Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa
File: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (raw, json)
Hash identifier: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=
Subject key identifier: 5A:DD:D7:DC:1E:8D:71:9F:A6:C6:B3:4F:87:67:C6:F7:D3:EA:AD:11
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 019427B51A142C91F09E1BF4E9D414EDB455
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa
Signing time: Thu 02 Jan 2025 15:49:27 +0000
ROA not before: Thu 02 Jan 2025 15:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15925
IP address blocks: 87.253.248.0/21 maxlen: 21
213.135.192.0/19 maxlen: 19
2a01:7f8::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1a:14:2c:91:f0:9e:1b:f4:e9:d4:14:ed:b4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Jan 2 15:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5addd7dc1e8d719fa6c6b34f8767c6f7d3eaad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:4f:d1:a7:17:7a:76:93:32:04:60:bf:b0:
0d:f9:66:1d:e4:9b:d3:5d:95:78:41:89:af:66:05:
1c:32:69:e9:53:20:c0:52:3a:6c:05:36:1b:e0:b9:
49:2f:3c:63:78:07:1c:de:50:bd:0e:0f:ec:89:39:
78:dd:e7:93:1e:92:3b:3b:03:3d:57:8f:34:3f:fd:
ab:f5:c7:7b:b1:bf:f3:15:1c:9e:b0:aa:d1:16:05:
fd:f9:ed:09:fe:62:22:5b:7e:36:bf:56:83:e5:39:
fc:50:cc:cb:ed:1d:61:5a:bd:5b:a8:c5:6c:11:23:
d5:c3:a0:17:1e:08:b8:1c:7e:64:81:80:8c:69:85:
f5:9f:1f:00:f6:04:37:bc:cb:53:cd:67:4e:da:a8:
3b:b5:00:7b:c2:e2:8e:76:5a:3a:b3:c9:dc:56:2e:
7f:20:90:8b:ab:10:f4:b1:ae:b9:79:c8:09:b4:5c:
73:60:a9:b5:e6:c4:04:9a:5e:70:6f:3d:9d:21:86:
cc:75:b9:1e:82:92:9d:40:28:40:22:40:05:fb:00:
19:f3:e3:b9:91:f7:88:45:7d:8e:79:e5:99:e2:68:
12:3f:6e:22:2e:b4:33:a9:c3:2b:f9:b6:7c:b2:8c:
b2:36:43:63:31:1c:8c:a6:a3:1b:5d:8f:ba:9b:09:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:D7:DC:1E:8D:71:9F:A6:C6:B3:4F:87:67:C6:F7:D3:EA:AD:11
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.253.248.0/21
213.135.192.0/19
IPv6:
2a01:7f8::/29
Signature Algorithm: sha256WithRSAEncryption
3f:e8:80:e0:11:d7:a7:a4:6b:48:41:ed:e8:71:b4:db:b8:3f:
12:b7:94:67:e9:6a:47:12:ef:6f:4a:b0:f8:91:f2:f6:5d:4f:
b8:46:e1:6f:a5:57:e0:20:39:2a:07:7d:e4:8b:2c:02:5b:01:
dc:2f:be:bc:cb:4b:bc:99:c1:91:a3:13:3d:42:07:6f:72:23:
49:67:b1:96:af:ec:a2:1b:78:fb:25:7f:77:3b:74:a7:70:c4:
5c:cb:b6:77:89:46:4c:24:27:41:9e:92:01:c7:2e:a2:42:50:
e8:1f:27:4b:f6:ad:00:05:49:27:fa:b7:aa:d6:00:8d:af:b9:
67:c3:f1:7f:4e:d8:db:b5:2a:a0:4b:e8:a6:2d:36:1b:37:9d:
5c:9f:cd:de:aa:33:a3:2b:b0:35:9e:16:d7:ed:af:65:42:0b:
d2:91:c0:8e:fd:30:e3:71:bc:5d:85:0e:0e:11:6c:ed:cc:1a:
69:fd:2b:23:27:13:d8:7f:12:ed:0c:20:c7:6c:28:2f:e4:6a:
ed:88:28:84:2e:6b:ec:2e:5c:f3:b9:cf:3b:8f:10:9c:7f:a0:
ff:49:5d:6a:e8:34:ce:a5:c3:a0:cd:ad:fc:89:09:b9:85:42:
d4:eb:9c:4e:b6:38:48:4c:e1:c1:39:c4:96:74:b0:18:ea:10:
a1:cf:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:57 2025 by rpki-client