Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/IPW3rYP7oE9P_ES0-kMgln06Sio.roa
File: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (raw, json)
Hash identifier: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=
Subject key identifier: 20:F5:B7:AD:83:FB:A0:4F:4F:FC:44:B4:FA:43:20:96:7D:3A:4A:2A
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019425FDBD7DDB64AF81AC08377736D13490
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/IPW3rYP7oE9P_ES0-kMgln06Sio.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39729
IP address blocks: 213.158.64.0/19 maxlen: 24
213.158.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bd:7d:db:64:af:81:ac:08:37:77:36:d1:34:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f5b7ad83fba04f4ffc44b4fa4320967d3a4a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:a8:4a:00:7c:53:e8:9b:60:9a:82:bb:b3:
07:90:ea:ce:e7:20:59:1a:20:da:85:d5:35:a8:e7:
f2:75:df:98:9a:4d:fb:6e:d5:a0:6a:7f:9c:5c:9f:
f2:e3:3c:50:fd:63:d5:89:cd:36:bf:1d:79:89:a8:
c3:7e:1a:a7:9c:cf:92:89:4a:47:2c:08:40:cc:d7:
3d:75:89:c4:a0:b4:9e:0d:0c:91:f3:96:84:2d:ff:
22:0d:8a:b7:b4:f9:b9:39:90:b2:f4:0a:b3:39:ae:
07:3b:f3:de:b3:d2:ff:e7:c6:88:87:66:7b:0f:69:
82:6f:f8:f0:97:43:5b:1d:cf:3b:47:89:eb:89:92:
73:c1:38:96:a2:ce:92:9b:77:b2:63:01:ce:76:0b:
35:76:35:dd:0f:e6:f8:3c:bf:62:49:0e:b1:14:67:
a3:75:77:b8:98:41:91:c0:d2:ba:93:58:b6:15:d4:
e5:77:49:6e:68:ac:ec:e1:44:b7:e6:fd:d9:b2:77:
49:1d:66:32:79:98:9e:67:d2:4f:29:87:61:22:f6:
fb:80:5f:0c:7c:d9:f0:0a:e7:e3:1c:64:bf:15:d9:
57:0d:3a:97:d6:c4:01:2e:be:7e:94:5d:96:5b:f1:
3e:93:2b:d6:7e:b4:d4:8e:f3:63:2e:aa:fb:91:b5:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:B7:AD:83:FB:A0:4F:4F:FC:44:B4:FA:43:20:96:7D:3A:4A:2A
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/IPW3rYP7oE9P_ES0-kMgln06Sio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.64.0/19
Signature Algorithm: sha256WithRSAEncryption
80:2a:4d:b7:03:65:3d:14:91:70:f2:ed:b3:d5:87:79:fd:9e:
8b:76:49:22:fb:57:89:e4:f6:d8:87:5c:33:03:83:cf:3a:60:
19:95:41:ef:8d:a7:17:b5:33:36:57:3a:ce:5e:9b:fd:4c:d1:
3f:2f:a9:81:05:65:e4:a4:32:bb:3f:fc:b3:9c:49:67:a3:3c:
70:75:b8:32:0d:5e:b3:ec:fb:d4:ac:47:04:7d:da:b9:38:ca:
a5:b8:1b:da:f7:4b:e8:7e:26:0b:71:eb:c1:3a:ca:a2:87:b6:
66:be:a6:2b:81:73:93:0d:84:bc:e8:04:c4:fc:f3:2e:af:31:
b5:62:ee:e9:e8:8f:75:1f:23:87:51:99:61:75:69:29:d0:ed:
d1:85:ab:3b:bc:87:65:9b:78:08:92:e5:77:3c:20:da:d3:ac:
2c:c7:52:6e:c9:f7:bf:62:ac:81:d9:ff:9a:ab:7c:ba:0d:e6:
a9:a6:f1:d8:53:37:11:85:00:66:84:d3:d2:49:9e:0d:f5:63:
56:a4:57:21:ed:90:28:6e:7b:e3:95:c8:dd:dc:6f:81:8b:0a:
8e:35:00:11:bb:58:8b:87:29:eb:cd:06:02:b5:3d:54:e5:5f:
d0:3b:94:e0:80:91:c1:18:92:41:47:04:a7:3b:a4:35:d2:51:
ed:fc:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:00 2025 by rpki-client