Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa
File: Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa (raw, json)
Hash identifier: oICV/Rv8Fz6p+4kh6JDj/CQGRipc30QQX+8qXRhhMHw=
Subject key identifier: 3E:BF:7A:7E:EE:80:2A:80:BD:A1:C8:0A:CB:88:26:93:A1:62:89:0F
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B2F9E6F5E0B1FAB02115356B5035
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38996
IP address blocks: 213.87.56.0/22 maxlen: 22
213.87.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b2:f9:e6:f5:e0:b1:fa:b0:21:15:35:6b:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ebf7a7eee802a80bda1c80acb882693a162890f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:5d:51:fc:47:77:f9:e4:77:3f:ef:de:f4:
8e:43:5c:1a:af:e9:a1:b3:7e:93:f8:87:f9:21:db:
fa:c3:05:2b:5c:2d:6f:ff:72:1e:7f:97:e4:cc:29:
48:70:0c:dd:85:20:eb:e9:91:1c:c1:9f:a6:da:79:
f6:71:53:df:29:95:43:2e:44:49:d3:39:fa:bc:a3:
20:b9:0a:1e:be:38:ee:00:9b:d8:69:a4:83:4f:30:
19:38:e6:09:de:12:ea:5b:35:09:65:15:1a:15:ca:
e6:1a:5f:ac:c0:7d:30:34:1e:88:77:f6:0d:8e:b4:
96:2c:60:04:29:37:51:79:19:33:42:d3:92:fb:8e:
3f:20:cc:f9:6e:43:2a:e5:84:d0:c0:2f:f6:a7:77:
04:a1:f2:7d:53:87:d4:b1:91:08:76:27:94:58:e6:
dc:0e:30:dd:8c:69:86:55:e2:f2:c1:13:a3:60:a0:
dd:d4:d3:77:30:87:12:b0:3f:04:0f:5b:2b:f0:33:
c8:b1:3f:09:fb:22:63:6b:c0:8d:10:74:97:4f:0a:
36:a2:b1:ff:4b:b9:47:54:c4:40:c0:0a:2e:4e:32:
d0:4d:a4:67:0a:09:2a:dd:da:70:80:0f:24:66:fe:
1e:53:ca:6a:75:89:98:c3:7b:e8:55:9d:2e:95:fa:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:7A:7E:EE:80:2A:80:BD:A1:C8:0A:CB:88:26:93:A1:62:89:0F
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:6c:43:38:06:71:22:47:f3:2b:c8:d4:cb:20:32:5f:d6:36:
62:8e:e2:10:11:53:bb:49:43:fb:26:a5:94:47:c0:32:07:2b:
2b:29:f3:81:79:99:48:7b:5d:c9:6c:d7:fc:3a:79:f4:0c:85:
a5:2d:52:d1:ab:48:ea:1a:d4:4e:da:96:9f:32:b3:22:c6:71:
2b:3b:71:08:63:3e:18:33:99:9a:90:61:9c:1d:34:6f:6e:c8:
eb:35:02:a7:87:8d:89:2d:79:10:70:9a:a1:98:5e:61:6d:d0:
90:1c:ac:24:5e:87:7d:4b:1c:29:d2:62:84:49:a2:8a:70:78:
4c:28:7e:d1:fa:61:6e:a0:b1:9d:64:83:d9:8c:22:a9:f3:73:
f8:72:1e:6c:a8:e0:d4:ea:be:a4:b5:ab:e5:22:d0:75:52:e5:
6f:23:f3:6c:7e:2e:88:90:18:d6:36:3f:50:cb:f4:39:8c:39:
4e:97:54:9e:f6:3c:dd:58:32:f3:18:c1:10:c3:1e:c5:15:71:
87:ab:d7:ab:27:57:9c:3e:1f:31:19:f2:a1:2d:bf:68:3d:31:
ee:8f:10:77:76:c5:d2:29:ea:47:ac:6b:e6:64:4e:97:41:90:
03:79:d2:04:99:ca:bf:54:14:23:5d:a9:20:38:12:5a:09:fd:
1c:b7:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:27 2025 by rpki-client