Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa
File: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (raw, json)
Hash identifier: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=
Subject key identifier: D9:E6:28:18:BA:58:B5:86:71:86:FD:4C:64:DE:AF:5F:6A:9D:3F:98
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01942067D8582402433CF1420DD4F99B2C1D
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 213.134.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d8:58:24:02:43:3c:f1:42:0d:d4:f9:9b:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e62818ba58b5867186fd4c64deaf5f6a9d3f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:36:67:81:a4:8f:b9:a7:98:0c:05:be:8f:
f9:eb:1d:16:30:14:f4:e0:7d:0f:08:e0:85:1a:38:
0e:92:6b:66:c0:60:47:ed:cc:d2:6a:4a:fb:ce:18:
50:3f:cb:ab:a5:57:11:b2:25:dd:7b:c3:e6:4c:57:
46:29:81:42:a3:10:ae:cd:be:90:02:4a:49:b9:08:
18:40:19:ab:ee:ca:ba:42:2c:63:d6:ea:83:b9:aa:
bb:35:6f:3c:6c:ff:16:4f:f9:01:33:c8:fd:df:09:
e3:a2:64:55:37:6c:77:e4:8c:d4:49:9a:8a:c6:69:
05:46:dd:51:d0:13:10:18:a4:ad:d6:3d:84:89:5f:
87:37:39:91:7b:6a:0c:76:f0:ab:4f:5d:26:db:64:
de:b6:99:f2:3f:2a:17:b2:8a:20:90:29:1f:00:62:
8e:97:b9:e2:22:01:7b:fa:e9:2e:6f:ca:f2:83:46:
ab:11:6e:46:60:db:3b:1c:e1:33:b1:5e:9e:5e:cb:
29:3b:39:f0:6d:69:04:ed:8b:6d:53:1d:40:8d:f9:
eb:fb:15:2d:b5:ec:7e:b8:45:07:82:76:76:e9:d0:
54:2e:c5:d3:84:5a:ed:2b:d9:64:2a:86:ac:58:d6:
88:ae:32:8f:f0:0f:a9:67:89:46:eb:8b:93:c9:42:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:28:18:BA:58:B5:86:71:86:FD:4C:64:DE:AF:5F:6A:9D:3F:98
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:42:b5:10:65:13:da:42:6c:8b:f6:09:c7:a8:de:35:b5:67:
06:15:94:c2:fe:c9:cb:ed:07:da:3a:e7:4b:e8:84:6b:bd:fc:
e2:c3:e3:f3:d0:52:59:47:2a:1c:ca:1b:fe:eb:63:f0:7a:bb:
ee:d2:1e:f9:eb:63:cc:25:6d:d7:1a:7e:e6:7a:cb:29:ea:60:
50:ee:ff:28:5b:28:af:b6:fd:ab:73:3e:a4:22:67:93:42:fc:
0b:2b:33:61:c7:73:0c:d4:00:ee:06:56:68:55:6f:91:bb:7a:
ef:c4:07:91:8c:18:76:68:49:ef:13:03:ca:0a:0a:f8:d9:3f:
1e:b8:bb:dd:42:b1:25:a6:54:f0:99:ff:b0:23:f5:ed:c1:3f:
c6:3a:17:6f:cd:70:75:42:ec:f2:d8:c0:8e:c6:2a:b7:05:f1:
47:29:48:f7:5d:f4:39:48:7e:c2:17:94:8b:a5:a2:27:5b:c2:
9e:7b:ee:83:f7:53:f1:c5:0d:45:f8:b8:e0:7c:ac:07:f5:7a:
bf:1d:f4:3c:0b:bd:71:e3:3a:26:be:fb:3f:75:99:19:59:af:
4b:49:43:e1:5f:cf:71:ed:0f:ce:2e:65:90:15:ba:3c:42:6a:
c6:2b:4f:9b:36:6f:48:e7:57:6c:78:9a:be:00:12:40:dc:a4:
cf:61:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:44 2025 by rpki-client