Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/loZY9_cg_bn8atrmOX4aXIGmIlU.roa
File: loZY9_cg_bn8atrmOX4aXIGmIlU.roa (raw, json)
Hash identifier: A+Koinq5wEyQZ8JnDPwc4NaPGTZg2dM35skPGrq2N0M=
Subject key identifier: 96:86:58:F7:F7:20:FD:B9:FC:6A:DA:E6:39:7E:1A:5C:81:A6:22:55
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9AEAEB5DFB0102C9F2133C7B3FA8A
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/loZY9_cg_bn8atrmOX4aXIGmIlU.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13174
IP address blocks: 213.87.0.0/19 maxlen: 19
213.87.0.0/21 maxlen: 21
213.87.16.0/21 maxlen: 21
213.87.24.0/21 maxlen: 21
213.87.32.0/21 maxlen: 21
213.87.32.0/23 maxlen: 23
213.87.36.0/22 maxlen: 22
213.87.44.0/22 maxlen: 22
213.87.48.0/21 maxlen: 21
213.87.48.0/22 maxlen: 22
213.87.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ae:ae:b5:df:b0:10:2c:9f:21:33:c7:b3:fa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=968658f7f720fdb9fc6adae6397e1a5c81a62255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:c8:cc:aa:40:e3:b3:88:44:94:13:35:4a:
7e:6e:12:08:24:e1:17:1f:62:10:ae:b9:15:89:7c:
99:74:b1:9c:b0:09:be:dd:1b:f7:37:55:88:ff:e4:
85:d1:01:6f:26:e5:c0:2d:74:81:32:57:97:bb:fb:
09:0b:f0:1a:3c:5c:8a:24:ef:fb:2a:48:9a:e3:4f:
86:af:18:60:19:02:22:bd:a7:0f:bf:d8:a6:00:68:
0e:4f:64:d7:d4:11:01:e7:25:f0:60:9d:8f:0e:33:
a8:cc:da:46:c7:81:7f:8a:bd:b5:68:42:e8:0e:a5:
28:64:1f:44:eb:76:d2:fb:50:56:50:57:74:7b:c0:
ea:a8:47:65:15:09:b4:6d:b6:16:f4:78:15:a3:bf:
ca:7f:ff:05:ac:ae:1a:01:9b:16:ad:59:39:e4:d5:
1a:1a:9f:43:2b:cf:86:8d:7e:ad:e1:44:66:f9:76:
8d:78:f6:af:a1:fe:8c:78:86:3a:65:c3:b5:92:e4:
b0:69:60:ea:e7:6a:1f:a0:7f:75:29:f3:a9:d6:41:
9c:d2:05:03:c9:f3:05:c3:88:6d:9b:d4:62:f5:fa:
05:8a:bd:f6:78:b8:c1:f3:bd:ac:11:0b:df:bd:00:
83:da:fe:b4:00:7c:be:60:3a:d1:37:07:b6:de:30:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:86:58:F7:F7:20:FD:B9:FC:6A:DA:E6:39:7E:1A:5C:81:A6:22:55
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/loZY9_cg_bn8atrmOX4aXIGmIlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.0.0-213.87.39.255
213.87.44.0-213.87.55.255
Signature Algorithm: sha256WithRSAEncryption
88:b0:cd:64:db:57:e3:0a:fa:36:27:fd:aa:42:32:e5:2d:9a:
32:3c:c6:34:c3:b1:13:4e:69:70:87:e8:3a:d3:44:f9:d3:31:
61:ac:ab:82:9c:6d:ed:1c:fd:58:4c:84:69:5b:6e:a7:a8:d8:
e8:87:c4:96:a6:1f:20:10:49:71:79:bb:99:c9:f9:4c:d0:1a:
65:0f:f1:67:c5:25:69:c8:ee:9a:e3:cf:a7:3f:5a:44:1c:e9:
e8:10:62:a0:1e:21:b2:52:d6:52:c0:d9:3e:f1:4c:b5:f1:2d:
d4:65:cb:c4:b6:1f:52:9f:2e:af:92:f5:60:4e:03:7e:fe:1b:
ef:38:21:ae:7b:dc:93:f0:72:27:cf:fc:69:30:30:75:57:a7:
08:a1:ee:56:a1:cd:94:02:42:35:6f:53:f0:40:2e:56:17:ab:
b1:c4:18:61:10:2b:81:62:39:83:c6:85:62:c2:54:2f:7c:a2:
17:4f:b0:57:79:60:3d:b4:2d:5a:da:94:42:84:98:f1:bb:f7:
17:24:34:50:39:e4:f1:db:d4:1c:dc:07:38:17:83:f6:f3:7b:
41:29:ba:db:96:da:02:08:71:97:65:9d:92:9c:f8:b2:e2:1a:
c0:9e:12:0f:57:2a:25:b1:02:db:e2:4a:d2:fb:a1:3e:79:13:
47:23:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:55 2025 by rpki-client