Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/IGXep-Sp1xTx1rwpzVruBZRjNug.roa
File: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (raw, json)
Hash identifier: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=
Subject key identifier: 20:65:DE:A7:E4:A9:D7:14:F1:D6:BC:29:CD:5A:EE:05:94:63:36:E8
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827B1CCE4807CAF2BADC8E344A3758D
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/IGXep-Sp1xTx1rwpzVruBZRjNug.roa
Signing time: Thu 02 Jan 2025 17:54:37 +0000
ROA not before: Thu 02 Jan 2025 17:54:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 213.182.199.0/24 maxlen: 24
213.182.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b1:cc:e4:80:7c:af:2b:ad:c8:e3:44:a3:75:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2065dea7e4a9d714f1d6bc29cd5aee05946336e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:5f:30:7a:20:25:87:e7:84:1a:24:de:2a:
c8:4d:38:b2:72:59:c1:14:f7:b9:af:12:c3:81:25:
f4:de:72:14:f8:17:c9:02:9d:93:20:da:eb:14:9a:
ab:23:94:0e:91:7f:52:60:ef:e8:b5:76:14:58:12:
b5:61:22:99:03:b0:4c:ac:2c:41:c8:e7:3b:28:5f:
51:27:86:27:7e:16:cd:53:15:26:11:31:cf:90:e6:
d6:2f:ae:77:79:3e:fd:b5:32:c0:4e:7d:ab:8d:6a:
f7:29:64:e6:67:2f:98:6a:12:95:38:c1:94:4d:a6:
4d:10:79:40:92:04:5d:f5:8d:ea:1d:45:a0:0c:1d:
d3:cc:bd:a4:a4:49:bd:f3:0f:8f:dc:d0:c5:6e:4f:
5d:a6:c0:ba:dc:65:dd:d9:74:c3:4b:9d:cd:85:bf:
24:a9:ba:7c:2e:2c:67:61:b5:e8:5a:09:a7:23:62:
34:00:5f:16:4a:52:72:89:ba:dd:e4:c6:52:51:fd:
04:27:49:b4:14:a3:a8:14:d8:04:8f:1f:d9:33:83:
0a:a0:0d:e8:bd:bd:40:65:11:e1:4f:30:cb:40:87:
fe:d5:07:85:b4:79:5e:67:e8:aa:5c:8b:62:9d:11:
9d:98:d7:c2:06:25:21:3d:6d:de:ce:93:46:9f:07:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:65:DE:A7:E4:A9:D7:14:F1:D6:BC:29:CD:5A:EE:05:94:63:36:E8
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/IGXep-Sp1xTx1rwpzVruBZRjNug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.199.0/24
213.182.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dc:84:e1:cb:a1:86:cf:e5:04:ba:f0:13:a6:01:99:1b:ce:
4e:2a:25:51:a1:3f:86:72:dd:9a:e1:12:7a:b4:02:26:9f:04:
c3:4e:f0:77:d0:a1:ed:fe:43:dc:06:23:9e:99:d4:f5:d0:45:
e3:0b:b0:f3:13:18:36:11:bd:71:39:c7:f5:10:c4:84:0b:7f:
06:f1:88:80:a4:b1:5e:30:6c:e5:dc:22:52:e7:c6:7c:f2:83:
29:b8:1d:0d:04:80:e1:4b:f4:00:b3:7d:34:37:fe:cb:a8:21:
d7:08:cd:71:3a:37:01:1c:7b:32:2b:07:36:2c:30:53:ea:d8:
34:c5:14:b8:14:33:ee:de:d0:37:cc:26:4a:2a:02:d5:f9:f7:
70:30:e9:fb:f0:1b:33:c7:1b:fd:fb:33:1e:a9:21:84:75:ad:
e3:d2:62:c1:e3:92:10:a5:e0:ed:2b:12:d1:f8:e4:7e:b2:30:
90:64:20:dd:50:2c:4c:1a:db:41:b8:00:88:bc:29:7f:12:39:
63:2b:90:e2:b5:88:5b:b2:21:61:f7:01:70:fe:ed:a1:53:b6:
2b:12:01:6f:18:90:63:d7:6d:41:79:85:fa:3c:ee:7a:31:d1:
86:c0:fe:8a:a7:0c:f2:66:e7:45:77:60:d2:bd:4c:3a:65:c3:
47:a5:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:13 2025 by rpki-client