Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lxPiWwalzbyoXtPVvlov7YJfhOw.roa
File: lxPiWwalzbyoXtPVvlov7YJfhOw.roa (raw, json)
Hash identifier: um3YWUPHZ/Qg+RoQeHlo3zURy0nMxiG8TxN0FKkMp64=
Subject key identifier: 97:13:E2:5B:06:A5:CD:BC:A8:5E:D3:D5:BE:5A:2F:ED:82:5F:84:EC
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019364AD785A40F34F996A162A0CF3838C18
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lxPiWwalzbyoXtPVvlov7YJfhOw.roa
Signing time: Mon 25 Nov 2024 18:55:10 +0000
ROA not before: Mon 25 Nov 2024 18:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 213.18.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:ad:78:5a:40:f3:4f:99:6a:16:2a:0c:f3:83:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Nov 25 18:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9713e25b06a5cdbca85ed3d5be5a2fed825f84ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:30:10:3a:32:0f:21:04:cc:ce:38:6c:da:
55:f6:e1:b5:da:09:aa:de:d3:8c:e2:d6:e2:23:71:
03:45:a1:db:37:2e:c8:82:8f:96:3a:a8:14:07:aa:
5b:40:c5:ec:ee:43:55:ca:d8:30:a2:fa:df:87:87:
56:c4:6c:09:27:e0:a1:57:0f:8b:5a:66:af:83:f7:
5d:e6:69:d1:22:b7:02:be:10:45:e6:0b:4a:f6:c5:
30:88:90:78:d7:90:7d:aa:b0:38:6b:01:e5:9d:bd:
8b:b1:33:7c:a7:4b:ea:92:2d:9d:33:ae:76:cd:c1:
ba:81:82:8e:62:83:8a:ba:69:9d:46:1f:49:93:26:
59:4c:a1:93:82:00:df:9d:61:ab:eb:33:8e:fa:13:
da:fa:1b:59:22:06:65:7f:cb:96:51:63:cd:42:d0:
8b:c1:34:41:7c:ed:f9:b6:f8:55:33:5f:e1:e7:aa:
46:60:d0:0e:81:25:93:b6:4d:98:d9:d2:1e:5c:d0:
f0:6c:bf:1e:06:f0:34:21:3a:73:6f:7f:25:bc:67:
26:91:f1:bf:9b:3f:35:1d:99:10:da:ac:d0:4f:0b:
8c:8b:91:89:17:3a:33:a3:df:ca:7f:6f:be:20:c2:
5d:7e:22:39:24:52:57:9e:6e:d6:73:b5:9c:3a:eb:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:E2:5B:06:A5:CD:BC:A8:5E:D3:D5:BE:5A:2F:ED:82:5F:84:EC
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/lxPiWwalzbyoXtPVvlov7YJfhOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:1d:c9:dc:26:e3:ae:22:17:98:40:fe:bf:ac:c4:a1:00:f8:
1f:e7:fe:51:5f:99:f0:6e:f4:4c:52:6a:04:8c:29:b8:cd:12:
02:a1:b3:ac:06:ba:71:11:43:24:35:fb:6f:7f:f4:fd:ef:67:
06:11:bf:1e:eb:5a:14:ea:d4:64:38:5d:ef:b6:c7:7c:0b:60:
aa:ed:96:53:be:b3:e1:04:44:84:92:af:dc:5b:07:4f:47:ec:
8c:da:51:0c:f3:04:c5:5f:8d:56:1b:1f:e4:12:dd:53:4d:72:
96:f9:3d:e1:9a:d8:1e:cf:f9:95:8d:af:a2:37:9b:f8:7c:bd:
2a:8d:f2:c7:7b:9e:7a:cd:3c:8b:50:ff:4f:a1:90:45:c5:c5:
85:b3:50:e7:55:7a:f5:1e:51:3d:a6:73:da:f3:d8:cc:57:1b:
07:ad:b0:e2:2b:23:04:2c:d7:7e:e9:f9:61:7e:98:c5:94:0e:
99:c5:92:77:dd:b5:5c:b6:ad:0f:d8:f7:5a:be:7b:f0:2f:36:
b5:c0:52:3d:39:c8:83:54:c5:a9:9d:22:ed:68:ae:da:c9:08:
77:8b:0e:7a:66:e7:0f:8e:9e:56:27:7e:7e:73:fe:e7:d1:0c:
5f:0a:7c:fe:b2:50:1d:40:af:fa:78:f1:54:e1:40:c8:4d:33:
e2:3a:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:26 2025 by rpki-client