Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/w6S_MhYhUNbTXS0HQ36YcZBH6_Y.roa
File: w6S_MhYhUNbTXS0HQ36YcZBH6_Y.roa (raw, json)
Hash identifier: u1YfNMsRdgdZh8vW6tNKkwSQ8iFw8MXbcv7VS+P7Ki8=
Subject key identifier: C3:A4:BF:32:16:21:50:D6:D3:5D:2D:07:43:7E:98:71:90:47:EB:F6
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E7F32BC623B1335C265109143C16
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/w6S_MhYhUNbTXS0HQ36YcZBH6_Y.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34577
IP address blocks: 213.16.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e7:f3:2b:c6:23:b1:33:5c:26:51:09:14:3c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a4bf32162150d6d35d2d07437e98719047ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:49:6f:41:25:d2:8f:b6:d2:36:6e:58:24:
9a:f7:ec:30:42:ec:cf:af:2b:4f:7a:af:0b:6b:e1:
75:48:6d:08:44:07:10:dd:8e:80:c6:f2:c9:c0:c1:
19:58:c4:f7:03:70:4d:7d:57:9c:34:25:87:dd:44:
0c:b1:54:1e:8b:f8:b4:f6:14:96:6d:13:9f:eb:9c:
70:b0:41:27:11:69:88:70:a3:64:a0:1a:ea:5c:7b:
07:62:3c:39:8e:fb:2a:f9:9b:f6:2d:e1:08:be:58:
79:b8:46:6f:d6:33:69:38:36:ba:bb:00:7a:3d:7e:
e0:54:59:1e:b8:7f:08:8e:12:f1:04:f9:45:08:8f:
0c:34:ef:e8:1c:b0:16:81:eb:b7:3e:0f:de:4c:b5:
1a:c8:6e:61:0e:5a:98:16:bf:b8:7d:f9:31:d1:80:
81:ad:6b:b2:9d:d2:f7:58:3b:a0:55:78:e9:1b:72:
4c:38:a8:be:11:14:8c:e7:b3:35:2d:11:10:89:51:
6c:4f:db:33:1e:e6:d5:1b:36:f6:c4:37:3f:4b:3d:
b2:46:89:49:0a:a5:d9:ce:93:24:37:71:8b:d5:38:
8c:1b:16:d4:66:b1:53:05:6e:e2:34:94:c8:1d:8f:
d7:3a:1d:55:d8:e3:4d:25:78:92:85:45:43:a9:93:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:BF:32:16:21:50:D6:D3:5D:2D:07:43:7E:98:71:90:47:EB:F6
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/w6S_MhYhUNbTXS0HQ36YcZBH6_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
56:31:9d:3b:d9:6b:96:86:9c:9d:a8:90:55:6a:9c:5c:71:52:
e3:27:4d:91:0c:4b:e6:b1:da:9d:50:ae:4b:a5:da:50:14:df:
9e:bc:56:49:e1:2c:e0:06:a3:3a:26:69:12:96:03:14:06:e3:
84:7d:16:75:11:98:c5:41:34:d6:17:df:3f:a6:36:84:52:57:
a0:d4:03:ba:79:c9:3b:62:a6:98:d6:10:bc:da:55:7d:3e:55:
88:4f:15:16:b9:e6:5b:21:f7:c7:84:12:84:4e:90:f1:a6:2e:
61:1b:ba:be:ec:52:50:cb:fd:0a:17:a5:ed:ca:25:d4:07:e8:
dc:a1:80:95:f0:c8:f1:13:e2:77:2e:49:50:a1:6a:e2:3a:4a:
91:ad:57:31:60:8a:26:fd:5d:ae:27:39:0e:ac:1a:39:24:05:
22:13:98:f3:eb:ee:c3:15:60:c1:87:c6:6b:47:be:3f:0a:fa:
bb:a0:7f:02:e4:40:aa:f5:68:cc:56:e8:ed:47:f6:41:ca:8a:
5e:88:32:54:f7:23:6e:c2:bb:85:2e:ff:d6:47:98:51:8e:bd:
f5:be:a5:ff:7a:df:1f:94:58:a1:17:bf:e0:50:57:fe:b5:18:
08:92:b8:a8:47:d7:f3:ca:a7:fa:c2:ae:13:30:51:94:91:95:
e2:43:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:23 2025 by rpki-client