Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ILbeank0F3xhLsgBl0NZfpBZFig.roa
File: ILbeank0F3xhLsgBl0NZfpBZFig.roa (raw, json)
Hash identifier: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=
Subject key identifier: 20:B6:DE:6A:79:34:17:7C:61:2E:C8:01:97:43:59:7E:90:59:16:28
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F396D0A64E744F4E0A3828525CB32
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ILbeank0F3xhLsgBl0NZfpBZFig.roa
Signing time: Wed 01 Jan 2025 13:47:39 +0000
ROA not before: Wed 01 Jan 2025 13:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25045
IP address blocks: 213.202.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:39:6d:0a:64:e7:44:f4:e0:a3:82:85:25:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b6de6a7934177c612ec8019743597e90591628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:0f:08:f3:6e:da:56:f3:43:1d:ca:13:80:
36:bd:1f:3e:89:36:5c:47:62:0d:2a:c2:24:32:9d:
2c:b7:fa:ca:85:23:99:2b:f0:c7:c7:7f:57:fa:ca:
05:7c:f4:b3:e3:b6:48:f7:d0:ca:8e:06:4f:16:64:
f6:05:05:c6:9a:68:fb:5f:2e:27:6f:2c:36:42:49:
2a:6f:16:c9:7a:c6:ef:e3:b4:a7:6d:ba:54:0b:d7:
46:4a:77:b6:a4:0d:38:31:ad:02:3b:3f:d7:dd:e5:
d2:71:a0:70:6e:a3:5e:e1:2a:77:4e:8b:af:22:5e:
ef:d2:b9:fd:87:7d:39:38:d4:f5:5d:9b:7d:e3:29:
b5:6e:8a:f6:36:38:17:f1:c6:f3:9b:ab:78:ed:b3:
a6:a8:0f:70:9d:e7:f5:6a:bb:af:6b:91:3c:3c:d8:
07:74:4a:a1:38:db:5d:a8:68:11:e1:5f:23:be:f9:
de:72:4b:27:b0:b0:01:db:01:48:a0:26:de:7f:35:
b3:6d:bd:78:c5:83:a2:04:41:c7:8e:c2:7a:f5:7a:
b0:08:9a:a1:fb:2f:a4:bb:9f:4e:cf:f0:f3:90:98:
ed:cb:b5:6d:88:c4:62:83:42:78:66:8f:6d:7f:2a:
47:c3:09:bd:fb:68:b4:19:9b:32:d9:02:78:2d:96:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B6:DE:6A:79:34:17:7C:61:2E:C8:01:97:43:59:7E:90:59:16:28
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ILbeank0F3xhLsgBl0NZfpBZFig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.202.78.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c2:ca:b2:fc:b1:8a:61:0d:d8:70:0b:c5:95:a2:c7:22:34:
49:dc:10:7e:d3:bd:16:d8:69:f1:10:25:4b:77:25:29:b6:36:
cb:7e:c9:1b:83:2c:da:56:34:1a:12:f0:ec:f5:42:f7:6c:02:
26:30:26:81:f3:35:5c:e2:c6:19:20:de:f7:ef:9f:64:16:4e:
da:d2:7f:ea:36:96:64:b6:da:93:b1:e7:3a:44:c6:a6:ad:53:
c9:74:98:05:91:c9:0d:5a:75:c8:fd:cb:04:bc:29:73:f6:f2:
5b:b7:50:4a:a1:a7:46:e4:6a:93:c5:2c:10:75:29:00:d8:1b:
ae:cf:a0:a4:c6:83:a3:42:01:25:9b:d3:f1:b6:68:73:4d:ed:
0b:1b:d4:70:b4:1e:fa:1e:73:a9:16:0e:3f:28:9a:70:e9:a0:
97:47:bb:e5:e6:c0:f9:34:66:e9:64:b8:f1:b3:ba:d5:b3:0b:
13:2a:0d:ab:f7:92:57:0a:65:fa:93:95:de:81:1d:28:20:0f:
c3:77:51:11:53:8d:0e:74:41:e3:98:15:68:94:37:7a:41:84:
1d:38:3e:69:52:28:d9:79:70:9b:28:81:06:16:af:07:a8:1c:
bc:e6:5c:60:32:cf:4f:70:02:32:ab:eb:a1:e3:ef:59:b6:8f:
9a:e7:40:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiHzltCmTnRPTgo4KFJcsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm
MDIwMjAwHhcNMjUwMTAxMTM0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGI2ZGU2YTc5MzQxNzdjNjEyZWM4MDE5NzQzNTk3ZTkwNTkxNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHIPCPNu2lbzQx3KE4A2vR8+iTZc
R2INKsIkMp0st/rKhSOZK/DHx39X+soFfPSz47ZI99DKjgZPFmT2BQXGmmj7Xy4n
byw2QkkqbxbJesbv47SnbbpUC9dGSne2pA04Ma0COz/X3eXScaBwbqNe4Sp3Touv
Il7v0rn9h305ONT1XZt94ym1bor2NjgX8cbzm6t47bOmqA9wnef1aruva5E8PNgH
dEqhONtdqGgR4V8jvvnecksnsLAB2wFIoCbefzWzbb14xYOiBEHHjsJ69XqwCJqh
+y+ku59Oz/DzkJjty7VtiMRig0J4Zo9tfypHwwm9+2i0GZsy2QJ4LZaaLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCC23mp5NBd8YS7IAZdDWX6QWRYoMB8GA1UdIwQY
MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt
NGI2YzFjZjlmZTRmLzEvSUxiZWFuazBGM3hoTHNnQmwwTlpmcEJaRmlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm
LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cpOMA0G
CSqGSIb3DQEBCwUAA4IBAQBUwsqy/LGKYQ3YcAvFlaLHIjRJ3BB+070W2GnxECVL
dyUptjbLfskbgyzaVjQaEvDs9UL3bAImMCaB8zVc4sYZIN73759kFk7a0n/qNpZk
ttqTsec6RMamrVPJdJgFkckNWnXI/csEvClz9vJbt1BKoadG5GqTxSwQdSkA2Buu
z6CkxoOjQgElm9PxtmhzTe0LG9RwtB76HnOpFg4/KJpw6aCXR7vl5sD5NGbpZLjx
s7rVswsTKg2r95JXCmX6k5XegR0oIA/Dd1ERU40OdEHjmBVolDd6QYQdOD5pUijZ
eXCbKIEGFq8HqBy85lxgMs9PcAIyq+uh4+9Zto+a50Ax
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:47 2025 by rpki-client