Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dXcSjT8XLHwaAMrJxhlYycEZesc.roa
File: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (raw, json)
Hash identifier: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=
Subject key identifier: 75:77:12:8D:3F:17:2C:7C:1A:00:CA:C9:C6:19:58:C9:C1:19:7A:C7
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 0194B21D84B9C00B0D01C2E0F4ED05FF5201
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dXcSjT8XLHwaAMrJxhlYycEZesc.roa
Signing time: Wed 29 Jan 2025 12:51:06 +0000
ROA not before: Wed 29 Jan 2025 12:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213499
IP address blocks: 213.135.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:1d:84:b9:c0:0b:0d:01:c2:e0:f4:ed:05:ff:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 29 12:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7577128d3f172c7c1a00cac9c61958c9c1197ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:0d:ff:ef:98:79:b2:4a:80:09:fa:67:b6:
35:e2:9a:0a:a6:2f:e0:dc:93:f0:82:ea:ca:01:16:
81:2e:d3:5c:ac:8c:50:a2:26:f1:9c:c0:8d:81:98:
68:60:40:1a:74:0b:a3:11:13:ea:f3:02:07:f3:e7:
e9:50:cb:62:ea:1b:88:54:5d:b5:ab:bb:9d:d8:75:
31:4a:a8:ea:4a:35:90:54:f2:e8:be:3e:3b:e8:14:
83:31:1b:02:27:a7:db:ac:50:59:27:bc:48:9a:7e:
dd:6b:6c:ad:8f:e7:11:b8:1e:dd:88:92:6e:6a:b2:
1b:87:af:e3:9a:45:bb:d3:17:2f:88:49:4a:bd:55:
7e:ba:1f:e6:3d:af:4c:46:76:03:80:64:63:fa:33:
8a:0a:a8:1a:b8:a4:84:3d:74:ab:78:2e:ee:7d:ae:
e3:6c:86:b3:c1:be:43:65:18:f5:9a:4b:18:91:13:
2a:b0:8d:5b:7d:69:ed:5c:d5:f0:0a:07:98:ed:fd:
19:1d:61:05:7d:5d:2b:a3:0a:78:35:e5:d5:d6:62:
32:aa:fb:09:e9:17:1d:81:5c:fd:a1:17:3d:fe:7e:
8e:7e:b0:85:90:42:1f:ee:6e:38:b9:6f:22:c7:68:
2d:fa:c0:d6:db:35:f8:0f:f4:10:90:f7:7c:aa:90:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:12:8D:3F:17:2C:7C:1A:00:CA:C9:C6:19:58:C9:C1:19:7A:C7
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dXcSjT8XLHwaAMrJxhlYycEZesc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a6:65:b5:9e:06:c6:06:b8:07:7f:48:cb:cd:f5:53:0b:83:
36:50:d1:b9:13:76:ab:0f:85:41:5b:70:01:9f:01:5a:a2:1f:
6c:0d:fc:00:55:40:a3:93:af:5e:69:25:33:ec:0b:f6:a9:48:
f6:75:4f:36:1a:50:5f:bf:8f:88:4c:e2:77:aa:9a:45:b4:ec:
98:ea:73:de:ea:56:e4:d1:5e:76:75:6b:af:80:d4:11:15:6b:
b4:f0:e7:04:ec:d2:2b:7b:a1:3d:26:fe:de:cd:ef:4c:cd:a8:
28:26:0e:f7:81:40:2a:77:66:11:61:4d:ef:e5:1c:7b:59:da:
1f:52:33:00:5e:59:9d:62:cd:c2:a0:b8:a2:91:f5:a8:36:9c:
28:a5:a5:47:f9:1e:ae:59:96:0a:7c:cd:d1:2e:a7:24:d7:69:
05:c5:0d:16:11:4f:40:2f:cb:6f:ad:2b:7c:2e:37:b3:4d:8d:
04:66:e8:e0:65:33:62:f0:6d:e9:10:26:94:b5:05:e1:c0:c4:
14:e9:67:2f:51:2b:ff:86:26:c2:fa:92:82:86:ed:ad:ef:65:
d1:64:94:6a:da:08:77:1d:c7:fe:00:dc:3a:d9:b2:bb:33:b2:
6d:04:44:a6:c5:46:ec:a3:71:e0:72:4a:9d:ac:10:23:ce:32:
ee:b6:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:40 2025 by rpki-client