Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/_xQUs_GjbsRYUA2IRLecXZ-Wxo4.roa
File: _xQUs_GjbsRYUA2IRLecXZ-Wxo4.roa (raw, json)
Hash identifier: eOUix+FtKGKlpBn2pog44EUgekp6jUCjYJBSxMd9juo=
Subject key identifier: FF:14:14:B3:F1:A3:6E:C4:58:50:0D:88:44:B7:9C:5D:9F:96:C6:8E
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0193BA8F20C35B59F2E6FC18F5F07ED20B48
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/_xQUs_GjbsRYUA2IRLecXZ-Wxo4.roa
Signing time: Thu 12 Dec 2024 11:09:22 +0000
ROA not before: Thu 12 Dec 2024 11:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 213.21.236.0/24 maxlen: 24
213.21.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:8f:20:c3:5b:59:f2:e6:fc:18:f5:f0:7e:d2:0b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 12 11:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff1414b3f1a36ec458500d8844b79c5d9f96c68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:39:12:08:fc:40:c8:e1:0f:bf:8d:72:5a:
91:ed:76:ea:0a:88:ef:8c:87:99:58:84:a7:d1:b0:
dd:81:d7:8a:80:03:6b:bc:45:7a:2c:cf:d4:f7:5f:
b2:7c:57:46:80:37:fd:c8:2f:56:da:d8:8b:b6:7b:
7c:83:49:15:df:86:3e:9e:10:ce:66:49:2b:6c:42:
79:d8:6f:64:af:ed:1e:9d:bc:07:5b:2a:1d:eb:e5:
fd:42:01:69:8c:95:52:42:61:a4:f8:a0:e4:90:49:
49:3b:de:d2:e5:e3:d1:62:69:f4:e4:69:27:30:c2:
5e:96:44:33:a3:58:dc:d8:a5:24:b1:fa:d7:61:ef:
df:4e:06:ab:94:3f:9d:40:fd:b6:b1:40:2e:2e:8b:
93:72:79:57:50:1c:bb:06:c2:73:d9:b3:bb:04:3e:
65:82:9e:1b:86:45:32:e8:f6:33:8c:da:45:fa:be:
a0:b7:33:5a:40:05:01:e7:7b:93:1b:7a:67:78:c3:
ba:5c:32:7e:2f:da:f3:a8:81:88:07:e0:e0:c2:40:
79:da:e5:1f:18:0e:2c:6d:35:fa:3e:ea:50:22:c0:
e9:00:e3:89:b9:2b:41:c9:f8:d3:89:d9:1f:ea:c2:
2f:15:90:bd:9e:54:33:ce:a4:f5:42:b2:72:8d:42:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:14:B3:F1:A3:6E:C4:58:50:0D:88:44:B7:9C:5D:9F:96:C6:8E
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/_xQUs_GjbsRYUA2IRLecXZ-Wxo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/24
213.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b3:a4:3e:54:f9:d1:e4:33:1b:b2:4f:19:98:2f:e8:0a:14:
51:c5:2a:b0:d6:1b:e9:83:8a:cf:48:7b:b8:e2:ca:64:26:14:
cc:93:98:aa:42:b9:d2:ae:72:d8:01:ec:36:5a:e4:72:4c:70:
cd:03:74:92:91:d5:c4:d8:24:f0:6a:84:35:72:8a:91:a3:5f:
2d:b3:8c:8f:84:26:67:02:9e:64:55:74:d4:3e:d0:9e:46:38:
fb:e1:52:ef:29:22:56:b2:c9:7e:0b:d4:45:43:e9:28:75:b3:
25:a4:4e:dc:05:12:db:d3:b1:9e:39:cb:0b:18:f2:2d:62:ee:
d5:50:de:60:57:b6:42:17:95:43:80:2a:e1:7c:f1:00:da:13:
87:52:6d:90:79:d2:ef:19:4b:71:ed:8a:72:c1:47:2e:22:f1:
f9:ed:6e:39:86:3e:98:db:75:17:b4:b8:66:78:57:9b:06:9f:
96:19:fa:02:8b:b6:a6:0d:d3:51:2a:fb:15:b8:6e:b0:dc:b0:
91:b3:fc:d2:9f:6f:25:b0:c4:04:33:aa:90:09:e4:1a:8e:5a:
19:34:27:e9:e3:59:f2:51:95:be:0c:4d:4e:38:e4:71:57:ca:
97:9d:4e:32:67:8d:97:b4:5c:70:4e:38:12:2b:33:a8:2f:3d:
7d:eb:4d:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZO6jyDDW1ny5vwY9fB+0gtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjQxMjEyMTEwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjE0MTRiM2YxYTM2ZWM0NTg1MDBkODg0NGI3OWM1ZDlmOTZjNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuao5Egj8QMjhD7+NclqR7XbqCojv
jIeZWISn0bDdgdeKgANrvEV6LM/U91+yfFdGgDf9yC9W2tiLtnt8g0kV34Y+nhDO
ZkkrbEJ52G9kr+0enbwHWyod6+X9QgFpjJVSQmGk+KDkkElJO97S5ePRYmn05Gkn
MMJelkQzo1jc2KUksfrXYe/fTgarlD+dQP22sUAuLouTcnlXUBy7BsJz2bO7BD5l
gp4bhkUy6PYzjNpF+r6gtzNaQAUB53uTG3pneMO6XDJ+L9rzqIGIB+DgwkB52uUf
GA4sbTX6PupQIsDpAOOJuStByfjTidkf6sIvFZC9nlQzzqT1QrJyjUI1JwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP8UFLPxo27EWFANiES3nF2flsaOMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvX3hRVXNfR2pic1JZVUEySVJMZWNYWi1XeG80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXsAwQA
1RX9MA0GCSqGSIb3DQEBCwUAA4IBAQBGs6Q+VPnR5DMbsk8ZmC/oChRRxSqw1hvp
g4rPSHu44spkJhTMk5iqQrnSrnLYAew2WuRyTHDNA3SSkdXE2CTwaoQ1coqRo18t
s4yPhCZnAp5kVXTUPtCeRjj74VLvKSJWssl+C9RFQ+kodbMlpE7cBRLb07GeOcsL
GPItYu7VUN5gV7ZCF5VDgCrhfPEA2hOHUm2QedLvGUtx7YpywUcuIvH57W45hj6Y
23UXtLhmeFebBp+WGfoCi7amDdNRKvsVuG6w3LCRs/zSn28lsMQEM6qQCeQajloZ
NCfp41nyUZW+DE1OOORxV8qXnU4yZ42XtFxwTjgSKzOoLz19600Q
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:43 2025 by rpki-client