Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/61_H0mtWnH3_J2fwpplKmmkqrSk.roa
File: 61_H0mtWnH3_J2fwpplKmmkqrSk.roa (raw, json)
Hash identifier: tS9RtO8L7S+lv6aM1FxHmYzKaPmtuobsJAT+ynVjH3s=
Subject key identifier: EB:5F:C7:D2:6B:56:9C:7D:FF:27:67:F0:A6:99:4A:9A:69:2A:AD:29
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444969D58DA49E3DA9CDFF228FB3F1F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/61_H0mtWnH3_J2fwpplKmmkqrSk.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136897
IP address blocks: 213.217.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:96:9d:58:da:49:e3:da:9c:df:f2:28:fb:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb5fc7d26b569c7dff2767f0a6994a9a692aad29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:ba:d1:59:5b:3c:30:de:45:aa:a1:34:5e:
a3:16:2b:f7:be:9e:03:03:03:8f:d8:da:67:1b:12:
02:62:9b:2f:c0:31:05:43:b6:07:4a:f9:24:33:6e:
e9:e4:4d:7b:96:50:0c:5e:7d:de:e4:3f:93:83:25:
a9:76:e6:84:c7:c8:89:9d:d0:aa:28:6f:1c:67:de:
ea:31:db:d4:f2:74:5d:f6:63:a9:eb:cf:4a:99:79:
d1:83:e2:a9:ec:9d:e4:a5:4e:f3:54:fc:4e:ba:49:
a3:34:4e:70:f1:98:50:55:73:e7:7b:66:5d:59:a5:
02:07:e9:d4:1e:ba:b9:8f:eb:11:c5:5e:1b:44:76:
8c:80:a2:fa:dd:75:a6:ef:54:df:e5:d6:0c:ba:6f:
1c:61:3f:47:71:4d:f5:5f:45:7a:5a:1f:2e:09:99:
4f:48:cd:e2:5d:1b:1a:9f:e7:9c:20:2e:21:6f:87:
a4:08:f3:c0:b7:2c:65:54:e2:3f:1e:a1:38:be:ff:
81:63:be:a3:5e:66:0a:86:f2:db:9d:e7:49:0a:a5:
80:d4:8d:bf:1d:4f:a9:aa:88:97:4d:65:25:f2:61:
6d:98:76:f5:76:56:5d:94:a7:03:07:72:5d:5a:bd:
13:0f:9e:1a:e8:bb:c5:df:c0:0d:c7:c7:3c:46:42:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:C7:D2:6B:56:9C:7D:FF:27:67:F0:A6:99:4A:9A:69:2A:AD:29
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/61_H0mtWnH3_J2fwpplKmmkqrSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3e:6c:3a:32:aa:bd:82:39:c8:c6:1f:2c:8e:17:49:09:e9:
a8:de:98:66:19:35:d7:17:30:00:0e:e5:fc:80:83:1b:df:c1:
e7:19:75:04:07:f3:4f:7c:d8:99:ae:3d:c9:90:b3:25:26:b7:
5d:19:60:5b:9e:d6:d3:c4:f3:0d:de:6c:b0:b4:f7:64:d1:70:
6a:dd:4e:85:05:ae:e4:02:31:ec:08:67:11:8e:bc:ad:13:fb:
56:1d:91:21:d1:7e:3d:bb:a1:4a:42:33:f2:0f:f1:47:6e:df:
b6:1b:0b:b0:43:b8:32:54:bd:e4:4c:bd:54:cc:b6:56:de:fe:
5a:bf:1d:ed:69:0a:36:be:59:9b:87:14:7a:4d:88:18:d7:b4:
e0:6c:6d:39:88:f4:63:28:92:a5:cb:37:f9:4b:44:be:39:62:
a8:e3:6a:15:c0:bb:a9:5c:2e:d1:95:4e:8c:1e:2e:c9:84:73:
20:8e:07:08:a1:30:b9:af:af:72:37:05:5a:1b:bf:13:30:ea:
bc:ff:97:46:a7:6c:30:72:3a:0f:b1:a2:c4:9b:84:df:52:d6:
32:ed:44:8d:a2:b8:25:24:b0:ee:27:8c:0c:1b:e6:35:bd:74:
fc:ba:c7:b3:23:89:65:65:4d:39:e1:5a:04:c5:66:c9:35:f3:
5d:28:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:32 2025 by rpki-client