9:70:
ac:e4:73:da:4a:de:4e:d5:31:40:21:1c:66:a4:6b:35:83:34:
3b:55:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:48 2025 by rpki-client