Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/zZ0BmHRRPfoK6Ad6r7JUPQaV2fQ.roa
File: zZ0BmHRRPfoK6Ad6r7JUPQaV2fQ.roa (raw, json)
Hash identifier: wDIDXWpUJ42l4QREKMFnhHXWixU+QFlpdDUrk4Y52ts=
Subject key identifier: CD:9D:01:98:74:51:3D:FA:0A:E8:07:7A:AF:B2:54:3D:06:95:D9:F4
Certificate issuer: /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial: 018779A7EFC4611DD06F7987385B5B07B9F8
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/zZ0BmHRRPfoK6Ad6r7JUPQaV2fQ.roa
Signing time: Thu 13 Apr 2023 08:07:41 +0000
ROA not before: Thu 13 Apr 2023 08:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 213.178.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:a7:ef:c4:61:1d:d0:6f:79:87:38:5b:5b:07:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Validity
Not Before: Apr 13 08:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd9d019874513dfa0ae8077aafb2543d0695d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:9a:96:d7:b3:2f:19:9b:32:19:8f:52:aa:
e8:1e:e7:74:e5:1b:54:27:12:f8:90:da:51:1a:6b:
e4:ce:d6:51:ca:7e:5e:59:4e:57:b7:28:59:5b:32:
8a:84:ba:db:0e:bf:cd:1d:c8:c6:42:6f:64:fa:cc:
d0:9b:e0:14:f2:32:6e:dc:b5:12:11:1e:7b:c2:d9:
5d:3d:cc:71:b9:a6:fb:14:ec:58:0d:63:18:47:a2:
f9:32:85:93:ed:82:be:39:19:56:99:56:bb:8e:47:
a3:56:0a:52:e9:14:1d:cd:57:6a:67:9b:93:6f:27:
74:4a:24:93:e2:ff:ca:3a:da:88:89:10:4f:d6:8d:
0d:99:48:2e:6d:31:3f:af:a0:67:25:dd:dc:95:16:
0d:72:bc:cc:23:74:10:87:33:cd:88:92:8a:cb:da:
ff:59:a4:91:8b:79:d0:e9:0b:b3:7d:78:a6:34:8f:
84:af:49:8f:33:14:79:d5:75:28:f3:41:85:32:6e:
29:d8:9f:e4:04:51:f6:46:b9:26:0c:48:8a:be:a7:
aa:82:f1:07:3e:a3:26:13:7c:a8:44:bb:03:1d:65:
f2:b8:d2:85:e1:19:21:ca:64:25:70:60:4f:e8:a0:
b2:9a:ea:1b:b8:df:00:ed:83:75:81:2b:eb:7f:15:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:01:98:74:51:3D:FA:0A:E8:07:7A:AF:B2:54:3D:06:95:D9:F4
X509v3 Authority Key Identifier:
keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/zZ0BmHRRPfoK6Ad6r7JUPQaV2fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:e5:f4:9d:bf:6e:cc:fb:df:c3:3f:10:48:a2:f8:5d:da:b4:
d0:4b:64:7f:76:76:fd:dd:7d:d6:fd:db:dd:b0:fa:7e:c1:b0:
b7:ed:1d:3b:f5:9d:ca:6e:87:bb:04:5c:72:fb:5c:3f:2c:e6:
ef:cc:8a:7b:cc:8c:d9:d9:87:39:18:57:51:f6:26:e9:ba:68:
70:a0:4c:2b:af:56:83:cc:b5:64:b9:2d:c0:cb:1b:79:c9:e7:
4a:98:8a:0b:43:84:b4:e3:a7:71:11:ce:ee:db:4f:58:8b:5e:
fc:f2:58:dd:fa:59:30:a6:b3:73:9a:69:45:b5:4d:3d:8b:6c:
7c:3d:d7:ad:9f:78:4c:8d:45:a5:aa:46:24:bc:8b:30:51:86:
58:79:46:19:19:11:10:08:89:47:cd:0c:78:fc:0b:6e:b3:9f:
54:bd:2f:6b:1e:d9:e5:f8:4d:ea:56:e7:94:7b:76:e9:44:0f:
7f:d4:02:b9:e2:05:5f:da:12:e9:f0:af:a5:e2:29:4b:ed:4b:
5a:96:2c:cb:53:23:08:02:b6:36:bd:51:32:d1:58:8a:d3:0c:
b2:dc:f1:6b:ad:af:9b:9f:6f:b2:4a:b4:41:b6:27:01:b2:47:
ce:48:90:42:18:e3:69:d2:27:3a:4f:bf:52:bd:79:f7:4a:51:
2f:a6:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:26 2025 by rpki-client