Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/x7Ab6gkgDpJ4iQsPci_c-k1pTfA.roa
File: x7Ab6gkgDpJ4iQsPci_c-k1pTfA.roa (raw, json)
Hash identifier: 6fvF/xaOxWoZKnfEWt62oXK9FCVy2LKmL35GUwKTqqg=
Subject key identifier: C7:B0:1B:EA:09:20:0E:92:78:89:0B:0F:72:2F:DC:FA:4D:69:4D:F0
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 01856FF95B38C45F0C0A9BAC24E22354ABF2
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/x7Ab6gkgDpJ4iQsPci_c-k1pTfA.roa
Signing time: Mon 02 Jan 2023 00:54:50 +0000
ROA not before: Mon 02 Jan 2023 00:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202
IP address blocks: 213.174.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:5b:38:c4:5f:0c:0a:9b:ac:24:e2:23:54:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jan 2 00:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7b01bea09200e9278890b0f722fdcfa4d694df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:dd:b8:4b:a9:98:d0:a0:f8:83:6c:83:b3:
d6:d7:7a:00:b2:df:2c:33:ce:e7:a8:75:7c:76:43:
40:a8:c2:35:0e:21:8a:79:45:47:f9:85:cb:b6:3e:
77:ea:66:9c:5c:c6:de:05:d6:71:a5:66:08:89:b8:
69:ae:55:f0:06:b7:ab:85:dd:62:2c:b8:1c:88:45:
d9:01:a7:89:7d:b1:7d:92:f5:08:ee:a5:d6:66:a9:
ba:44:27:ba:bd:55:58:17:4e:8b:25:fd:af:49:5e:
0b:7b:a9:f5:2d:ae:1e:c5:90:17:15:e2:ac:73:f4:
76:3a:46:be:0c:04:eb:21:c4:bb:e4:f8:39:37:c4:
3b:b0:7b:98:ce:4b:49:76:2a:fc:71:fc:73:e9:63:
44:36:44:db:d5:fc:da:5f:90:33:d5:04:27:67:74:
7e:81:9d:1b:6b:56:c6:b7:f5:28:22:cc:28:9d:cd:
6c:a7:48:61:aa:74:58:2b:97:c2:b7:ab:e5:3c:b4:
89:5f:9c:ec:e9:46:16:ba:e8:42:91:20:22:f3:bc:
f7:4c:74:25:d5:a0:6a:49:f5:06:59:f3:c8:d2:b3:
ab:df:83:a5:18:4e:30:31:5c:a5:85:1c:fc:a5:d6:
8b:a0:00:f7:74:a8:99:0f:99:70:93:45:a2:c6:72:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B0:1B:EA:09:20:0E:92:78:89:0B:0F:72:2F:DC:FA:4D:69:4D:F0
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/x7Ab6gkgDpJ4iQsPci_c-k1pTfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.174.127.0/24
Signature Algorithm: sha256WithRSAEncryption
57:79:4d:61:96:b6:4a:59:85:6a:7b:9a:45:f9:f3:9d:76:58:
6d:0f:5e:7a:c7:2a:de:6f:7c:ef:13:24:c4:c4:da:29:9c:32:
ca:f4:98:82:62:8d:75:d4:df:c2:58:b9:a4:63:df:92:43:13:
4c:2b:21:33:74:eb:ac:be:26:e0:2c:e8:f3:e1:f5:85:7d:86:
1c:84:a4:e8:5b:23:e4:84:de:79:3b:e0:de:b4:17:31:47:bf:
38:5e:f4:dc:11:a1:05:e4:64:7e:81:ee:cc:99:dc:d4:c0:a8:
27:27:c7:22:3c:59:83:b4:0a:ab:1c:c3:2e:06:24:e8:01:91:
cb:3b:5d:09:eb:1a:c8:79:f4:96:eb:a9:d0:66:a1:0e:28:cc:
2c:c6:52:1b:87:29:db:02:d3:25:d1:68:4d:4d:01:42:a2:7e:
71:9d:1c:ee:59:9a:9d:e9:20:2b:97:fa:18:4b:2d:7f:63:0f:
62:f5:25:68:e0:f9:cd:4a:fd:3d:30:df:a5:7d:32:33:6d:b3:
94:7d:30:61:37:5d:a6:66:70:7c:7e:8e:90:7b:3b:7b:62:0a:
29:35:5e:3c:8a:7e:15:11:75:4d:e5:41:69:ee:4e:84:af:23:
d0:08:e9:b6:45:ca:1c:cf:f1:a6:c3:04:9e:56:1f:af:e5:9f:
76:de:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:40 2025 by rpki-client