Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/m2JX0VChyIKbZuohjR-xzqFDaSU.roa
File: m2JX0VChyIKbZuohjR-xzqFDaSU.roa (raw, json)
Hash identifier: OO9L+yt5qiGYEVubBctGlY/Wh8GAzgfhII6asrTVSg0=
Subject key identifier: 9B:62:57:D1:50:A1:C8:82:9B:66:EA:21:8D:1F:B1:CE:A1:43:69:25
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 0192ADBADAFD0896BF4F4F7440AC340E2313
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/m2JX0VChyIKbZuohjR-xzqFDaSU.roa
Signing time: Mon 21 Oct 2024 06:19:17 +0000
ROA not before: Mon 21 Oct 2024 06:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59795
IP address blocks: 213.184.84.0/24 maxlen: 24
213.184.86.0/24 maxlen: 24
2a09:3a00:3a00::/40 maxlen: 40
2a09:3a00:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:ba:da:fd:08:96:bf:4f:4f:74:40:ac:34:0e:23:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Oct 21 06:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b6257d150a1c8829b66ea218d1fb1cea1436925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:64:31:22:11:f2:0c:c5:b0:18:ac:e5:0f:
bd:87:ac:72:e0:de:c1:17:e2:47:4a:ec:9d:2b:a6:
99:d1:bd:de:a2:e3:18:e0:47:5a:0f:91:33:a3:c0:
60:39:cd:28:d9:3a:de:c6:fa:cd:8d:fa:a5:97:23:
aa:2d:7e:5d:54:a6:57:2d:ca:af:6d:cf:e9:fc:6e:
70:c5:e3:63:44:18:17:28:c1:98:e4:ab:03:ac:4b:
77:50:e0:e5:f7:19:a3:66:bb:38:17:93:1e:04:26:
01:a9:df:83:1a:7a:19:98:2e:5c:14:ca:ca:4b:6d:
a1:12:70:c5:e1:0a:ae:2a:4c:4c:72:5f:cd:82:ec:
8b:be:5f:3f:99:2d:ed:06:30:38:11:74:f5:3e:8e:
3e:f5:ce:68:30:83:04:e4:22:a4:ff:cc:ea:89:48:
9d:61:f3:20:c2:d4:5c:99:7b:9e:01:04:a5:cb:34:
ca:7d:42:cf:82:86:26:af:65:70:29:38:00:ac:f5:
57:91:e8:d6:bb:8f:57:bc:56:a0:4a:47:fe:fc:e2:
c9:f0:17:d2:3b:80:fc:14:51:96:5c:4b:e3:02:e6:
b6:fa:32:92:05:3a:79:7f:b7:f5:cf:fc:6a:c0:c6:
80:20:3e:d7:15:a9:97:7a:e3:17:7e:85:af:bc:19:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:62:57:D1:50:A1:C8:82:9B:66:EA:21:8D:1F:B1:CE:A1:43:69:25
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/m2JX0VChyIKbZuohjR-xzqFDaSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.84.0/24
213.184.86.0/24
IPv6:
2a09:3a00:3a00::/40
2a09:3a00:4000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:42:f3:2c:c0:3c:ae:73:19:38:9e:87:a5:08:0d:9d:bb:9e:
25:51:ed:95:44:a6:d8:eb:eb:2e:e1:d9:8c:d9:4f:be:4c:19:
b9:de:8d:d3:45:cf:56:2f:84:2a:12:bd:55:c3:dc:1c:4c:ae:
af:bc:ae:c7:c2:f3:c2:a5:dc:d4:b5:3c:16:fc:40:30:c6:81:
5c:66:9b:79:b5:95:98:4c:38:44:28:45:e8:84:d6:2c:ef:ec:
48:a6:2d:1e:9f:9f:4e:f0:70:38:72:6e:85:6f:db:6e:86:d8:
b5:d1:59:24:ae:37:2d:17:67:0c:7d:fd:54:71:11:c2:75:dd:
e3:56:87:5d:96:89:68:7b:db:23:5c:b0:5b:22:fa:a3:55:07:
45:23:89:36:57:cf:c6:53:a9:c2:33:77:bc:2a:b2:bb:9c:dc:
ec:01:52:65:c4:ac:91:dd:02:15:93:2c:5e:46:77:99:b9:69:
d2:ff:1e:5d:62:84:c1:92:1c:16:e9:6a:82:55:69:7e:1e:b0:
bf:dc:51:a3:48:a6:2f:79:3a:df:5e:83:99:5c:ad:23:f0:7b:
7f:00:c9:d6:ea:3f:f0:ea:e9:03:0c:4a:6c:1a:0a:71:0b:73:
d6:59:b5:00:5b:a6:ec:64:61:b8:f6:dd:8c:e2:42:47:ef:8c:
ec:be:57:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:56 2025 by rpki-client