Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Cz0N5woNGjB0cqPw-L7mVa2bzOE.roa
File: Cz0N5woNGjB0cqPw-L7mVa2bzOE.roa (raw, json)
Hash identifier: pWNJn8leZ4ADix3mVXEvYUEgxhdB+VC4gCb+vVP6734=
Subject key identifier: 0B:3D:0D:E7:0A:0D:1A:30:74:72:A3:F0:F8:BE:E6:55:AD:9B:CC:E1
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747FB8C8D832F4BA040AB2CEA48A6C3
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Cz0N5woNGjB0cqPw-L7mVa2bzOE.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200475
IP address blocks: 213.91.140.0/24 maxlen: 24
213.91.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fb:8c:8d:83:2f:4b:a0:40:ab:2c:ea:48:a6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b3d0de70a0d1a307472a3f0f8bee655ad9bcce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:17:8b:f0:19:5d:38:2f:9e:aa:62:53:2a:
a6:61:ba:da:9e:e2:6d:eb:3a:d0:5c:c1:a2:f3:40:
2e:20:29:1f:d8:15:fd:de:c2:94:c6:96:3a:99:2e:
00:10:cf:ae:df:e1:4d:a7:36:3e:bb:c2:a4:29:ff:
a0:ca:6f:c4:fe:a5:0c:7a:fb:eb:fd:64:85:59:c9:
22:be:ae:fc:53:d3:25:dc:8e:33:40:c6:5e:a1:b3:
04:ee:51:37:00:a8:6c:66:72:b1:98:8e:ab:10:45:
ca:06:5b:27:b4:1a:07:a1:d4:bb:b7:fc:e2:78:78:
20:09:39:97:d5:16:ff:34:73:27:27:57:eb:b6:d5:
36:88:fb:73:3c:68:da:15:6a:45:a2:82:c7:4e:dd:
51:a8:53:ce:2a:81:6e:24:7b:d7:5b:bd:41:fe:7f:
9a:c7:ca:db:01:ff:72:36:83:25:76:8a:b0:c7:f5:
7f:52:f4:6d:05:49:78:e5:aa:1b:c5:4a:04:86:18:
47:93:68:05:a8:e9:4d:3e:51:4b:fa:df:93:09:97:
8f:69:a6:f8:3f:8e:b8:8a:a6:b4:f4:51:bf:3f:be:
f5:a0:20:68:18:69:d0:62:d3:b5:14:27:bd:95:b5:
21:43:dc:c4:fb:f9:64:c8:4e:40:87:c9:33:63:7f:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3D:0D:E7:0A:0D:1A:30:74:72:A3:F0:F8:BE:E6:55:AD:9B:CC:E1
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Cz0N5woNGjB0cqPw-L7mVa2bzOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.140.0/24
213.91.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ec:d2:75:7e:c5:6e:d4:33:fb:9e:91:04:1a:a6:85:32:1a:
2b:18:55:6f:1b:4b:08:60:66:4c:4a:b1:12:1e:41:12:9e:e2:
d3:1f:93:57:03:4c:3e:32:67:18:9d:a0:89:4a:5b:0b:24:fd:
a9:df:a4:c0:c8:4a:1c:a9:6e:d4:9a:f1:b4:27:1b:dc:2a:da:
03:b8:70:a2:2e:30:aa:e3:bc:99:f5:c9:9c:92:71:c3:7e:98:
cf:be:67:a8:96:c1:98:08:d6:98:0f:6b:6e:34:e9:99:b2:8c:
58:0f:03:48:eb:7c:53:82:fb:06:21:ea:f5:af:95:71:a3:01:
1a:3b:c9:5b:dc:5c:d6:25:6f:c5:61:c4:fa:e8:63:96:4c:f2:
8b:b4:15:a6:fa:e3:e4:0d:bf:a4:d4:4a:c1:50:08:5c:c0:81:
4b:5c:13:2b:91:ac:d5:fa:a0:b2:10:53:3f:7c:bf:f2:13:d3:
db:7a:8b:63:b0:07:87:5f:b1:de:06:88:96:aa:ee:dd:c9:df:
3c:24:4b:63:c6:bf:5c:d2:3f:96:50:27:9e:3b:58:82:0d:1b:
2b:f2:c4:7c:cc:cc:fe:08:77:96:b9:79:a2:1c:96:24:76:04:
8d:a3:4d:d9:93:0f:bf:9f:3d:cf:e3:10:57:4d:d2:e0:0f:9b:
36:b7:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:50 2025 by rpki-client