Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/fBpG73zJeQ_heb_qnMqRXRz-v7M.roa
File: fBpG73zJeQ_heb_qnMqRXRz-v7M.roa (raw, json)
Hash identifier: 6zOs2bm9msYWcUmG6JaLTpnyEIKcJY1HYvFaKccE7GE=
Subject key identifier: 7C:1A:46:EF:7C:C9:79:0F:E1:79:BF:EA:9C:CA:91:5D:1C:FE:BF:B3
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019537F16A2756AE33B1B8D86A4A97F14DC9
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/fBpG73zJeQ_heb_qnMqRXRz-v7M.roa
Signing time: Mon 24 Feb 2025 12:32:03 +0000
ROA not before: Mon 24 Feb 2025 12:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 213.18.220.0/22 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.32.0/24 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:f1:6a:27:56:ae:33:b1:b8:d8:6a:4a:97:f1:4d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 24 12:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1a46ef7cc9790fe179bfea9cca915d1cfebfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:68:65:11:74:8e:8e:9e:6e:22:ba:33:0c:00:
c7:c9:b4:9c:e6:50:e2:a6:ed:b2:5d:c3:dd:e7:69:
22:77:d2:96:a2:b6:68:7a:89:dc:b0:0b:99:15:6c:
46:ec:17:bd:1d:9b:19:98:0e:55:f9:05:03:d6:03:
47:8a:e7:2f:ae:ce:e4:73:e7:97:80:75:d0:2e:25:
a2:f6:6f:82:12:ba:b7:b7:3b:14:4a:55:b1:65:3e:
c8:24:59:fb:b4:e5:5c:67:a5:7e:f0:ea:93:0c:d9:
1e:f2:40:e1:be:e1:ef:79:84:10:eb:4d:ba:27:36:
28:67:ec:42:13:7d:a5:af:ea:08:04:28:97:fb:32:
fa:cf:c6:18:9c:fb:c7:dd:04:49:d9:fc:c2:da:13:
c2:b2:37:b5:ce:fe:f9:4d:c4:0d:bd:c8:22:fb:74:
4c:84:42:0d:9b:18:97:6b:c1:86:dc:a1:e2:1b:9d:
c0:7f:bb:47:42:fa:77:ad:f6:fc:49:94:3a:06:a1:
b4:1f:d6:26:ba:8f:6a:da:18:2c:c0:06:92:30:69:
75:6f:9d:15:c5:64:23:6b:55:8e:03:1a:db:b7:37:
04:d1:61:92:c2:00:09:ac:3f:22:cc:6b:d7:29:7e:
d1:ea:8b:81:e2:12:7d:99:f2:ff:06:19:a9:fd:cd:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1A:46:EF:7C:C9:79:0F:E1:79:BF:EA:9C:CA:91:5D:1C:FE:BF:B3
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/fBpG73zJeQ_heb_qnMqRXRz-v7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.220.0/22
217.177.0.0/21
217.177.32.0/24
217.180.12.0/24
217.180.22.0/23
Signature Algorithm: sha256WithRSAEncryption
83:09:c0:f4:bf:b1:9c:fd:49:c2:23:3a:fe:f6:0f:61:81:d0:
9d:7c:e1:67:28:68:fa:be:8e:07:bc:9a:26:c7:46:7f:e1:44:
6a:a8:2f:8e:30:52:9b:8f:78:58:51:75:52:6d:41:d1:6e:87:
5b:a4:48:a9:fc:e2:54:f1:b4:96:57:37:f5:18:4d:01:0b:29:
eb:cb:35:24:62:a3:56:1e:e1:f1:5b:77:ab:e7:8c:bc:b8:db:
e1:75:82:b9:cd:f3:fa:b8:b6:9f:c6:99:d2:e7:0b:f1:2e:d9:
92:e5:6e:db:3e:55:d8:8d:d1:06:42:d7:d3:1e:df:a4:37:46:
ed:89:79:1f:c8:65:1f:8c:df:11:1a:61:c8:ce:3d:02:fb:f3:
be:e2:d3:ef:8c:c1:fc:44:fe:f0:18:98:2e:61:5d:fd:39:7f:
2c:b1:40:a5:e9:ba:e4:af:de:11:78:e9:69:a9:02:fb:86:bd:
98:9b:28:24:8a:a0:98:93:43:df:a2:2a:e7:af:d1:b5:b2:a2:
77:1c:07:47:85:05:94:ca:a2:c9:75:af:88:4f:c7:9b:2b:09:
df:cf:17:9f:1f:7c:ce:48:6e:0f:1b:de:b1:42:d5:cd:fa:4d:
4e:70:6f:12:d7:91:c2:c2:c5:45:83:45:a9:4b:c9:6a:27:f3:
0c:5e:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:39 2025 by rpki-client