Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Ap8XbmQYSP7-aYdgc2jIt8zLBy8.roa
File: Ap8XbmQYSP7-aYdgc2jIt8zLBy8.roa (raw, json)
Hash identifier: Fow9ojcDIuzJRUnG9tw6wdFceWCsRRUoLvWLNVDsfo8=
Subject key identifier: 02:9F:17:6E:64:18:48:FE:FE:69:87:60:73:68:C8:B7:CC:CB:07:2F
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0193CF1AD59B2F479125D12B6F8274036B5B
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Ap8XbmQYSP7-aYdgc2jIt8zLBy8.roa
Signing time: Mon 16 Dec 2024 10:54:22 +0000
ROA not before: Mon 16 Dec 2024 10:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 213.18.244.0/24 maxlen: 24
213.18.246.0/24 maxlen: 24
213.18.247.0/24 maxlen: 24
217.180.17.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:1a:d5:9b:2f:47:91:25:d1:2b:6f:82:74:03:6b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 16 10:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=029f176e641848fefe6987607368c8b7cccb072f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:88:8b:ad:5b:ee:13:fd:15:2c:08:b9:d8:
9d:2c:57:aa:38:d8:4f:5e:51:91:51:a3:af:0e:c5:
88:fe:e0:e6:c7:8c:ac:b1:b5:61:dd:0e:93:7b:68:
b3:2e:fb:26:e4:d0:13:19:74:75:89:48:72:41:5b:
98:58:92:ac:4d:37:b6:3d:10:02:a6:a3:19:54:1e:
e4:9d:da:8a:f5:7c:fc:b8:60:5d:e0:d8:4f:63:b5:
14:cd:80:f7:c9:1a:b1:81:24:8f:ce:78:0c:6c:d8:
91:c1:2a:3f:57:12:1d:bd:05:cd:e3:7b:8c:76:99:
0f:13:fc:b8:24:c5:68:a0:ea:d0:ba:fe:86:58:85:
f6:0b:00:6a:a7:a5:59:c4:60:4e:a9:08:a4:eb:6b:
99:dc:b3:3f:18:a9:ab:76:25:d5:04:88:29:f7:87:
dd:3f:4e:1d:8b:96:f5:e8:e4:07:5a:f6:47:9d:a1:
7d:dd:b8:e8:e2:c9:73:35:c4:56:4e:48:ef:2c:7b:
00:8d:76:ca:f2:62:d1:7a:44:53:a6:04:ab:4f:00:
2f:01:57:2a:9d:10:14:60:16:1b:17:9d:e6:4e:db:
c6:5a:7d:ca:74:42:b3:38:da:bc:f5:d9:70:c2:19:
74:c4:8c:5f:ba:2d:7a:0e:a4:3f:10:95:53:50:9f:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9F:17:6E:64:18:48:FE:FE:69:87:60:73:68:C8:B7:CC:CB:07:2F
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Ap8XbmQYSP7-aYdgc2jIt8zLBy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.244.0/24
213.18.246.0/23
217.180.17.0/24
217.180.46.0/24
Signature Algorithm: sha256WithRSAEncryption
00:52:4d:74:a8:80:be:fb:61:52:cb:4e:04:0d:01:c4:1e:f8:
69:54:79:c7:fb:f2:56:f2:7b:62:92:62:ad:58:25:83:9f:80:
66:c4:92:47:3f:dc:cf:4a:2a:50:fd:55:0e:08:3b:dc:5c:7c:
6f:4d:3a:bd:25:c1:28:93:92:d3:fd:70:98:d1:cd:d3:99:63:
72:20:d6:07:27:22:e8:ac:fa:21:86:3b:20:41:3c:25:0e:59:
83:95:d3:db:aa:0e:c9:fb:dc:3f:e1:b2:24:a6:92:36:8a:83:
25:ad:34:43:c5:a3:2e:0b:27:cf:38:ae:40:3d:40:31:89:02:
19:eb:65:e7:c0:d1:20:9e:b7:9c:31:c2:0d:a6:fe:78:7e:e6:
d3:9b:fd:21:57:36:2b:c5:f4:bc:1f:49:30:49:2c:69:26:c0:
a5:2d:a6:03:d4:7e:8c:e3:83:de:5b:ec:39:fc:5e:18:86:67:
00:70:12:7d:ad:47:f1:76:66:a0:23:a1:8d:5a:a0:d3:b8:af:
3f:85:fe:c2:52:99:11:cd:2f:0e:16:a4:6b:17:8f:76:5d:f4:
53:ad:65:c5:55:ff:c9:9a:2d:68:14:84:44:1b:0d:1b:b2:17:
e4:2e:cc:04:dd:ce:e4:90:05:e6:ae:52:68:1a:c2:5b:25:93:
e9:80:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:35 2025 by rpki-client