Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/llk4ofXvRzHEH-qWue__dsHka_s.roa
File: llk4ofXvRzHEH-qWue__dsHka_s.roa (raw, json)
Hash identifier: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=
Subject key identifier: 96:59:38:A1:F5:EF:47:31:C4:1F:EA:96:B9:EF:FF:76:C1:E4:6B:FB
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827AE7046559CC8D7E040CE608F53B3
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/llk4ofXvRzHEH-qWue__dsHka_s.roa
Signing time: Thu 02 Jan 2025 17:54:36 +0000
ROA not before: Thu 02 Jan 2025 17:54:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 213.182.193.0/24 maxlen: 24
213.182.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ae:70:46:55:9c:c8:d7:e0:40:ce:60:8f:53:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=965938a1f5ef4731c41fea96b9efff76c1e46bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7a:79:45:05:32:c0:e3:82:ba:6c:bf:b2:fd:
63:d3:75:d1:30:96:0c:fb:96:f3:79:07:de:84:b3:
cf:cc:0f:a5:f9:80:e3:ef:53:9a:ca:fa:5d:f3:2a:
fa:7d:f4:c0:61:74:5b:a2:13:c1:c4:01:37:94:58:
f6:63:19:fb:31:97:0d:aa:d9:b9:68:90:74:b3:90:
f4:e7:f2:d6:97:bc:23:0d:4e:1e:a9:31:8f:23:35:
c9:4d:49:57:27:e0:df:a4:fd:b0:c1:c0:68:95:e7:
8c:59:f5:37:c2:d0:e8:0e:7f:87:c6:a0:86:2f:39:
0f:25:c5:bf:9f:93:fb:96:8c:d8:ea:e9:3b:eb:10:
a6:5a:b1:53:76:07:ca:f3:e0:f9:db:36:c8:bb:8b:
90:17:22:88:e4:49:68:2d:50:b0:26:2f:10:84:53:
e5:35:5d:a7:b8:57:85:34:3f:d0:17:49:84:c6:b3:
0c:b7:f6:50:84:2a:9d:97:93:78:67:69:43:8b:11:
f1:c0:04:bd:a9:a3:9d:21:1b:df:6f:a2:89:07:58:
ad:0c:f9:18:64:0f:6b:6f:37:00:3c:d0:cc:c8:a6:
76:a5:0c:0f:d4:eb:a8:61:4b:20:d3:6b:44:67:62:
a3:2a:00:3a:60:b4:1b:01:9c:18:94:3c:d5:b3:47:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:38:A1:F5:EF:47:31:C4:1F:EA:96:B9:EF:FF:76:C1:E4:6B:FB
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/llk4ofXvRzHEH-qWue__dsHka_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.193.0-213.182.194.255
Signature Algorithm: sha256WithRSAEncryption
87:c3:bc:a3:68:b4:41:4b:cc:bf:14:f4:eb:35:82:ef:cc:e3:
f1:14:f2:6b:fa:73:69:4a:2f:8a:43:5e:e6:63:3e:c8:ee:74:
3b:4f:16:9c:a0:61:a7:02:db:f2:ee:98:b1:6b:57:0d:8b:49:
70:3c:c4:c5:4f:a1:6a:4a:d7:d2:44:2b:48:cc:89:e9:54:9b:
d0:48:95:82:37:a3:78:80:e1:d5:cb:82:e4:88:e1:62:3a:b4:
af:98:55:a6:14:57:07:f1:7f:13:1e:ea:92:00:b4:11:3a:56:
4f:6f:0d:1b:23:18:ba:45:42:e1:0b:f1:94:b1:17:a2:d7:ad:
ec:72:6b:45:c8:36:c9:c5:a3:68:02:83:13:93:f7:46:b7:e4:
b2:de:31:a5:fc:5b:eb:1c:5a:b3:20:5b:63:90:b9:1a:24:70:
59:d0:e2:40:39:3e:0b:cb:df:74:0c:0a:b6:13:de:4f:4b:b0:
47:a4:dd:b2:94:d0:6d:83:4d:fb:0e:c5:21:65:89:74:63:14:
98:6e:ec:83:5d:3b:f8:f3:a8:96:36:90:fc:91:18:8e:cd:6f:
09:8d:ff:52:47:fd:92:b5:13:4d:38:43:99:5d:42:8b:ae:29:
80:0b:51:1f:69:ab:77:f2:0b:84:6e:f3:70:ea:56:6b:67:d4:
61:52:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:43 2025 by rpki-client