Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_dS3Wp0hpAQto9id7AmIeYwAhWc.roa
File: _dS3Wp0hpAQto9id7AmIeYwAhWc.roa (raw, json)
Hash identifier: M5wIwkeBgCRalaH7npDo5e4lcpLr3CwXakQFudFWsho=
Subject key identifier: FD:D4:B7:5A:9D:21:A4:04:2D:A3:D8:9D:EC:09:88:79:8C:00:85:67
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A42A23FEF637AB2151DAA879FFDE3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_dS3Wp0hpAQto9id7AmIeYwAhWc.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 213.190.22.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:a2:3f:ef:63:7a:b2:15:1d:aa:87:9f:fd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdd4b75a9d21a4042da3d89dec0988798c008567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:1d:ae:01:bb:42:78:9c:aa:50:37:c9:66:
5b:ad:50:57:f1:c5:71:85:45:88:5a:7f:06:d8:0b:
f6:f5:53:a7:c6:ef:b2:a8:57:70:0c:01:b3:56:bf:
41:21:25:c1:8b:ce:82:32:25:67:29:72:34:fa:a7:
9d:29:b5:6b:14:52:38:56:a8:3e:7c:f3:6e:cb:06:
60:70:14:ed:b0:27:84:6c:50:65:35:a8:24:52:45:
e2:0e:0b:9a:8c:60:89:c1:7f:ba:27:6d:43:e7:27:
9d:1d:3a:b3:1b:e2:01:49:1b:ce:6a:da:17:c8:b0:
76:8b:b5:e1:94:cb:fd:68:f9:fb:35:05:43:e6:55:
39:eb:2d:9d:c8:d2:b4:77:68:8e:02:38:03:ff:3b:
92:50:6d:79:ea:09:28:35:53:74:de:dd:b1:7f:fa:
c6:17:74:48:06:d4:90:fd:db:01:94:c6:72:68:05:
8d:2f:c1:e8:a8:d4:95:0c:a3:64:b2:29:a6:03:59:
b3:a4:7b:06:48:21:aa:b9:6c:90:2e:46:3c:32:12:
cb:e8:05:b5:c3:ff:67:c9:55:fb:42:ef:20:8f:ac:
02:8c:2c:b6:dc:65:8e:93:4e:be:da:30:fd:d2:93:
9f:09:07:58:40:5b:8f:88:7f:93:75:46:0e:80:eb:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:B7:5A:9D:21:A4:04:2D:A3:D8:9D:EC:09:88:79:8C:00:85:67
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_dS3Wp0hpAQto9id7AmIeYwAhWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.22.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7f:d7:d6:05:ea:67:45:74:bb:11:fe:90:b7:8b:c8:20:73:
af:f3:29:3e:28:5d:9f:03:5e:b3:75:e9:6a:a9:57:85:5b:2c:
42:3d:91:84:06:21:c1:13:c5:22:ab:64:cb:e2:13:7a:c9:02:
49:d4:85:ba:71:3e:33:1b:3c:f0:8a:3b:b8:ae:cd:5c:c9:96:
47:66:85:b5:dc:f8:7a:97:63:e0:da:5e:7a:23:ad:f2:eb:62:
c5:e1:5c:52:5a:7a:f9:10:0f:30:45:4e:e9:b3:2c:c8:e7:73:
ca:77:5a:68:31:9c:3b:d9:44:0e:4b:29:57:58:3a:49:c3:bd:
ae:1b:ec:9c:d1:52:cd:85:7e:b3:3f:3e:cb:cb:81:5a:8a:6f:
ee:85:57:5b:b5:00:81:d5:07:00:92:31:74:1f:5a:04:71:57:
95:c7:e7:73:25:3d:e2:f6:0b:70:50:b2:d4:5b:13:b7:86:54:
3a:e9:00:cf:55:f6:b6:92:30:ce:1d:90:2f:3c:20:fe:c4:b5:
6c:db:6a:d9:83:92:10:96:7f:2d:d7:59:b6:d0:b0:2f:20:09:
18:bf:ac:f9:39:8f:b5:4e:77:17:f7:1e:fd:61:41:ca:35:4d:
a8:14:52:b5:7f:05:22:75:e8:3b:bb:49:39:d7:1a:b8:68:4f:
47:f0:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:36 2025 by rpki-client