Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/NNPkTDbtxCjIv0T_rkcglbIHKsI.roa
File: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (raw, json)
Hash identifier: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=
Subject key identifier: 34:D3:E4:4C:36:ED:C4:28:C8:BF:44:FF:AE:47:20:95:B2:07:2A:C2
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019431DDFBFF60539C43C5130A375EB73AAA
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/NNPkTDbtxCjIv0T_rkcglbIHKsI.roa
Signing time: Sat 04 Jan 2025 15:10:19 +0000
ROA not before: Sat 04 Jan 2025 15:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 213.182.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:31:dd:fb:ff:60:53:9c:43:c5:13:0a:37:5e:b7:3a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 4 15:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34d3e44c36edc428c8bf44ffae472095b2072ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:8e:18:26:eb:eb:69:fc:7c:d8:c1:fa:cf:
d6:d6:e6:5b:cf:f2:6c:d2:24:94:bc:00:01:76:0c:
31:b5:4a:68:42:08:37:61:a3:43:80:50:51:63:f5:
42:95:62:1c:15:05:c0:c4:ee:b5:d0:a5:4a:81:74:
8b:08:93:e8:3d:a8:d9:38:d4:90:e1:37:a2:e9:38:
68:70:1c:98:4e:1f:f3:e7:c5:9e:41:4c:9d:ee:3e:
71:75:7f:3d:4e:34:72:93:82:71:6a:c9:a8:43:51:
39:de:53:f9:82:d4:29:fd:7f:25:96:08:74:6a:bf:
02:83:17:ef:10:0a:ed:f5:08:2a:54:8f:db:a3:a8:
b2:37:e2:77:07:d3:40:05:6a:c9:aa:09:85:1a:64:
20:a7:30:68:5f:ee:25:2f:69:14:d8:7b:6c:e0:ae:
07:0e:8c:b0:98:ca:ba:33:7b:a9:59:63:06:40:94:
75:02:aa:33:a2:89:04:34:06:65:d9:95:3c:12:3f:
d5:6c:6e:0c:c1:14:99:fc:d4:34:f3:fa:d4:14:4e:
76:05:19:50:bd:17:30:ef:32:76:e4:43:03:e4:a9:
05:1d:5c:44:91:83:9b:74:af:99:16:f5:cc:73:d5:
ab:0a:70:a3:e0:7d:b7:11:d3:85:78:5f:b2:f2:fb:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D3:E4:4C:36:ED:C4:28:C8:BF:44:FF:AE:47:20:95:B2:07:2A:C2
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/NNPkTDbtxCjIv0T_rkcglbIHKsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5d:a1:c8:ef:a5:f0:60:ef:18:47:3e:6a:22:e5:ca:36:c8:
f0:e5:a6:4d:3c:d1:0d:67:20:41:f7:d5:85:e7:47:9b:93:b3:
9e:6d:a8:ff:69:97:cc:88:1c:34:ec:c7:85:4e:83:0e:b8:8b:
ad:ea:ed:99:82:fa:90:12:ac:88:32:59:4a:48:3b:b5:91:6b:
ba:16:ed:73:1d:1a:d3:74:ea:51:a2:ef:27:55:d0:0e:82:1e:
85:15:f9:ab:af:15:7e:3d:8d:d5:6b:79:81:b0:34:37:16:60:
45:bc:29:a3:b8:78:44:4c:12:87:cd:a0:d6:3a:3d:85:c5:3f:
7a:5e:54:9d:e6:05:fd:66:43:44:24:f3:f1:14:89:75:e6:52:
93:c4:1d:c1:ee:61:16:e1:9e:02:cf:93:87:77:b4:a7:0b:bf:
e7:72:17:37:26:0e:cd:08:bc:48:77:e8:fe:dc:b1:ce:f9:42:
8c:2b:9a:e6:e6:41:8b:31:0f:c6:3c:4c:3d:06:32:10:d3:88:
ff:f0:82:49:8c:b2:19:a9:a9:19:d8:9c:f7:e3:69:b8:c3:bf:
69:98:47:ae:9e:1b:ab:1a:f3:62:3a:64:04:79:5c:15:52:a5:
da:16:6d:b4:aa:81:14:7b:88:ea:84:a1:3d:fe:5c:c9:f1:d7:
02:cd:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:23 2025 by rpki-client