Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/BSo6esZVhXizhr6rXIY91M7Ycb0.roa
File: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (raw, json)
Hash identifier: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=
Subject key identifier: 05:2A:3A:7A:C6:55:85:78:B3:86:BE:AB:5C:86:3D:D4:CE:D8:71:BD
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 01942067F1E2DC056C3C87AE05994516D0BB
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/BSo6esZVhXizhr6rXIY91M7Ycb0.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207143
IP address blocks: 213.167.224.0/24 maxlen: 24
213.167.225.0/24 maxlen: 24
213.167.226.0/24 maxlen: 24
213.167.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:e2:dc:05:6c:3c:87:ae:05:99:45:16:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=052a3a7ac6558578b386beab5c863dd4ced871bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e0:34:07:7d:61:73:33:01:e7:76:40:f4:c7:
37:31:0c:87:0b:a6:93:85:7b:fd:0d:33:a0:9c:ca:
d0:e9:d4:b9:bf:38:69:e8:26:02:25:09:f7:0f:6b:
ea:73:f8:d7:5c:c0:42:de:12:61:c5:17:e0:95:0d:
b2:db:05:03:5d:79:55:ed:43:49:c8:4d:a8:90:d5:
71:ea:61:a3:0c:93:52:31:1f:b5:93:4c:17:0f:16:
3d:bf:d5:af:36:0e:b7:19:e8:9c:4b:3e:c2:e9:eb:
08:ae:fe:bb:f9:2c:06:9a:f3:42:04:7b:d5:f4:ef:
5c:a1:87:11:48:ad:e2:e1:c8:e5:6f:d2:53:90:89:
07:62:3b:25:d2:cf:30:67:11:e7:c6:42:73:23:6a:
06:df:36:14:ef:a2:a6:9a:25:8e:19:81:2d:72:98:
db:d1:f4:32:47:58:c3:4a:8c:1c:b7:56:66:82:0a:
70:80:1d:c0:11:e7:c2:e6:dc:8f:58:2b:cc:12:f2:
34:71:9a:55:8d:e7:67:d5:b3:bc:07:1b:00:2b:2c:
f2:1d:71:1e:38:16:7b:c4:a8:78:9d:3f:8d:c7:7d:
b0:4d:72:48:c7:78:bf:6a:9e:2d:b9:9e:8d:90:6a:
80:0c:da:16:25:ca:04:29:58:e6:61:af:82:69:be:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:3A:7A:C6:55:85:78:B3:86:BE:AB:5C:86:3D:D4:CE:D8:71:BD
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/BSo6esZVhXizhr6rXIY91M7Ycb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.224.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:7e:a4:3c:27:4e:6e:ac:ea:1f:38:e5:4e:a0:2a:4b:ac:1c:
76:a7:73:0e:ba:c7:bf:b4:5f:11:da:62:45:9b:55:72:d4:5c:
e0:20:fa:57:a1:52:11:02:11:9a:4c:b1:c3:f9:cf:bc:0e:7a:
6b:8c:67:d7:73:85:85:92:59:c3:fe:87:04:47:ec:3f:c8:2f:
ae:f3:3a:be:3a:03:df:52:87:aa:5b:ce:fa:43:72:79:ff:54:
d1:89:5d:b5:20:22:57:b0:32:d3:f7:db:54:8c:05:3d:35:23:
9d:83:94:b0:03:72:bc:91:c6:71:ac:0b:fe:af:66:36:f1:6a:
6a:e1:48:b4:49:d5:bf:a1:8c:5f:c1:35:cb:fb:a3:a6:fa:5c:
31:e0:ec:6d:d7:3a:0a:27:92:77:c3:7a:e0:8d:27:ea:51:01:
f6:be:00:ad:47:76:2c:97:61:58:64:97:09:52:97:dd:75:04:
02:2d:58:2a:c3:19:85:e7:e0:4e:6f:fd:e0:0d:fe:46:18:91:
47:e7:ff:6f:b0:c2:2b:32:a6:b0:a6:e3:bd:87:92:fd:8f:6d:
91:80:10:45:23:e6:06:f7:28:9a:74:67:d9:0c:18:9d:55:f2:
7a:45:a6:26:9c:35:8b:ba:ec:23:04:46:78:42:ce:f7:05:78:
d7:18:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:21 2025 by rpki-client