Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1WhmCNdV46akTWjdNSLb7xvYYGY.roa
File: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (raw, json)
Hash identifier: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=
Subject key identifier: D5:68:66:08:D7:55:E3:A6:A4:4D:68:DD:35:22:DB:EF:1B:D8:60:66
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DFB3C0CF235765FA81913FCB5F6A4
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1WhmCNdV46akTWjdNSLb7xvYYGY.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fb:3c:0c:f2:35:76:5f:a8:19:13:fc:b5:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5686608d755e3a6a44d68dd3522dbef1bd86066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:96:bc:d9:2b:e7:09:40:61:79:a5:ef:f7:
13:59:5f:9b:f5:4b:35:b3:e2:81:e7:3d:28:f3:e5:
a0:db:0b:0e:a0:87:8d:27:4c:9e:43:d7:83:5f:1f:
59:70:d9:3e:6e:11:ad:3f:5a:b8:0d:7a:70:c1:33:
d7:d6:66:34:20:64:d7:9d:4a:7e:ad:0a:4c:86:7b:
fa:63:a4:be:67:42:4b:90:e1:5a:83:59:55:4b:44:
45:6b:4b:fa:a2:ae:c3:c8:3e:f6:e0:b6:67:c3:e1:
e4:d0:65:f8:f5:38:b0:3a:11:ee:31:d2:ba:f5:cc:
9c:c4:2e:14:f4:aa:31:ae:53:cd:65:84:1e:f7:9c:
25:f8:2c:e4:8e:ba:58:a6:e9:c4:d1:08:12:0c:7c:
93:ac:77:46:93:42:75:c2:26:4f:4c:5d:64:cd:0e:
58:42:bf:dc:79:32:24:a9:c5:a5:4f:6e:68:b2:9d:
20:c0:e2:8c:ee:85:e6:75:58:8c:23:6a:19:a7:37:
24:59:56:f9:67:c9:eb:65:73:f1:1f:0d:8b:26:51:
50:88:e0:38:14:3f:3d:a9:e0:0b:ba:ea:64:9e:0a:
22:16:a3:b3:a5:1c:23:34:94:bf:14:50:4a:c1:6c:
e1:27:f8:0f:2b:f6:8f:36:5e:f8:a7:26:ef:46:6e:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:66:08:D7:55:E3:A6:A4:4D:68:DD:35:22:DB:EF:1B:D8:60:66
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1WhmCNdV46akTWjdNSLb7xvYYGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.244.0/24
Signature Algorithm: sha256WithRSAEncryption
33:42:5d:53:ab:13:48:79:37:3a:bb:75:54:a6:f8:e9:73:60:
4e:ee:6e:be:c4:fa:47:d3:60:30:5f:9d:de:b6:c5:4f:23:54:
55:44:64:e3:8e:6b:a0:e4:c7:fc:8e:77:0e:3d:0e:78:2e:6c:
b0:e7:3a:fb:f1:72:0b:e7:00:e5:25:68:0c:bd:ce:41:5d:58:
69:e7:22:3e:f7:59:2f:fa:a5:eb:19:f5:35:6f:ce:ac:6a:c7:
a2:d3:8d:dd:de:28:6f:f0:1d:1a:41:5b:ba:fa:86:c4:ff:ab:
6a:73:72:4d:95:03:e3:aa:17:21:9a:b6:ff:b5:ec:7e:57:fd:
c7:2d:2b:48:f2:92:ae:c7:78:2a:03:09:d2:d0:e3:12:03:14:
c8:57:8f:9d:aa:40:00:b7:73:20:7c:33:68:bd:73:30:45:1c:
17:35:3d:3a:62:89:73:9a:44:29:7c:33:15:0e:f9:7d:9f:67:
0a:25:d8:4f:5c:3f:16:31:00:91:aa:3b:51:a9:8c:65:7f:83:
ee:80:e4:66:f9:cd:cc:57:24:65:8c:c0:c1:87:98:39:12:64:
6f:05:e0:60:95:9f:52:fe:b9:78:d3:67:f1:4a:98:a5:42:88:
61:11:5d:6a:d0:7f:69:1d:fa:12:ea:45:ac:c5:1d:86:9a:a5:
67:17:97:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijfs8DPI1dl+oGRP8tfakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjUwMTAxMTU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTY4NjYwOGQ3NTVlM2E2YTQ0ZDY4ZGQzNTIyZGJlZjFiZDg2MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3SWvNkr5wlAYXml7/cTWV+b9Us1
s+KB5z0o8+Wg2wsOoIeNJ0yeQ9eDXx9ZcNk+bhGtP1q4DXpwwTPX1mY0IGTXnUp+
rQpMhnv6Y6S+Z0JLkOFag1lVS0RFa0v6oq7DyD724LZnw+Hk0GX49TiwOhHuMdK6
9cycxC4U9KoxrlPNZYQe95wl+CzkjrpYpunE0QgSDHyTrHdGk0J1wiZPTF1kzQ5Y
Qr/ceTIkqcWlT25osp0gwOKM7oXmdViMI2oZpzckWVb5Z8nrZXPxHw2LJlFQiOA4
FD89qeALuupkngoiFqOzpRwjNJS/FFBKwWzhJ/gPK/aPNl74pybvRm6exQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNVoZgjXVeOmpE1o3TUi2+8b2GBmMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvMVdobUNOZFY0NmFrVFdqZE5TTGI3eHZZWUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXnAwQA
1RX0MA0GCSqGSIb3DQEBCwUAA4IBAQAzQl1TqxNIeTc6u3VUpvjpc2BO7m6+xPpH
02AwX53etsVPI1RVRGTjjmug5Mf8jncOPQ54Lmyw5zr78XIL5wDlJWgMvc5BXVhp
5yI+91kv+qXrGfU1b86sasei043d3ihv8B0aQVu6+obE/6tqc3JNlQPjqhchmrb/
tex+V/3HLStI8pKux3gqAwnS0OMSAxTIV4+dqkAAt3MgfDNovXMwRRwXNT06Yolz
mkQpfDMVDvl9n2cKJdhPXD8WMQCRqjtRqYxlf4PugORm+c3MVyRljMDBh5g5EmRv
BeBglZ9S/rl402fxSpilQohhEV1q0H9pHfoS6kWsxR2GmqVnF5ei
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:04 2025 by rpki-client