Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bOBNzYSXgoKzjs1aO8l5gzO9vuY.roa
File: bOBNzYSXgoKzjs1aO8l5gzO9vuY.roa (raw, json)
Hash identifier: KLAYNB3YBzBFEK6trTam4KYa2tULlOuctEkYLwdrnG0=
Subject key identifier: 6C:E0:4D:CD:84:97:82:82:B3:8E:CD:5A:3B:C9:79:83:33:BD:BE:E6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195C2221C0497CE2890E013BE70326E0557
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bOBNzYSXgoKzjs1aO8l5gzO9vuY.roa
Signing time: Sun 23 Mar 2025 08:32:50 +0000
ROA not before: Sun 23 Mar 2025 08:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 213.210.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c2:22:1c:04:97:ce:28:90:e0:13:be:70:32:6e:05:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 23 08:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce04dcd84978282b38ecd5a3bc9798333bdbee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:2f:4d:a0:28:0e:d0:31:f5:fe:60:f1:77:
f8:7c:d4:9d:d6:39:ea:b5:05:88:b8:63:02:57:23:
6a:24:30:11:7e:85:ef:a9:47:ea:6c:4f:39:1f:08:
8a:d5:ae:2a:2e:37:ea:60:c4:bc:ff:15:0d:11:09:
40:e7:10:38:5c:11:ca:ba:a5:5b:25:27:39:61:a3:
90:39:fd:fd:5e:de:74:e9:fb:99:a5:29:e3:cf:27:
51:05:75:6a:3c:da:dc:62:70:aa:38:0d:89:22:f8:
31:bd:15:19:96:64:88:8e:b9:bf:ab:07:08:90:5f:
d0:eb:a4:65:e2:cc:00:aa:8b:c8:97:f1:b5:89:b5:
db:76:3d:2a:c5:64:e2:68:36:b9:4f:aa:be:45:8b:
1b:77:91:32:0e:39:e6:45:46:30:7b:b6:b9:c8:d9:
a0:a7:76:f0:28:54:1b:02:88:d7:de:63:2a:b1:66:
5d:59:dd:41:82:76:c7:34:6d:d3:03:07:b0:45:4c:
e2:d2:51:7c:97:68:0f:34:92:42:b7:f4:8d:a7:33:
81:b0:56:11:33:e1:30:30:98:16:b7:0f:f6:79:47:
7b:b3:58:27:37:9c:2e:13:f7:a5:8f:cd:b3:ec:e6:
ee:2a:cd:6a:90:94:53:b5:eb:ff:95:fd:28:81:8e:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:4D:CD:84:97:82:82:B3:8E:CD:5A:3B:C9:79:83:33:BD:BE:E6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bOBNzYSXgoKzjs1aO8l5gzO9vuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d9:15:1a:8f:24:17:43:57:eb:0e:d3:f8:35:40:fb:3c:e5:
5c:97:43:71:d9:03:03:b3:f2:08:3a:75:42:b8:8a:f5:39:15:
15:73:fe:a0:63:65:23:8d:f7:a0:1c:7f:33:90:24:ba:4e:82:
90:61:8a:92:6f:e7:85:ef:04:54:4e:98:49:1a:37:7b:fe:b0:
68:4b:bb:d6:11:a9:70:13:7c:f6:bb:61:0a:e9:4c:73:bb:fd:
9a:8c:c6:18:db:bc:14:eb:eb:19:92:d8:2e:ac:98:43:18:3d:
a2:bd:3a:cb:d8:af:d9:28:c2:9c:02:f0:8f:f7:c8:ef:2c:66:
3b:06:00:01:3f:55:49:3d:75:be:c7:6c:f9:c5:21:42:e3:ca:
1c:52:22:51:a5:61:e0:c6:fe:96:0c:42:bb:48:99:4f:c1:84:
15:13:00:34:9f:7b:51:d3:84:8c:ef:8d:2f:ff:74:46:ba:41:
7f:02:a6:5c:c3:58:9a:69:e7:2d:56:25:5b:04:33:a4:7b:01:
40:bd:78:d8:b2:e6:3b:85:4f:61:6b:dc:63:dd:2a:a1:85:0f:
9f:08:28:82:0e:24:09:92:31:c1:7b:c1:57:18:57:5a:bc:69:
6d:f4:0d:60:01:f6:44:80:64:03:9c:2f:0d:89:40:88:05:c0:
55:93:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:09 2025 by rpki-client