Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/PkKwn16bpB0gLF9vU4EldEuV1BU.roa
File: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (raw, json)
Hash identifier: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=
Subject key identifier: 3E:42:B0:9F:5E:9B:A4:1D:20:2C:5F:6F:53:81:25:74:4B:95:D4:15
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01942143B3918504D33608C423E5C7E06E38
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/PkKwn16bpB0gLF9vU4EldEuV1BU.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40306
IP address blocks: 213.209.176.0/24 maxlen: 24
213.209.177.0/24 maxlen: 24
213.209.178.0/24 maxlen: 24
213.209.180.0/24 maxlen: 24
213.209.181.0/24 maxlen: 24
213.209.181.128/26 maxlen: 26
213.209.182.0/24 maxlen: 24
213.209.183.0/24 maxlen: 24
213.209.188.0/24 maxlen: 24
213.209.189.0/24 maxlen: 24
213.209.190.0/24 maxlen: 24
213.209.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b3:91:85:04:d3:36:08:c4:23:e5:c7:e0:6e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e42b09f5e9ba41d202c5f6f538125744b95d415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:f1:68:b4:a0:e5:f6:f1:1e:50:dd:ea:06:
d3:50:56:72:2b:75:7b:03:a6:92:55:e8:3d:27:e3:
f7:f2:1e:a5:e3:ca:9b:3a:46:b3:85:5f:d2:b7:65:
bb:3a:5a:36:53:92:ec:ec:68:48:d5:34:0a:00:80:
8d:ae:a0:93:cd:5b:3d:17:b5:66:cb:16:82:a4:5c:
ff:f0:b3:e2:77:7d:e1:b8:a3:de:68:69:06:9f:b9:
65:03:7b:30:ef:33:b1:f7:69:bb:8f:87:71:3e:30:
7a:7b:a4:d5:93:7c:f9:44:21:ab:95:d1:f0:8a:5c:
50:f9:55:a8:ff:65:30:07:73:53:f7:80:a9:8b:78:
7b:a4:0e:96:db:ec:04:85:53:6f:5b:7d:f4:22:9b:
f0:e6:bf:39:8a:4e:d5:96:31:d4:c4:3c:72:c5:13:
3a:f9:36:ed:56:71:34:7c:1b:35:10:63:3b:b0:20:
21:71:6a:77:aa:4f:5f:4f:46:fb:b0:a0:37:0d:ef:
45:e4:c9:9a:a3:5f:0d:f4:0b:fe:1c:05:13:ed:ad:
56:45:87:f2:9b:34:06:6d:ce:a6:66:e2:87:6e:55:
de:dc:ba:24:21:b9:ef:a2:6a:1d:04:cc:87:8c:d9:
4c:e5:fe:6b:47:f0:bc:11:6a:55:d8:99:f1:16:21:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:B0:9F:5E:9B:A4:1D:20:2C:5F:6F:53:81:25:74:4B:95:D4:15
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/PkKwn16bpB0gLF9vU4EldEuV1BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.176.0-213.209.178.255
213.209.180.0/22
213.209.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:f2:56:9d:ad:d9:07:b3:82:d8:9a:f9:10:14:1f:0a:01:22:
53:13:99:af:cd:86:28:55:69:c7:98:c0:a2:1e:6f:27:49:da:
22:9a:28:10:40:da:c8:a3:0d:39:35:13:37:34:16:23:09:0b:
02:fa:2d:bd:02:9e:61:62:0b:5c:e6:8b:2f:f3:f7:aa:2b:6e:
9e:1b:16:92:72:2e:c3:15:15:7e:8c:40:95:e3:aa:a6:e1:0b:
2d:28:25:bd:40:65:7e:35:a4:fb:07:7a:3c:2b:36:d1:e3:11:
6b:d7:78:96:8e:f6:ee:a4:06:a8:d4:09:f5:2a:1a:03:6a:b5:
eb:d8:e4:20:ba:21:27:6d:e5:6b:2b:ab:79:41:5d:64:32:a7:
73:1b:ec:d7:eb:e2:6e:11:78:0e:8c:0e:44:34:41:e4:cd:b6:
11:c1:ba:c8:cd:e4:b5:7b:d5:e7:d1:26:bf:dd:3d:35:5f:26:
cb:74:f0:7e:7e:45:1b:69:68:38:7b:ee:1b:da:de:29:48:23:
ac:d9:2e:e2:ea:25:4a:ca:61:9e:ee:25:b7:29:33:0a:36:02:
15:75:b0:53:e6:fb:50:da:65:29:86:bb:5b:e9:6b:ff:d5:86:
d7:0a:83:36:84:0f:21:15:61:c0:cb:9c:a6:17:f5:d7:9f:a5:
ff:73:bc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:25 2025 by rpki-client