Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Jm5QDXClYGAxner1l3ZsoOgpC4w.roa
File: Jm5QDXClYGAxner1l3ZsoOgpC4w.roa (raw, json)
Hash identifier: DQE0LReQuTEGHon07fRHG9FaePnWB/P1l6CA3ldqvZU=
Subject key identifier: 26:6E:50:0D:70:A5:60:60:31:9D:EA:F5:97:76:6C:A0:E8:29:0B:8C
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194734E1CD9CBDD0CBFB3F9FAEC2A3F3CF8
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Jm5QDXClYGAxner1l3ZsoOgpC4w.roa
Signing time: Fri 17 Jan 2025 08:08:06 +0000
ROA not before: Fri 17 Jan 2025 08:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 213.18.245.0/24 maxlen: 24
217.181.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:4e:1c:d9:cb:dd:0c:bf:b3:f9:fa:ec:2a:3f:3c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 17 08:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=266e500d70a56060319deaf597766ca0e8290b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:b5:a2:b4:22:3e:a0:8b:32:8e:4e:a3:cf:
4d:ae:e4:23:2e:e4:0b:03:27:d1:72:b0:39:88:25:
53:1e:56:5b:17:26:7a:2e:c7:d5:f5:7d:7f:73:ff:
13:ba:67:70:5b:84:a2:49:f1:b8:0f:2f:c9:47:f8:
d3:ca:e9:32:d7:ba:c4:b2:4a:fb:8d:cc:59:4d:12:
b6:5d:56:32:68:28:4b:82:28:f0:77:59:34:bf:ae:
ec:d8:9c:e0:0b:21:55:bf:65:3a:82:17:d1:ee:65:
c3:66:7c:ab:69:49:cc:a9:ff:25:f3:a8:5d:76:48:
d4:aa:f6:d1:67:82:92:44:8d:f6:83:a7:85:7e:9e:
25:c4:34:db:3b:d9:4c:68:2f:92:7a:27:74:8c:3c:
fd:5e:c1:2b:b6:d8:83:ce:21:18:8f:34:36:d3:18:
88:e2:f3:25:28:59:97:a2:a1:48:21:37:29:e7:f7:
36:b6:24:b4:f1:c4:48:8a:18:4c:32:0b:ca:1e:13:
38:69:67:2e:16:ba:cf:1f:71:2a:b6:72:19:20:9a:
b1:de:cc:f3:a6:56:34:b7:2e:65:f1:75:ec:24:02:
32:57:81:a1:e3:df:87:07:71:ca:0b:e2:21:11:71:
93:b4:45:2d:4f:33:fb:85:e1:47:1a:df:b1:63:96:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6E:50:0D:70:A5:60:60:31:9D:EA:F5:97:76:6C:A0:E8:29:0B:8C
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Jm5QDXClYGAxner1l3ZsoOgpC4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.245.0/24
217.181.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:f9:1d:1b:88:d3:e9:75:c1:89:75:9c:ff:aa:9a:5b:a5:33:
a5:e1:5b:4f:31:b0:c7:a7:1b:38:30:4e:a5:53:9b:9c:8c:60:
ba:c1:9f:92:15:a0:ea:f0:63:44:4e:ee:f3:ab:74:9f:42:2b:
83:33:de:37:29:dd:10:1a:ca:75:f5:55:c7:46:16:3e:36:be:
db:0b:f8:de:d7:28:4e:47:64:b5:20:ee:0f:c0:e6:96:a7:25:
e8:52:45:d8:55:74:5a:51:62:d2:d5:6e:1d:2f:f8:ee:10:8a:
3c:71:36:d3:dc:27:95:c0:ba:21:a0:d5:26:c4:66:7d:32:7c:
51:50:60:47:ab:6f:e4:2d:fa:05:7e:8a:95:1b:5f:b5:a9:dd:
9a:77:e4:69:d6:e1:4c:19:c0:cd:b3:25:db:44:46:1a:8c:67:
77:cd:73:fa:a2:1d:03:06:82:b2:33:82:e1:16:9a:70:aa:eb:
a9:c5:7f:f2:11:bc:e1:fd:8b:0f:b9:81:80:8f:e5:7c:c0:c6:
d8:93:4e:47:a0:e9:b7:f7:8e:fe:5c:80:da:3d:5f:f6:25:19:
2e:04:2d:ed:52:2c:8e:d6:20:0c:d3:cc:c4:7d:cc:ad:69:91:
cf:1a:fb:5a:b4:b2:d9:16:b9:44:fd:ac:62:6a:5f:f6:65:79:
de:ba:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:40 2025 by rpki-client