Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/A0vsL2z_xaeExEMFhErE3dgWYuI.roa
File: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (raw, json)
Hash identifier: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=
Subject key identifier: 03:4B:EC:2F:6C:FF:C5:A7:84:C4:43:05:84:4A:C4:DD:D8:16:62:E2
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019421B18DC02411D3C45CB4E52C08D9D31E
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/A0vsL2z_xaeExEMFhErE3dgWYuI.roa
Signing time: Wed 01 Jan 2025 11:47:51 +0000
ROA not before: Wed 01 Jan 2025 11:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16267
IP address blocks: 213.146.0.0/19 maxlen: 19
2a01:4960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8d:c0:24:11:d3:c4:5c:b4:e5:2c:08:d9:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034bec2f6cffc5a784c44305844ac4ddd81662e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:f3:97:1e:52:0f:04:81:72:63:85:ad:67:
96:e7:23:93:db:a2:47:6c:4c:7a:47:99:bd:9a:a0:
98:16:2e:c5:38:6a:d4:89:a5:00:74:aa:a7:cc:ed:
a9:ff:8e:74:99:91:6f:93:75:96:57:f9:8b:af:8e:
6a:0c:38:36:8d:21:79:17:00:b0:a8:c5:f2:63:c0:
e9:40:eb:53:99:ad:f6:fa:a5:20:e0:93:b4:4f:a9:
f4:ed:03:01:96:3d:f5:e9:2a:f4:aa:ec:b3:98:31:
35:28:c2:e0:78:75:80:1d:34:a4:78:ee:20:fe:da:
4a:0b:ad:3f:40:0a:14:0e:ba:a0:74:43:c5:db:ed:
c7:14:93:af:47:bf:f7:8b:4e:5f:2e:10:ae:2c:60:
f7:69:5f:aa:bd:70:98:27:d3:28:c3:69:ff:f4:49:
cb:a4:56:e6:d5:5e:47:8e:7f:47:86:d2:ec:5b:40:
80:18:98:1b:1b:73:d6:6c:c3:7e:20:f4:0c:ed:a4:
08:5e:aa:e6:05:06:ff:0d:c5:4a:85:b7:b8:67:36:
48:1d:f0:58:17:43:12:cb:62:2a:7f:96:44:5f:2c:
2d:a2:8f:a2:c8:1b:81:de:a3:4c:81:54:a9:b5:9d:
a8:51:14:51:f3:6e:be:b0:6a:99:ad:f1:d0:d3:10:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:EC:2F:6C:FF:C5:A7:84:C4:43:05:84:4A:C4:DD:D8:16:62:E2
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/A0vsL2z_xaeExEMFhErE3dgWYuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.146.0.0/19
IPv6:
2a01:4960::/32
Signature Algorithm: sha256WithRSAEncryption
3a:b5:5e:4f:ae:2b:59:6e:52:9e:7c:0c:a9:d6:7c:94:f6:89:
fe:f2:bb:e6:31:f8:1a:f0:4f:ec:63:98:33:69:d3:7d:6f:55:
a0:64:ad:0d:4e:93:f5:d7:b8:ce:e8:f4:cd:21:d2:6f:5b:15:
c6:4e:11:cd:9f:dd:f6:4b:fc:12:3d:c4:ac:aa:d3:da:7c:88:
c4:4b:71:36:cc:06:8c:c8:f7:83:bb:4c:55:f0:e7:c4:44:37:
c1:4d:6f:62:11:83:20:df:af:c8:37:16:2c:44:fd:04:62:5e:
fd:20:9d:4c:2c:a0:8c:e4:be:26:05:57:21:08:45:fa:76:e5:
8c:fb:65:c4:1c:09:eb:9a:94:c0:e6:37:c3:e1:bf:e7:2d:50:
e7:57:90:b5:90:ba:ac:31:21:1f:b4:78:04:cb:b9:5b:08:c8:
ed:f5:3c:95:eb:a0:0a:1d:e0:bc:1e:66:71:97:dc:b2:b3:b1:
f8:b1:ae:fa:8a:ca:0e:05:0c:07:a2:96:14:fb:02:5b:6e:95:
bd:91:08:ac:77:a1:98:99:f0:a3:89:08:ae:d3:d9:8e:52:ba:
59:d2:da:7f:35:b9:42:42:2e:f5:22:8a:a3:ff:76:be:bb:c2:
c9:58:f8:6e:5e:64:7d:dc:51:e6:0e:34:fa:59:76:99:ff:96:
ef:00:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:42 2025 by rpki-client