Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/9B_nRxWCf-IC__yWPSp2TtcLH_U.roa
File: 9B_nRxWCf-IC__yWPSp2TtcLH_U.roa (raw, json)
Hash identifier: HIni5u9YKsNdRHwljtSVtJZz+uwQKEAkuVEZPM74tyE=
Subject key identifier: F4:1F:E7:47:15:82:7F:E2:02:FF:FC:96:3D:2A:76:4E:D7:0B:1F:F5
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 01942143C7458F1642E0128260441F09A239
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/9B_nRxWCf-IC__yWPSp2TtcLH_U.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43458
IP address blocks: 213.159.136.0/24 maxlen: 24
213.159.137.0/24 maxlen: 24
213.159.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c7:45:8f:16:42:e0:12:82:60:44:1f:09:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41fe74715827fe202fffc963d2a764ed70b1ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:87:0f:60:90:28:72:07:f9:f9:4a:77:6c:
12:09:b0:05:56:b0:89:02:0a:d9:51:fd:5f:6d:8c:
96:88:45:ee:19:54:96:e7:51:37:58:94:34:9f:af:
f3:ce:58:4f:de:6c:66:c9:a5:f8:98:e9:42:27:88:
44:14:a9:55:5f:51:2c:4e:e8:17:56:e7:7b:42:7d:
5a:d0:66:e8:48:95:85:44:d2:b3:c3:cb:91:95:a2:
98:55:7d:c0:ef:14:75:8a:55:a4:32:62:f8:e9:f7:
bb:87:55:09:1d:60:bc:9e:af:81:83:f1:0a:4b:16:
a6:de:46:be:b2:8e:47:7f:b8:33:85:b1:80:16:2d:
f0:46:ba:e3:ac:47:fd:59:fb:70:15:c3:64:38:b8:
54:fc:ef:4d:83:f8:21:b4:ce:35:e7:e0:c6:27:6e:
0f:66:67:e0:0d:00:b2:12:b4:d5:fd:41:c1:a7:55:
27:e5:37:93:81:bd:ce:d1:58:ca:d8:82:f5:ac:c8:
1f:0f:2d:a5:06:48:e5:d4:62:0f:f7:8a:f8:eb:f5:
96:80:4e:3c:94:97:53:db:cc:67:a5:27:89:fe:d7:
80:60:05:16:72:69:a4:5f:b5:b5:8b:c7:14:df:d8:
72:53:21:4f:84:f1:f3:62:82:9b:48:e4:1a:f3:f7:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:E7:47:15:82:7F:E2:02:FF:FC:96:3D:2A:76:4E:D7:0B:1F:F5
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/9B_nRxWCf-IC__yWPSp2TtcLH_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.159.136.0-213.159.138.255
Signature Algorithm: sha256WithRSAEncryption
49:a9:84:ba:0a:b5:22:f9:9e:ef:f8:57:84:48:de:7f:36:97:
e8:17:1d:94:9b:44:ca:48:6e:52:0c:20:ca:d8:07:3f:89:99:
5f:26:7a:c2:e2:76:75:ae:42:d4:e2:2c:dd:ce:ac:40:2a:05:
d1:e8:c0:ce:fc:ce:78:65:41:f1:bb:6b:4c:ed:0d:19:21:00:
95:01:fe:e9:76:88:21:f0:d9:ef:e8:3f:77:f8:35:28:05:89:
0b:a5:86:db:08:54:aa:04:d3:1b:e4:20:88:1b:26:40:9d:49:
51:f3:1d:18:cf:95:46:cf:7a:d1:6b:cf:a1:fc:89:f7:21:f0:
ee:bd:d9:2c:7e:7c:1e:39:ea:fa:b1:c7:d3:0d:f5:71:11:c7:
14:66:6c:d5:85:cc:1a:dc:17:51:94:36:ed:71:9d:26:3d:15:
d1:a1:84:07:3c:9f:15:11:f4:28:78:35:d4:de:9f:79:ea:15:
5d:23:dc:ea:f9:3a:73:02:aa:e0:26:62:67:f2:55:6a:0b:d5:
15:e9:86:b0:ec:63:93:14:27:d2:c4:75:fd:2c:6b:13:04:60:
65:51:f4:4a:26:66:84:a2:55:9d:1f:a4:bb:f0:cf:06:ed:b3:
f4:cf:50:ec:90:40:bf:e4:4c:f6:02:13:4b:0e:57:5a:55:65:
9e:62:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:02 2025 by rpki-client