Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/L_GPaVFv9sSYM8xrMaIeZn1nNiw.roa
File: L_GPaVFv9sSYM8xrMaIeZn1nNiw.roa (raw, json)
Hash identifier: Da3M8xIzqR+OwzDsPvk63LRcOzLaodOdpauAUs6zzW8=
Subject key identifier: 2F:F1:8F:69:51:6F:F6:C4:98:33:CC:6B:31:A2:1E:66:7D:67:36:2C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E2CD97D83ABD3478EC1D9D8FB9B7
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/L_GPaVFv9sSYM8xrMaIeZn1nNiw.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24693
IP address blocks: 213.16.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e2:cd:97:d8:3a:bd:34:78:ec:1d:9d:8f:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff18f69516ff6c49833cc6b31a21e667d67362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:41:a3:79:fd:05:49:02:c2:5e:98:8e:29:
02:76:6d:ca:8b:39:64:f9:df:9c:25:96:d0:52:e6:
ce:8d:21:07:0d:5d:33:ad:d0:cf:31:6b:0b:cd:b1:
53:65:1d:22:dd:dd:76:96:e1:d8:61:0c:06:31:09:
1b:33:92:3c:b7:94:44:e4:11:f7:76:11:d0:b0:eb:
cb:87:b2:61:9a:46:66:1b:7a:94:86:30:07:b4:7e:
db:29:04:24:49:9c:2d:ad:1a:de:33:9c:bf:d9:99:
e8:4b:76:60:e0:34:e6:b3:0d:3f:52:b3:ac:34:85:
f8:6b:e4:12:13:3d:b2:3b:7d:b2:c1:65:d5:94:89:
83:c7:5f:ea:83:52:49:56:65:5b:cc:8c:ec:a5:80:
a5:92:a1:30:45:80:7f:c2:ff:b2:5d:69:d8:c5:d8:
9b:29:5d:93:e2:c7:7a:b2:ba:f6:70:51:6b:cd:41:
c5:ef:ce:36:a0:af:c4:4c:d6:c7:1f:86:23:83:b9:
cd:ce:7b:66:aa:5a:4b:cc:f8:1b:a6:2a:96:82:b3:
67:58:2c:8c:8d:92:84:23:de:87:20:99:ba:59:7b:
25:8f:bf:38:68:29:e1:da:49:00:a9:70:88:9f:bc:
de:8a:b9:37:46:84:a6:48:12:94:01:c3:c5:e6:40:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:8F:69:51:6F:F6:C4:98:33:CC:6B:31:A2:1E:66:7D:67:36:2C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/L_GPaVFv9sSYM8xrMaIeZn1nNiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.36.0/24
Signature Algorithm: sha256WithRSAEncryption
86:15:32:83:ab:39:fc:46:6a:20:31:79:80:6a:a0:bc:5d:99:
e4:51:17:10:ae:8a:e9:63:0a:4d:55:8f:92:dd:d8:cc:89:2c:
59:08:7f:2d:a0:31:cc:d6:9e:ce:bf:34:f9:7c:c1:1d:30:1b:
f5:2e:17:45:70:2d:cb:34:36:f0:ba:1f:ea:c0:f3:83:0b:65:
58:b6:b4:70:d7:d4:51:b0:53:6b:82:80:95:48:4c:21:9d:2d:
6e:5c:1b:d3:e5:2e:1b:e5:8f:0a:d9:3a:2f:f5:d9:bf:92:3e:
64:81:d3:7d:6e:6e:e7:95:9d:f3:87:98:28:bd:d0:d9:5b:9e:
af:2a:5d:b7:8b:39:9b:4d:c6:f6:db:f1:d0:0e:1f:1f:d5:3f:
16:ff:b2:33:38:30:1c:ec:c5:de:43:ee:39:99:11:b7:d8:96:
bb:f3:d4:59:0e:c0:d1:f3:ed:a7:70:3b:f3:bd:22:68:2b:7b:
83:f9:ef:79:59:2f:b4:72:24:75:76:56:26:72:32:27:50:75:
e2:2d:20:a8:d9:11:2b:b2:02:43:2a:83:fb:98:92:de:81:20:
58:7c:73:e6:62:98:c1:c6:5e:37:da:70:8b:53:4c:34:19:6a:
11:68:a4:7d:31:c9:08:8c:84:52:89:6b:22:3d:25:a3:4e:c3:
91:eb:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:35 2025 by rpki-client