Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/DhNK6wzjByDnasFkDiVozXApAMA.roa
File: DhNK6wzjByDnasFkDiVozXApAMA.roa (raw, json)
Hash identifier: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=
Subject key identifier: 0E:13:4A:EB:0C:E3:07:20:E7:6A:C1:64:0E:25:68:CD:70:29:00:C0
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 0194244480573EF3CA85B02637EAE9105AB0
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/DhNK6wzjByDnasFkDiVozXApAMA.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21100
IP address blocks: 213.134.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:80:57:3e:f3:ca:85:b0:26:37:ea:e9:10:5a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e134aeb0ce30720e76ac1640e2568cd702900c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0a:08:ec:60:b2:f5:9a:76:6a:9c:c4:c6:ac:
57:94:5e:d8:42:c2:fd:76:f1:c8:7d:b1:dd:ad:94:
fa:9a:7b:44:60:d8:c6:e6:08:d3:b2:25:ec:b5:ca:
80:17:a1:f5:14:fd:48:da:02:64:31:51:86:cc:ab:
a1:36:c2:c6:a5:f4:00:42:49:97:ca:31:30:86:0e:
ac:44:de:69:24:f5:90:3d:48:e9:38:33:ec:92:9c:
20:eb:53:12:6f:63:4e:15:f4:e3:bf:33:32:4f:c2:
4d:09:41:42:b9:45:15:ae:ea:80:04:d7:0e:7f:4c:
fe:b4:60:a1:1a:fd:72:77:60:52:b0:e3:97:fc:3b:
1a:5c:0c:dc:02:ef:63:88:ad:c0:b6:83:a9:35:d9:
a1:39:77:72:25:8d:f5:03:eb:46:a5:7d:05:1d:c2:
c4:36:99:2c:fa:e5:6e:af:08:41:73:4c:fe:0f:d3:
70:16:f7:92:82:f8:66:9b:83:2c:19:a9:93:40:71:
af:5a:64:b7:8c:ba:cb:92:b5:f8:0a:2d:1b:0e:d5:
bf:70:a0:50:c0:8f:4c:97:de:fe:94:fd:b5:51:46:
c9:c6:54:39:ec:2d:db:09:f8:1c:7e:97:7f:a5:be:
b5:3e:c5:f9:7e:5f:76:96:ef:0f:3d:79:c2:62:34:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:4A:EB:0C:E3:07:20:E7:6A:C1:64:0E:25:68:CD:70:29:00:C0
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/DhNK6wzjByDnasFkDiVozXApAMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.2.0/24
Signature Algorithm: sha256WithRSAEncryption
70:be:78:44:78:aa:25:12:82:8c:33:91:0c:fc:be:05:a4:d9:
53:46:e7:74:0d:eb:33:b7:9c:3d:dd:55:2f:7b:56:38:22:32:
62:5e:cb:47:2a:5a:43:fe:2b:dd:3d:73:59:f5:0e:87:be:63:
97:2d:c0:1e:af:20:63:42:fd:9e:2c:a7:1c:e5:2e:71:23:48:
5b:ae:06:78:4f:99:f3:22:d3:f8:b3:0d:0d:9b:32:39:9d:44:
c7:21:7f:a6:38:0f:8d:de:9f:cc:dd:87:d7:3e:60:e9:6a:ed:
1a:58:89:27:be:30:1e:f4:84:77:fc:3c:ec:76:2f:ac:50:10:
8d:ce:d9:0f:cf:27:d5:7d:a2:60:52:ed:a7:e0:9c:19:8a:a4:
7a:ed:09:36:9c:ba:eb:5b:6e:f7:7a:40:26:49:6f:be:7f:56:
92:65:1c:39:fa:b4:65:a4:fd:68:8f:68:93:b5:2d:68:32:26:
ff:dc:8d:b1:e2:96:9b:fe:07:b5:7b:f9:d7:ec:45:e7:27:16:
8e:97:e7:69:ae:4e:48:84:97:81:73:49:89:20:fb:dd:22:fc:
19:67:2a:44:8e:a4:75:29:25:e9:9f:1d:f7:b4:3b:c9:9e:1e:
69:f0:01:f8:2c:ce:c4:9a:5e:e2:d7:2d:8a:dc:b2:bd:b8:c2:
e0:22:42:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRIBXPvPKhbAmN+rpEFqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODBhNTYxMDExMmRmMjAzOTg3ZjMyZjBlNWUxNWFkMzVl
NzEwZDIwHhcNMjUwMTAxMjM0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTEzNGFlYjBjZTMwNzIwZTc2YWMxNjQwZTI1NjhjZDcwMjkwMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9goI7GCy9Zp2apzExqxXlF7YQsL9
dvHIfbHdrZT6mntEYNjG5gjTsiXstcqAF6H1FP1I2gJkMVGGzKuhNsLGpfQAQkmX
yjEwhg6sRN5pJPWQPUjpODPskpwg61MSb2NOFfTjvzMyT8JNCUFCuUUVruqABNcO
f0z+tGChGv1yd2BSsOOX/DsaXAzcAu9jiK3AtoOpNdmhOXdyJY31A+tGpX0FHcLE
Npks+uVurwhBc0z+D9NwFveSgvhmm4MsGamTQHGvWmS3jLrLkrX4Ci0bDtW/cKBQ
wI9Ml97+lP21UUbJxlQ57C3bCfgcfpd/pb61PsX5fl92lu8PPXnCYjRo3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4TSusM4wcg52rBZA4laM1wKQDAMB8GA1UdIwQY
MBaAFOaApWEBEt8gOYfzLw5eFa015xDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjIt
ZDE1MDJmN2NmMjM0LzEvRGhOSzZ3empCeURuYXNGa0RpVm96WEFwQU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjItZDE1MDJmN2NmMjM0
LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YYCMA0G
CSqGSIb3DQEBCwUAA4IBAQBwvnhEeKolEoKMM5EM/L4FpNlTRud0Deszt5w93VUv
e1Y4IjJiXstHKlpD/ivdPXNZ9Q6HvmOXLcAeryBjQv2eLKcc5S5xI0hbrgZ4T5nz
ItP4sw0NmzI5nUTHIX+mOA+N3p/M3YfXPmDpau0aWIknvjAe9IR3/Dzsdi+sUBCN
ztkPzyfVfaJgUu2n4JwZiqR67Qk2nLrrW273ekAmSW++f1aSZRw5+rRlpP1oj2iT
tS1oMib/3I2x4pab/ge1e/nX7EXnJxaOl+dprk5IhJeBc0mJIPvdIvwZZypEjqR1
KSXpnx33tDvJnh5p8AH4LM7Eml7i1y2K3LK9uMLgIkKW
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:53 2025 by rpki-client