Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/Fw5sgkCdOAD-cjggGACNEtm2YVU.roa
File: Fw5sgkCdOAD-cjggGACNEtm2YVU.roa (raw, json)
Hash identifier: LjAQG+0SrlI1/dB0MCkmaCfqF8wDH5y32+xS5qeZfT0=
Subject key identifier: 17:0E:6C:82:40:9D:38:00:FE:72:38:20:18:00:8D:12:D9:B6:61:55
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 0193883BA425D18B5172465D80FBF3D34399
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/Fw5sgkCdOAD-cjggGACNEtm2YVU.roa
Signing time: Mon 02 Dec 2024 16:37:10 +0000
ROA not before: Mon 02 Dec 2024 16:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59795
IP address blocks: 213.184.84.0/24 maxlen: 24
213.184.86.0/24 maxlen: 24
2a09:3a00:3000::/40 maxlen: 48
2a09:3a00:3a00::/40 maxlen: 48
2a09:3a00:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:3b:a4:25:d1:8b:51:72:46:5d:80:fb:f3:d3:43:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Dec 2 16:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=170e6c82409d3800fe72382018008d12d9b66155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:52:f8:9b:3f:c3:c8:64:fd:74:ae:00:b6:
ff:ee:e4:76:b6:26:29:48:26:45:f2:cb:15:be:04:
47:ae:57:c4:98:b6:43:14:14:7e:fa:75:a7:6c:19:
41:65:68:fa:0b:ec:3f:f4:38:2e:d7:a5:37:d7:e7:
74:27:b3:3e:ec:55:7f:ab:86:0f:06:4d:0c:ef:62:
39:14:cc:b4:6d:06:d7:10:16:85:72:7a:9e:24:e0:
64:18:13:7e:f9:fd:27:fa:a1:3e:44:99:bd:ba:66:
0d:0c:73:b9:6e:0b:9a:1d:d6:47:cc:72:6f:58:ce:
84:a6:df:a7:cb:f1:5e:ac:8a:40:c9:55:8e:8b:ae:
bf:a3:ab:2b:94:6e:3d:46:9f:dc:91:fb:62:83:4c:
a4:af:78:ca:e3:58:70:bd:20:81:b5:8b:89:62:a8:
74:7c:d8:a0:a9:e7:c3:37:5c:8b:a7:c4:2a:88:83:
24:56:ec:80:e4:e1:db:13:c3:5f:79:f9:83:dd:08:
02:1f:b3:20:51:f5:66:9d:95:15:37:d1:1e:1b:08:
ee:14:a7:35:84:a2:e9:8f:43:16:cb:bf:25:ae:9f:
ea:f4:23:e8:ce:35:f1:42:81:ac:fb:ec:ae:85:96:
e2:18:4c:b6:50:8e:c2:a4:94:b2:ea:63:f6:2a:fb:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:6C:82:40:9D:38:00:FE:72:38:20:18:00:8D:12:D9:B6:61:55
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/Fw5sgkCdOAD-cjggGACNEtm2YVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.84.0/24
213.184.86.0/24
IPv6:
2a09:3a00:3000::/40
2a09:3a00:3a00::/40
2a09:3a00:4000::/40
Signature Algorithm: sha256WithRSAEncryption
49:ff:a4:36:66:5f:f2:ad:fe:42:32:79:ec:77:7b:49:66:5f:
a6:17:7c:a1:9f:00:54:ca:2a:9e:7d:ad:c4:b1:12:80:83:c4:
ab:91:e0:d8:8a:89:68:a5:72:db:44:c0:9b:83:b9:6e:e2:50:
f5:ad:76:1f:a7:2a:45:e7:c7:b9:a9:ae:e4:7a:a8:ec:00:12:
fb:05:49:48:da:16:29:3e:66:e4:c0:90:56:0c:33:e6:6c:4a:
59:d2:26:26:80:1c:19:ab:09:06:4d:5e:8f:a6:2d:16:f1:e6:
12:2b:55:11:15:31:4f:c6:c1:10:31:0c:5b:9c:65:4a:bc:6e:
de:3e:8f:fa:12:82:60:99:59:33:13:3f:53:61:26:1b:d9:c1:
53:1e:17:77:43:6b:54:d6:49:e8:d3:21:29:ec:12:40:a2:d7:
d7:a8:a0:95:5e:3f:e7:4c:44:7b:79:2a:43:e0:57:ad:5e:73:
8d:c7:74:a6:42:52:27:b4:5e:ce:1d:5f:2c:f1:8d:9e:ab:d4:
fb:8e:75:78:f9:33:23:b8:3e:32:ec:d6:7a:03:a1:ee:4f:a3:
46:c5:ff:e5:6f:2b:e8:5f:b7:d8:e9:a4:f8:4f:55:2f:cd:20:
3a:bf:08:96:31:91:7e:06:9d:3c:78:d6:04:fa:9a:2a:14:e8:
ce:55:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:48 2025 by rpki-client