Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/C6ZWn9vVtTjQVhMxBe-SFuyV_ak.roa
File: C6ZWn9vVtTjQVhMxBe-SFuyV_ak.roa (raw, json)
Hash identifier: A4Pu/z59cvECq2QD15z9mpg/+du3ZD+e3bebt4qKgec=
Subject key identifier: 0B:A6:56:9F:DB:D5:B5:38:D0:56:13:31:05:EF:92:16:EC:95:FD:A9
Certificate issuer: /CN=81601c22138b5719c4027eee75ef74679ce68ca9
Certificate serial: C5F6CC
Authority key identifier: 81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/C6ZWn9vVtTjQVhMxBe-SFuyV_ak.roa
Signing time: Sat 01 Jan 2022 02:58:16 +0000
ROA not before: Sat 01 Jan 2022 02:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 213.109.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12973772 (0xc5f6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81601c22138b5719c4027eee75ef74679ce68ca9
Validity
Not Before: Jan 1 02:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ba6569fdbd5b538d056133105ef9216ec95fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:66:7b:d7:ed:68:e8:68:60:88:a0:4d:41:
8e:16:95:f9:4e:be:9d:c4:20:fe:c5:1d:3d:ca:03:
54:2a:d0:d6:f3:e7:ec:4c:31:86:3d:f7:36:10:e9:
51:de:d8:b6:cc:82:2d:ba:f4:67:7a:5a:c2:a0:f8:
03:f9:f7:1a:2a:04:24:80:f4:81:01:89:64:b0:2b:
a4:19:53:b0:10:81:4e:8e:1a:18:13:ea:fb:c9:1d:
3a:09:16:66:0e:67:72:11:65:7f:3d:30:b1:2b:c8:
6e:ee:8e:a2:30:d2:bf:89:66:25:2c:89:3a:12:5d:
3d:3d:cd:fd:fb:ab:f0:eb:94:74:9d:ea:40:44:83:
a1:6d:fb:5e:ce:e2:a7:18:32:d6:4a:66:17:a1:08:
32:56:ff:1d:8b:d5:48:64:f9:47:71:80:6d:c9:0f:
11:98:29:b3:3e:65:60:a9:ba:f9:0d:34:14:be:2a:
44:b9:2b:7d:b6:dd:5b:03:c1:f2:4f:52:af:f9:6f:
97:22:09:7c:2b:28:bd:8d:fe:0f:b4:fd:e7:9d:47:
9a:7c:cb:59:41:04:a5:c1:51:d2:6a:4b:e7:63:dc:
36:37:37:43:a6:0c:ed:d5:66:9e:4f:97:a6:11:75:
31:98:2f:b1:16:e8:64:4a:0b:ca:bd:b1:e9:05:d7:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:56:9F:DB:D5:B5:38:D0:56:13:31:05:EF:92:16:EC:95:FD:A9
X509v3 Authority Key Identifier:
keyid:81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/C6ZWn9vVtTjQVhMxBe-SFuyV_ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9a:f6:af:3d:4b:e0:64:1e:88:a6:43:c4:0e:bb:c5:b4:f4:
ba:97:5f:55:10:1a:d3:7b:50:03:f9:86:20:b8:14:bb:7c:e3:
cf:8f:d3:de:96:39:1c:14:d4:bb:ce:af:45:e3:ce:74:4a:0c:
6d:a5:67:70:35:2f:27:d2:1c:d5:30:45:59:05:ce:aa:9c:ab:
cc:18:b9:71:ad:d5:70:7e:9d:36:95:70:d3:81:60:a1:ff:87:
41:91:64:3e:0e:01:dc:86:5b:c9:a0:fe:37:b0:c9:c7:7c:49:
4d:49:59:f5:53:5b:5f:49:f1:ba:70:5d:88:ea:e3:b7:79:6f:
f3:61:50:e8:0a:18:c7:76:f5:be:ed:e4:78:da:4b:12:6a:c8:
af:54:c7:a7:26:d3:5e:4c:26:78:66:6a:bd:8a:fc:3b:f7:2c:
e9:7b:b7:20:b3:3e:f2:1f:43:92:cf:e5:c0:ad:89:59:4a:bb:
c4:d8:e6:85:77:44:29:13:e4:b4:64:82:8c:11:4d:d2:36:55:
e5:bd:79:85:51:29:b2:5c:46:32:09:5f:f5:d0:05:4a:01:99:
5b:80:4c:f4:cf:d8:60:d8:fc:f2:31:8f:3a:f2:91:12:95:6c:
96:a5:7e:1f:b0:c8:ad:fb:2a:36:f5:31:5c:39:14:e6:1c:6a:
55:dd:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:20 2025 by rpki-client