Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/X96VTK9nSDsk7pqUPrR6sIFv2Pw.roa
File: X96VTK9nSDsk7pqUPrR6sIFv2Pw.roa (raw, json)
Hash identifier: VR3t+DpRfQMm8Fm6NPIGepeK3TuRG90VDRi07gKzncU=
Subject key identifier: 5F:DE:95:4C:AF:67:48:3B:24:EE:9A:94:3E:B4:7A:B0:81:6F:D8:FC
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228E01A8877E69E25D21550D5AB6538E
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/X96VTK9nSDsk7pqUPrR6sIFv2Pw.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215479
IP address blocks: 213.21.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:01:a8:87:7e:69:e2:5d:21:55:0d:5a:b6:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fde954caf67483b24ee9a943eb47ab0816fd8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:39:35:dc:af:d1:38:0e:02:d7:c7:b9:63:
3f:c9:0e:dc:f3:b3:5c:bf:fb:98:90:01:2f:e2:a2:
33:ac:ac:a1:c0:30:fc:e4:0a:f2:33:94:78:cf:bb:
21:28:0f:dd:b3:8d:cb:8c:93:59:1a:c0:15:cb:d7:
7c:30:c5:db:21:ce:a0:92:76:b1:6e:b7:42:6a:d4:
4e:b5:06:19:fe:28:46:bb:1b:fd:2b:bf:52:5f:8b:
27:72:1f:ab:db:24:e9:fe:e5:59:ba:09:f0:f1:76:
90:91:a3:d5:46:4c:ba:0d:a0:81:18:4e:84:97:64:
fb:c7:9b:32:82:c6:ec:b3:9a:58:a8:f2:12:39:ad:
58:8e:90:dc:fc:b2:08:e7:8e:87:7d:8a:c6:95:6e:
69:fd:0f:19:4b:10:e4:17:63:ca:0f:07:d5:d0:bd:
9f:1b:41:cc:42:a5:08:84:dd:97:72:7b:b8:37:5c:
91:49:78:10:02:88:bf:d0:5b:6a:8f:31:7a:cd:dc:
be:a7:94:8f:05:89:04:92:77:e9:4a:66:81:af:7d:
3e:36:66:06:ab:7f:65:c8:28:17:33:9d:35:4a:1c:
94:7d:15:29:2e:56:6c:ca:64:77:84:17:c8:6b:b4:
19:d1:d2:c7:13:ac:d4:60:45:73:4b:8e:76:98:1f:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:95:4C:AF:67:48:3B:24:EE:9A:94:3E:B4:7A:B0:81:6F:D8:FC
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/X96VTK9nSDsk7pqUPrR6sIFv2Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.237.0/24
Signature Algorithm: sha256WithRSAEncryption
55:53:47:ad:8f:47:5f:12:17:43:53:9a:dc:a8:0e:8d:15:e8:
ef:f2:3c:03:6c:a9:c8:9c:30:23:e5:10:17:04:e6:a3:5b:4a:
94:9d:46:0f:5d:84:b4:9b:6c:2e:c6:0f:57:7b:35:b9:f0:35:
ed:5a:43:c1:6d:3c:3d:04:ed:fb:05:63:57:1b:34:33:e3:f3:
8b:ce:bf:d9:53:6e:e4:75:1f:a7:2d:72:99:4d:2c:bb:53:0c:
d0:78:16:e1:0f:32:b7:38:96:f1:c6:f2:89:59:f2:12:1e:3a:
27:5a:c4:a5:a2:b5:5a:ba:fc:a9:21:58:72:e1:34:b0:46:50:
37:a6:b4:2a:a9:06:1c:af:92:9b:f6:53:a9:b6:0d:fd:cd:ec:
ce:e0:36:d1:a7:4a:60:67:38:a4:ec:40:53:6b:3a:f0:e6:eb:
fd:ee:d5:1f:24:7c:c4:0f:7e:8b:16:36:ac:4f:15:cc:86:ea:
3a:31:10:27:dd:3d:ca:a2:79:81:c4:86:35:9c:8c:98:5e:9e:
ba:d1:6c:50:4d:1e:45:f0:46:bd:78:16:e3:2a:8c:c9:5a:76:
72:98:c9:1b:8d:64:b9:86:56:0a:30:dd:1d:57:c5:ea:27:01:
be:c2:b0:d3:c3:10:92:a0:e6:f3:e8:42:fd:45:96:49:f5:1b:
ce:a9:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:23 2025 by rpki-client