Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa
File: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (raw, json)
Hash identifier: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=
Subject key identifier: 6C:9E:8E:90:30:73:DF:96:B3:99:47:86:65:24:98:F1:24:4C:23:86
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 0194258E92A612569AC988FFB1717D159B0C
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa
Signing time: Thu 02 Jan 2025 05:48:08 +0000
ROA not before: Thu 02 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48642
IP address blocks: 213.109.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:92:a6:12:56:9a:c9:88:ff:b1:71:7d:15:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jan 2 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9e8e903073df96b3994786652498f1244c2386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:bf:20:79:1e:56:4c:c6:30:a2:84:3e:bf:
17:d9:72:c6:1d:5a:56:b4:ea:77:60:a9:6a:77:78:
5b:65:cd:0c:39:3a:79:49:7e:d2:e8:c3:2c:af:9c:
75:4a:4a:61:c7:63:a6:2e:93:e5:4c:7b:8f:ae:74:
92:d5:9d:62:ba:75:ad:9f:c5:e9:d8:af:8b:0a:88:
fa:9d:16:85:c6:c3:5e:ad:d8:ac:66:a0:9d:99:57:
fa:c4:46:17:79:05:08:0f:63:f5:db:17:95:17:77:
f6:52:9f:b1:9f:82:82:3d:dd:a7:8f:ba:84:0c:c0:
8a:b8:ec:47:31:a6:23:66:44:31:79:8a:89:27:7f:
52:86:c0:40:96:46:c3:f1:a0:80:75:cc:ec:44:78:
b4:be:a3:3a:68:b1:af:09:a1:37:76:f6:b0:17:30:
f1:94:e7:8c:13:5c:3c:60:fd:0f:03:45:5c:ab:4a:
66:89:25:a4:57:e6:8c:e0:3f:02:8c:0b:0f:81:52:
67:da:ed:ac:25:b7:28:62:c9:f2:7c:d7:7e:30:88:
31:6d:f6:8e:08:c8:15:13:69:9f:ae:4c:7e:7a:8e:
d0:84:b3:d9:35:1a:54:38:69:b9:8f:b2:e2:ba:60:
f0:77:c5:18:30:12:07:14:72:09:83:cb:e0:12:ef:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:8E:90:30:73:DF:96:B3:99:47:86:65:24:98:F1:24:4C:23:86
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.48.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:a1:0f:bd:be:b8:99:88:8c:9f:26:39:49:a5:90:24:e8:8c:
a9:03:91:f5:1b:b5:b4:8f:94:ff:6f:5f:92:cb:15:06:6c:61:
34:04:13:13:f7:e5:ba:6e:a3:39:5a:38:13:62:04:cd:80:5d:
2f:30:18:43:e9:78:8a:13:c0:d4:d1:e2:01:85:93:ce:d6:9f:
21:c5:1a:b0:b3:ca:74:4e:d9:8b:9e:de:a8:4d:bf:a6:16:d9:
c4:fc:7c:32:e9:75:a6:cb:11:c4:fa:b1:06:52:b1:fc:40:2b:
c8:d7:1c:d5:36:42:7d:f2:82:2e:97:6d:bf:9d:04:4a:83:55:
12:77:3b:01:28:78:40:a0:a6:5c:8d:6e:86:b3:71:db:6d:29:
01:a9:1c:e3:1a:ae:c1:1c:f6:16:8d:17:43:03:74:93:10:b1:
bc:03:4f:d9:1f:bb:9a:ca:ee:9a:60:7d:cc:c5:21:f8:9f:d4:
5e:dd:23:f5:9a:23:51:22:97:36:cc:b3:85:c7:2f:27:4c:f4:
ed:dd:c4:2e:78:37:22:61:7e:37:93:2f:27:2b:1e:c9:bb:99:
5a:26:56:32:3a:62:41:3b:5b:d6:2d:6a:36:e6:fa:89:0d:43:
c4:51:8f:0e:ca:8b:94:59:e2:0d:58:f3:5b:23:b0:f9:2f:41:
83:ad:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:33 2025 by rpki-client