Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/cdYJonDxjk5U7tPV78g4h2hSLZo.roa
File: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (raw, json)
Hash identifier: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=
Subject key identifier: 71:D6:09:A2:70:F1:8E:4E:54:EE:D3:D5:EF:C8:38:87:68:52:2D:9A
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0194221FE73D4EA25A7280292307069CE134
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/cdYJonDxjk5U7tPV78g4h2hSLZo.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211513
IP address blocks: 202.164.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e7:3d:4e:a2:5a:72:80:29:23:07:06:9c:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71d609a270f18e4e54eed3d5efc8388768522d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:a4:3b:b5:52:2f:59:27:57:b8:c9:fb:d1:
e0:d6:01:72:ed:7d:86:b0:5f:60:38:68:29:1b:f6:
2d:f3:54:49:37:ae:bf:17:c3:43:1a:4c:33:4a:7f:
56:04:d4:2f:72:e2:09:92:2a:03:5e:58:7d:b6:81:
b0:53:74:89:4a:03:0a:9b:31:56:af:b3:c5:e0:c3:
c2:cc:01:6f:c8:dc:52:d0:c6:55:f8:6f:82:c0:c9:
1f:40:31:23:d1:64:e8:4a:58:e0:ac:a9:0d:5b:0f:
69:9a:be:a4:82:95:64:cf:13:fe:08:b7:9f:37:62:
23:b2:fb:49:88:56:23:c2:74:42:4a:1b:68:3d:83:
ce:75:64:4e:8b:6e:4f:b8:58:f0:c1:a7:c7:00:1a:
be:51:0e:db:3e:e6:f7:c5:6b:ed:55:35:2f:9e:c5:
25:0f:e0:38:16:49:0d:af:01:35:98:c2:09:88:2b:
2e:8e:8b:e3:2f:ed:f5:96:04:18:8d:4d:98:5c:50:
44:20:37:6e:3a:df:0a:6a:16:69:22:01:39:12:c0:
ad:a5:0d:c6:d5:a4:f3:6e:6d:d6:72:3a:a4:06:1a:
ff:fb:e6:c4:0b:79:8e:da:71:17:f6:e5:3e:76:e3:
a2:f7:7a:9e:ce:5b:02:29:c9:66:82:11:e6:e3:9a:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:09:A2:70:F1:8E:4E:54:EE:D3:D5:EF:C8:38:87:68:52:2D:9A
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/cdYJonDxjk5U7tPV78g4h2hSLZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.164.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:64:26:86:92:3d:35:c6:9b:9d:b9:fb:8d:bd:d6:44:fa:9b:
61:1e:6e:b2:61:be:c0:b2:8e:d2:16:5a:99:a5:58:c0:df:46:
ac:8d:65:a2:2b:b1:2e:64:a6:51:65:8d:cf:64:ad:e6:09:d2:
0a:ee:b7:53:1d:62:f5:d5:43:2e:45:d6:81:03:33:12:bc:56:
fd:63:1d:af:08:5e:3f:6e:5c:53:47:25:30:60:d7:9a:88:fe:
2c:c8:67:40:4a:b9:0e:71:db:78:6b:91:5e:74:06:d8:77:af:
b0:40:0c:dc:a4:ff:9c:0b:96:5a:37:32:34:73:90:49:c5:6d:
bc:36:db:84:c6:47:40:39:2c:5d:5f:03:63:e6:00:58:a2:59:
39:88:c8:3f:a7:4d:11:35:10:46:a2:57:3b:7d:1e:d1:74:e5:
f6:92:99:00:ec:ed:93:95:c6:04:bb:43:18:a8:72:4e:26:e3:
0a:8c:c7:81:64:36:8c:10:1b:5e:4b:38:04:36:8e:41:ef:84:
f6:b5:df:00:93:c1:00:78:3f:72:7e:4f:52:12:62:75:77:9b:
2e:ae:bd:9d:1f:c2:26:2c:7f:80:3c:e9:e9:80:0a:a4:c0:d2:
ab:9e:ea:25:6b:21:63:49:2f:93:30:ed:13:ec:7f:b7:e0:eb:
b7:2b:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:40:08 2025 by rpki-client