Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RtChzW9qjTAhvgBXjZwm9_e1TbM.roa
File: RtChzW9qjTAhvgBXjZwm9_e1TbM.roa (raw, json)
Hash identifier: ipAoRvD42mckzkrSz/qS5Ft8UtlbD8DLnPwkwcm/ELo=
Subject key identifier: 46:D0:A1:CD:6F:6A:8D:30:21:BE:00:57:8D:9C:26:F7:F7:B5:4D:B3
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019387237CD509AA066E773DDF23C5B7BC41
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RtChzW9qjTAhvgBXjZwm9_e1TbM.roa
Signing time: Mon 02 Dec 2024 11:31:10 +0000
ROA not before: Mon 02 Dec 2024 11:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:23:7c:d5:09:aa:06:6e:77:3d:df:23:c5:b7:bc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 2 11:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46d0a1cd6f6a8d3021be00578d9c26f7f7b54db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:25:74:53:ad:32:fd:20:0a:1d:70:c6:1d:
fb:1e:81:5a:35:dd:e8:5d:fc:dc:2d:eb:0a:80:89:
14:92:4a:3c:97:e8:3c:da:d5:7a:40:76:11:69:21:
b2:4d:a4:66:d4:ba:5f:4a:cb:9d:d2:38:7f:16:2c:
e1:fb:51:5a:59:ac:84:83:0f:77:74:2d:12:03:0a:
e6:0a:08:be:cb:13:d4:ad:b1:4e:bb:e9:89:16:e2:
00:8a:24:a7:83:71:db:40:79:f5:3e:fe:17:99:25:
fc:c8:95:b8:75:bd:01:a1:1a:b9:f3:bc:83:c4:25:
c5:c5:4f:88:65:ef:5d:24:66:f4:d1:45:82:93:87:
50:55:ac:8b:00:48:29:6a:0f:9e:22:2b:dd:49:ac:
af:7e:d4:43:b9:fb:9b:fa:fb:55:d9:f8:4c:55:3a:
84:07:7f:c4:c5:31:32:74:e6:91:8d:42:8e:10:cd:
64:f9:e8:4f:4a:06:4b:42:d1:16:e4:1b:00:9b:68:
93:46:9e:c1:de:5d:6e:c3:3c:05:54:04:03:0b:e1:
47:b0:48:08:d6:02:a7:c7:7a:a2:56:4f:7f:03:46:
2d:ce:41:2d:2e:a9:14:a0:44:4e:2f:dc:f9:b9:90:
26:c1:bb:b0:16:c5:ba:8d:1f:4c:2b:5d:af:6d:e9:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:A1:CD:6F:6A:8D:30:21:BE:00:57:8D:9C:26:F7:F7:B5:4D:B3
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RtChzW9qjTAhvgBXjZwm9_e1TbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:48:3e:cf:2f:be:c9:91:d6:18:8b:c1:82:eb:88:e8:a9:1f:
8d:60:c1:9b:1a:a9:22:23:82:9d:16:b1:0d:17:b2:32:c2:0f:
fb:69:3f:a8:7a:a7:38:39:41:58:c9:08:42:f7:08:25:25:31:
96:34:90:eb:9a:e3:34:47:c4:83:8d:c0:5a:b2:ea:75:a5:5a:
2d:b8:8d:bd:a3:c7:a4:5b:b7:22:7d:2c:e3:ac:7e:d8:2f:08:
65:6e:9f:bc:ec:d4:62:87:d5:6d:94:2c:6e:9b:15:b2:b8:c3:
be:66:3c:7f:fc:ea:50:8f:71:fe:93:59:3e:63:6a:e2:61:03:
ec:2b:7f:ef:bc:36:e2:8d:8e:32:73:69:8d:9d:36:be:6a:40:
9c:fd:3c:b4:9c:8f:7b:a8:a3:da:13:31:54:18:8b:d8:8f:a6:
cb:0d:bb:fb:2f:07:23:c4:60:e5:34:62:ee:95:a7:5f:9e:24:
96:7f:97:37:72:b6:92:26:aa:c1:ab:0f:32:e5:fe:ef:df:18:
e9:79:51:35:53:f9:38:de:b8:e7:ee:1d:40:05:d6:23:24:1f:
fa:c2:c8:06:4b:82:6c:9f:32:d7:d3:1f:88:48:73:17:23:d1:
72:db:22:29:58:5c:2b:cf:5e:5b:2a:55:a2:41:98:d9:01:ab:
ec:99:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:02 2025 by rpki-client