Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa
File: liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa (raw, json)
Hash identifier: PH03F8UhRKFA3g0ZorCZDIyppRrDIopkxrEtCKPjXS8=
Subject key identifier: 96:2A:A9:78:60:B0:63:09:AE:F4:72:09:5E:1B:51:76:20:A7:27:5C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019421445BC04210758B9FB3F883065EA03F
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200296
IP address blocks: 213.108.240.0/23 maxlen: 23
213.108.242.0/24 maxlen: 24
213.108.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:c0:42:10:75:8b:9f:b3:f8:83:06:5e:a0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962aa97860b06309aef472095e1b517620a7275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:50:4d:8c:db:d6:9d:34:f6:2b:47:80:d4:
3b:50:79:7a:55:7d:ce:c6:a7:ce:b7:f7:6c:bd:a1:
ed:bf:85:d0:e0:35:90:db:0e:fe:40:ca:7d:cb:23:
48:b0:61:58:66:76:c0:9a:db:5a:29:43:3d:89:61:
61:a9:34:de:36:0c:04:0c:c0:e8:45:71:46:d3:cf:
2e:c1:35:51:46:9f:9e:03:19:3b:49:88:53:65:eb:
c8:f3:37:bc:fc:01:5a:fb:45:d3:fe:b8:db:a2:15:
89:c3:4f:a9:25:5a:ee:b4:5c:f6:c4:0f:7c:bc:31:
af:db:96:f9:bd:15:8a:45:4f:a7:a7:45:02:5f:56:
32:f3:9f:38:a4:c4:21:7a:94:5b:7e:50:7f:5d:45:
00:5b:8f:80:13:54:fa:73:62:6a:46:dc:ab:65:53:
17:48:06:1a:38:72:90:75:bb:86:e1:be:0d:62:9a:
dc:c4:40:1e:73:7c:05:32:fa:52:50:8d:88:05:93:
f9:50:12:59:b6:01:c6:6d:4b:cb:d0:9c:04:c1:42:
c4:31:b3:1d:42:19:e7:be:f9:54:95:dc:7e:6c:ae:
f0:8a:1f:f7:e7:ea:bb:08:27:4c:6f:b2:fb:98:76:
0a:fa:34:4b:4e:fe:ca:89:18:22:32:74:78:6a:b5:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:A9:78:60:B0:63:09:AE:F4:72:09:5E:1B:51:76:20:A7:27:5C
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:34:4e:0e:dc:bc:ea:61:4d:52:90:2c:9a:5d:33:07:70:69:
13:c0:7f:c3:71:75:cb:31:69:09:d4:11:42:34:2b:62:3d:c0:
54:08:49:81:d7:22:c7:15:74:89:5f:5e:a4:da:78:82:d9:83:
46:e7:c7:06:09:29:87:88:c2:26:43:c5:16:dd:56:f1:a5:6e:
cd:68:2f:7b:72:ce:be:68:ba:f5:44:8a:f4:3a:11:3e:a2:69:
f1:3e:b1:cb:bd:7c:55:5a:40:34:ec:bc:f9:15:66:3e:9e:fe:
ba:4d:41:09:ab:90:c1:96:69:05:fb:e7:db:f8:0b:a8:09:b9:
66:54:1d:d4:a5:1b:25:92:6e:10:78:40:cf:2a:bb:40:15:95:
d4:73:94:f5:6b:54:c2:0a:84:50:61:0c:61:7d:dc:d2:e7:9e:
5e:cd:43:8c:eb:a7:bc:d0:43:63:fb:62:37:b3:9f:f5:ac:94:
7b:f5:a6:f3:8e:70:eb:a4:d7:df:ad:31:39:34:0d:7f:70:dc:
5b:b5:fb:3d:8b:31:b0:37:94:ef:fc:bb:57:62:16:38:97:e8:
6b:c7:53:dc:0d:1c:42:4e:6d:37:ba:0e:ca:1b:9a:ce:17:c8:
b5:2d:51:97:b6:29:3a:b5:71:e7:1f:bf:86:ec:49:32:6d:c6:
23:31:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:58 2025 by rpki-client