Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa
File: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (raw, json)
Hash identifier: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=
Subject key identifier: 85:F3:03:E4:C8:68:1C:A8:C3:59:5D:0B:83:E9:01:E9:09:FB:34:8C
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019426D94BB947A495126D3BC22E3A46611B
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25189
IP address blocks: 213.251.208.0/20 maxlen: 20
213.251.240.0/20 maxlen: 24
213.251.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4b:b9:47:a4:95:12:6d:3b:c2:2e:3a:46:61:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f303e4c8681ca8c3595d0b83e901e909fb348c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:2b:fa:8c:ce:9b:95:e8:6c:aa:4b:00:16:
46:d5:3c:35:b8:cd:0c:ba:b4:84:49:33:e9:de:84:
ae:c9:d2:c4:ac:2d:fe:81:67:15:87:03:78:a8:7d:
c2:d1:a7:35:ac:2c:02:89:cb:89:90:aa:c6:ad:1d:
31:f5:76:3c:a5:f1:68:b7:65:6d:2f:3c:d0:c1:b7:
e6:86:69:0e:98:b8:44:9c:39:23:78:e7:d1:a9:54:
f2:65:9f:7c:2e:fa:79:73:c2:f6:f8:41:4a:f8:37:
d1:6c:c3:39:bb:1e:0d:97:a2:39:86:cf:9d:2d:cc:
b2:82:d4:d9:06:a3:4f:ab:4a:7c:66:28:22:0d:ef:
f4:da:74:07:fa:8e:94:fe:d7:fa:45:90:25:be:36:
05:f9:14:8d:35:b7:17:86:b6:cc:22:af:10:d7:b5:
d1:7c:7d:5e:bf:60:81:f1:f3:c9:18:2a:01:79:e1:
57:e1:b9:31:83:aa:08:13:1b:ea:ad:12:21:f5:b9:
d5:d9:8e:0c:d8:70:63:20:38:b1:57:02:ac:65:55:
94:b5:14:7a:ce:e5:82:b9:a1:ff:89:bd:3a:30:17:
9a:fe:92:bc:e8:27:8b:48:c1:35:16:38:0e:de:c8:
55:a2:a5:0a:0f:6b:3b:df:be:45:3f:b4:61:63:0b:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:03:E4:C8:68:1C:A8:C3:59:5D:0B:83:E9:01:E9:09:FB:34:8C
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.251.208.0/20
213.251.240.0/20
Signature Algorithm: sha256WithRSAEncryption
61:f0:dc:49:d7:2b:a9:15:3a:6d:4e:68:8f:0d:e5:81:7d:60:
5b:9b:ac:a1:b4:72:d1:aa:09:f3:3c:ed:4f:2a:3c:8e:a4:6f:
fd:3b:a6:b4:2a:50:31:bc:3a:59:39:2f:d5:10:83:fb:a2:37:
ec:8f:59:46:fa:6a:c7:12:f0:51:f1:c5:2c:6a:95:9d:2e:1b:
ca:cb:6b:47:55:da:b7:6e:d0:5a:ed:4f:bd:3e:97:33:40:a4:
d5:fd:8a:d3:49:99:cd:29:59:09:c3:28:d1:f3:47:05:e1:6e:
66:e0:80:a6:74:1c:3b:2e:d5:8f:e5:9c:5e:d1:c4:4d:97:86:
c1:6a:18:7a:79:6d:5f:4e:88:67:a3:6f:fc:3c:1b:69:ac:8c:
ae:0b:9c:3b:26:c3:db:6f:42:38:af:30:d3:40:77:69:9a:61:
6c:f3:4f:bb:bb:8c:d4:c8:4a:6a:52:a9:2f:9d:3c:5b:9e:6a:
01:3d:cc:c3:d2:a9:4e:a8:d7:84:f1:8a:45:44:b1:7c:12:7a:
92:e0:b2:58:27:60:85:8e:fd:41:e2:0c:d3:fe:2e:a6:e0:f6:
39:63:45:42:22:06:46:15:f6:36:38:97:1e:06:ec:b5:2f:cb:
02:cf:a4:a9:2f:b5:a4:f5:81:86:92:e1:74:62:08:03:ea:9c:
78:f7:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:22 2025 by rpki-client