Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/9o1bJHIY2DKstOflrYyuB4_xDJU.roa
File: 9o1bJHIY2DKstOflrYyuB4_xDJU.roa (raw, json)
Hash identifier: v84lCLYd/0h8qh/tv6tRvbnV7bRzw3VazSaPX2e1ubo=
Subject key identifier: F6:8D:5B:24:72:18:D8:32:AC:B4:E7:E5:AD:8C:AE:07:8F:F1:0C:95
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DFDF765C9EC23479B112D17471717
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/9o1bJHIY2DKstOflrYyuB4_xDJU.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 213.21.236.0/24 maxlen: 24
213.21.241.0/24 maxlen: 24
213.21.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fd:f7:65:c9:ec:23:47:9b:11:2d:17:47:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f68d5b247218d832acb4e7e5ad8cae078ff10c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:08:5a:45:19:3e:82:cc:38:4d:c0:75:f9:
fd:f5:60:b2:f0:03:47:b7:72:e7:05:c2:85:1e:b8:
54:7c:9e:c0:dd:b7:54:f6:0a:e7:d9:a1:33:9a:20:
8f:da:40:fb:dd:da:1b:18:33:ff:3a:5a:58:aa:21:
86:bb:49:45:01:70:33:22:80:70:00:a9:80:8c:df:
e7:95:79:cd:b0:8c:cb:94:69:fb:e7:5e:06:8e:f5:
a8:2b:6b:ed:80:7d:23:fc:79:9d:3b:6d:b8:31:d5:
15:e7:01:91:fa:f9:d9:8a:e6:38:ab:d2:9b:62:4c:
d8:0b:97:da:ab:ca:3c:83:27:4b:80:95:35:c4:56:
4a:f6:84:ed:71:c3:13:b9:2a:e5:0e:64:6c:77:ae:
f9:04:5b:cc:c3:60:45:13:75:46:d8:9a:12:22:39:
81:02:07:79:01:e6:45:f7:c2:18:75:1e:23:46:7e:
2f:c8:75:d0:a3:c7:58:f8:6b:c4:59:83:c7:fc:0a:
05:0d:4f:7f:e3:68:76:2e:f0:b5:d0:2b:6f:85:86:
d0:5b:c3:61:3d:15:22:73:ea:4b:cb:23:70:ed:50:
a5:2f:b7:fd:2c:86:66:78:d7:a2:d1:c8:7a:0d:3d:
ee:26:94:e7:46:cf:9d:7d:c6:32:b0:96:28:d1:3a:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8D:5B:24:72:18:D8:32:AC:B4:E7:E5:AD:8C:AE:07:8F:F1:0C:95
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/9o1bJHIY2DKstOflrYyuB4_xDJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/24
213.21.241.0/24
213.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1e:46:4c:7b:b2:22:26:5a:77:b8:86:b3:07:ef:04:16:45:
db:12:8a:04:37:7d:b0:9e:ef:24:8b:de:1a:1e:75:b8:6a:12:
11:ba:1f:b4:e7:57:0b:f6:95:09:09:de:65:7f:a2:fd:14:81:
e5:dd:0a:02:3e:fa:50:4f:26:d7:de:7d:1e:7d:ae:62:d5:8b:
4d:03:8f:25:3c:cc:6b:d9:cc:ba:da:ce:72:b2:72:d6:42:76:
36:fe:29:b8:59:ad:0c:99:82:54:cf:33:cf:e4:20:ed:fe:90:
50:f3:3b:c6:39:c9:70:1f:0d:b0:20:20:75:66:b4:c4:57:c3:
c1:4f:18:df:92:07:45:ad:b2:78:88:1d:a0:cc:30:36:e9:5f:
0a:28:f7:0d:ab:4f:74:fc:48:32:05:8a:9c:2e:6e:a5:79:60:
07:af:9d:ff:1c:3b:14:6c:8c:b4:53:9a:11:7a:a6:4c:fc:92:
19:8a:e9:52:fe:74:cc:4c:0e:37:c5:36:81:a2:c8:e4:42:a1:
41:4f:de:75:9a:95:11:a8:56:c5:14:5e:17:92:c5:30:a6:00:
fb:2e:09:df:5f:8a:88:a3:24:cc:b7:98:b4:0a:fd:2a:a9:3c:
20:f0:f1:b5:a0:5d:4d:d9:fc:1c:c2:dd:7e:a0:70:e0:57:21:
29:68:18:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:01:58 2025 by rpki-client