Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8df9d9-b420-41da-b3aa-afdea12fb965/1/RzVX3RgcjYJ_ZGxWRnv6ADv3FgI.roa
File: RzVX3RgcjYJ_ZGxWRnv6ADv3FgI.roa (raw, json)
Hash identifier: oQKxuXbrtWpDCLNsoXFfaPSRbJjELhNDdEW3e7M8pNU=
Subject key identifier: 47:35:57:DD:18:1C:8D:82:7F:64:6C:56:46:7B:FA:00:3B:F7:16:02
Certificate issuer: /CN=530493a3dc3c0b7e30c7771e2be20f811ebc47e0
Certificate serial: C891FC
Authority key identifier: 53:04:93:A3:DC:3C:0B:7E:30:C7:77:1E:2B:E2:0F:81:1E:BC:47:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwSTo9w8C34wx3ceK-IPgR68R-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8df9d9-b420-41da-b3aa-afdea12fb965/1/RzVX3RgcjYJ_ZGxWRnv6ADv3FgI.roa
Signing time: Sat 01 Jan 2022 10:59:15 +0000
ROA not before: Sat 01 Jan 2022 10:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 213.109.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13144572 (0xc891fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530493a3dc3c0b7e30c7771e2be20f811ebc47e0
Validity
Not Before: Jan 1 10:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=473557dd181c8d827f646c56467bfa003bf71602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:63:dc:31:50:53:95:22:d8:4d:2a:cc:c3:
db:6e:30:85:eb:fb:ec:6b:7f:a4:23:b9:86:d9:8d:
d3:d7:be:96:a9:25:69:1a:6b:fe:fb:48:33:dc:b3:
13:76:5e:07:4e:cf:26:d7:35:2b:66:e3:df:f1:bf:
f9:b2:e0:fa:a7:12:ef:b5:d6:35:56:37:61:fc:b2:
7e:99:88:a6:74:1e:53:80:d1:0d:b9:81:52:bb:42:
d0:65:1f:75:9b:09:07:04:71:8f:36:b2:1a:8f:84:
d4:43:20:64:72:e7:33:bc:ee:8d:7c:6f:4b:63:5d:
0b:cc:2e:df:3c:57:da:7f:b8:d4:c7:4c:8c:54:05:
97:18:32:65:bc:2c:75:d4:ae:5a:12:9d:c6:d2:56:
3a:b1:1a:bd:0b:71:d9:e1:c2:3b:08:1d:59:ad:1f:
6c:f9:31:4e:86:6a:51:5e:31:88:3a:37:b2:4d:5e:
78:63:33:aa:50:bc:57:ee:60:75:9d:b7:83:9d:6e:
06:38:9f:ed:9a:b1:e8:b6:36:40:02:7d:d0:02:37:
d2:cf:8f:52:2a:f3:86:c2:1e:06:f7:4a:46:68:67:
29:4d:eb:d1:2e:f0:75:f9:89:33:ad:ce:92:2a:a0:
bd:5c:5a:74:65:f2:75:9b:d3:82:01:d3:a7:b9:e7:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:57:DD:18:1C:8D:82:7F:64:6C:56:46:7B:FA:00:3B:F7:16:02
X509v3 Authority Key Identifier:
keyid:53:04:93:A3:DC:3C:0B:7E:30:C7:77:1E:2B:E2:0F:81:1E:BC:47:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwSTo9w8C34wx3ceK-IPgR68R-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8df9d9-b420-41da-b3aa-afdea12fb965/1/RzVX3RgcjYJ_ZGxWRnv6ADv3FgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8df9d9-b420-41da-b3aa-afdea12fb965/1/UwSTo9w8C34wx3ceK-IPgR68R-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:63:41:b3:fd:9e:1c:83:b9:bc:12:e2:8f:0b:b9:77:da:53:
fd:c9:eb:78:3e:74:73:b0:fa:27:df:18:a9:9a:db:0d:7d:c3:
48:10:6b:81:d2:bb:9d:e4:41:65:b5:23:e1:c4:b1:c3:6a:05:
d4:b9:b8:73:c6:ce:a3:67:75:c7:8c:bd:83:5f:29:0b:17:23:
00:1b:71:c8:72:c9:a7:a5:2f:9b:b7:1f:9e:9f:14:fb:e4:40:
33:5f:23:5c:80:4e:80:35:7b:c9:f0:92:20:38:05:fd:6f:79:
4b:6e:48:9d:ce:06:35:a8:ce:22:58:18:c2:af:4d:0f:26:4f:
7e:e1:2d:bb:2d:92:68:ba:b8:37:a0:9f:78:52:92:bc:06:fa:
c2:15:b3:45:fb:25:34:c0:2f:6b:0b:5c:27:ab:86:6c:59:1b:
32:42:70:48:5a:51:bc:1e:fc:56:f7:fe:7e:8f:c3:61:e9:1a:
7b:6b:d3:3b:e0:87:9d:4a:1a:34:9a:04:90:a6:fc:ef:0d:b3:
3b:ab:74:80:3c:30:7a:72:1e:24:db:f8:5e:d9:07:52:80:b1:
56:3f:72:da:a8:91:3d:1e:80:d8:e7:56:19:b0:3c:c1:a8:b8:
ec:64:d5:e2:e0:53:b2:a8:c6:9b:4d:a3:f5:d3:c5:6c:7c:8c:
65:d9:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:16 2025 by rpki-client