Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa
File: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (raw, json)
Hash identifier: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=
Subject key identifier: 0E:19:A6:F4:4E:33:F4:80:E0:26:8A:73:80:B1:A6:C6:B1:DD:35:0E
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207D98CFF60186851FDC6715E1549C
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa
Signing time: Thu 02 Jan 2025 03:47:53 +0000
ROA not before: Thu 02 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198976
IP address blocks: 213.135.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7d:98:cf:f6:01:86:85:1f:dc:67:15:e1:54:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e19a6f44e33f480e0268a7380b1a6c6b1dd350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:15:be:1c:3c:1e:c6:6f:b6:86:ee:f2:73:
4a:8f:78:2a:2d:34:1f:b7:2b:a9:13:51:f5:9c:cd:
9c:df:89:3a:c0:c3:16:c2:b6:e6:89:ad:36:53:c3:
14:5e:91:ad:0f:bf:ea:12:43:74:69:f0:c5:85:48:
23:0a:c1:1a:a6:32:bc:0f:eb:e8:9a:a1:fb:78:3e:
59:b1:4b:b7:23:87:66:64:e5:b1:00:a0:59:97:42:
4f:7a:db:b9:6c:7b:b3:5a:04:84:7f:58:a0:ff:de:
44:cb:43:fd:a5:9a:b8:84:3c:36:b1:a1:fd:aa:da:
aa:22:d0:d2:e1:32:6d:bd:31:8b:e8:d1:13:e7:86:
5e:27:aa:1e:f3:db:c8:a8:8e:b3:26:2b:4b:5f:47:
61:89:f5:c4:87:8c:16:fe:5b:a0:41:f3:ab:e4:53:
3d:55:ba:24:cc:57:11:85:40:1f:27:33:00:02:3b:
95:4f:3f:49:2c:94:e9:26:25:7e:4d:35:5a:a3:c7:
1e:14:00:01:04:fe:25:b1:13:1a:25:ea:d2:1d:7f:
88:c6:cc:04:16:d7:8b:50:80:6d:b7:5d:b6:84:d4:
91:60:89:64:e9:f8:e6:5b:db:75:bb:bd:ad:97:34:
14:e8:c2:1f:fb:2b:58:db:40:ac:60:5f:b8:bf:a7:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:A6:F4:4E:33:F4:80:E0:26:8A:73:80:B1:A6:C6:B1:DD:35:0E
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.71.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0f:1d:fe:ba:e5:fc:b5:cb:52:c0:27:51:18:b5:ae:d4:e8:
85:fa:d7:1e:31:10:24:46:bb:40:99:45:86:14:33:0b:46:b7:
aa:69:36:66:0b:30:c7:0a:e7:d6:ec:2a:ef:f5:82:63:d3:db:
6e:c6:5c:aa:8a:4a:9a:46:37:3a:da:a0:70:77:eb:70:e6:a6:
da:ff:38:22:b5:17:ad:86:6b:73:15:09:f1:2c:ba:08:a7:84:
f8:1b:a4:ad:c5:b7:31:c4:aa:ff:2a:84:39:8d:ba:e5:fb:8c:
ed:dc:0c:da:d7:32:01:0e:6e:ea:70:fa:f2:6c:23:1d:b8:1f:
23:23:a1:e4:81:31:7e:0c:3e:58:dc:e6:6f:18:53:98:b8:cb:
fb:a0:3f:a2:6a:d8:ef:d2:9a:50:7c:cc:78:83:fa:66:47:e6:
14:ff:4b:87:a2:e8:65:fc:00:bc:07:a7:d0:92:cc:4a:a9:eb:
61:ec:a2:42:58:da:91:e3:e6:28:5c:7d:43:04:9c:97:e5:70:
af:75:3a:9e:ae:29:0e:68:02:0a:85:5d:68:e7:4f:07:d0:87:
07:3f:d1:16:ea:f7:6b:3a:5e:02:83:c1:c9:70:50:67:e9:78:
44:82:5a:f3:53:4d:f6:61:83:76:71:00:19:20:9d:c0:b3:8d:
db:5e:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:20 2025 by rpki-client