Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/AHLcyWCsjd2B_EoZ0fz3veOOMtc.roa
File: AHLcyWCsjd2B_EoZ0fz3veOOMtc.roa (raw, json)
Hash identifier: XQ1Z+LRIGbc8ClzvTUKYJ8sqNlzkxNpaSjqHU2o4xO0=
Subject key identifier: 00:72:DC:C9:60:AC:8D:DD:81:FC:4A:19:D1:FC:F7:BD:E3:8E:32:D7
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D7853C81AD4E059734C9F0E83164D9
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/AHLcyWCsjd2B_EoZ0fz3veOOMtc.roa
Signing time: Wed 01 Jan 2025 21:48:34 +0000
ROA not before: Wed 01 Jan 2025 21:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51610
IP address blocks: 213.175.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:85:3c:81:ad:4e:05:97:34:c9:f0:e8:31:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0072dcc960ac8ddd81fc4a19d1fcf7bde38e32d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:20:51:05:9a:b3:bf:fb:5a:6c:e5:96:72:
b1:18:40:1d:07:93:22:5e:9d:33:76:e7:5f:37:3e:
a9:91:49:82:19:f3:e6:1d:74:85:b0:c9:c9:c3:e0:
b9:28:5e:81:af:66:28:99:56:b2:ed:74:14:ba:f9:
6c:90:88:b5:31:2a:67:0e:b5:51:9c:25:9b:92:9c:
6b:d6:43:6a:29:bd:5d:bd:61:a8:b1:13:0c:7d:50:
10:6a:02:65:ab:0b:64:0f:a9:84:6f:bc:d7:a0:72:
b9:b0:9d:57:2c:fb:e0:45:b5:2c:03:0f:e6:f5:22:
1b:1c:0c:30:c7:41:51:28:ce:cb:90:aa:57:e6:5a:
95:2f:65:40:2b:72:a5:31:e8:46:59:ad:c5:24:e3:
d5:18:ff:2a:b3:3e:b3:5e:c8:04:6c:f0:69:a9:37:
08:e9:bb:8c:b5:8b:dc:38:cc:9f:6b:32:ab:24:13:
ea:a0:7e:c4:d3:0c:c9:5c:fa:81:8b:7f:af:41:f7:
64:a2:24:0e:98:c8:3d:32:a2:44:d4:85:2d:20:e3:
b7:74:28:5c:21:94:40:44:7b:20:f6:ce:1a:e1:1b:
14:06:28:26:25:0b:cb:69:7d:17:33:e5:9a:02:b6:
54:9e:8f:61:ee:44:3e:bd:b6:0d:49:34:7a:4b:1e:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:DC:C9:60:AC:8D:DD:81:FC:4A:19:D1:FC:F7:BD:E3:8E:32:D7
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/AHLcyWCsjd2B_EoZ0fz3veOOMtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.77.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ac:bf:70:81:74:02:7f:79:aa:71:4b:18:76:89:eb:c9:3d:
e1:f5:15:b1:55:b8:2b:d9:fa:30:9f:0a:c3:a5:cf:68:49:f1:
6f:bc:a5:b8:1b:a3:70:0b:93:66:83:35:ad:fe:fc:13:a7:44:
fd:f2:f4:ff:a9:5d:60:0b:60:95:32:5f:18:ee:13:d1:97:d5:
63:40:4d:8f:e4:c7:e8:22:78:e2:1a:8b:48:af:0e:8a:bb:d4:
20:1e:dc:e0:5e:c3:23:1a:25:04:d1:38:77:1c:0c:2d:b1:7c:
95:1f:87:f2:1c:b1:d7:ff:71:e9:65:5c:f7:59:68:14:2a:3f:
91:ed:e1:93:9d:50:7c:1e:ec:6f:8d:38:2b:bf:3a:9e:ac:fc:
db:34:f6:43:25:85:05:ff:eb:d4:a5:32:d3:bb:1b:5a:6a:19:
eb:fc:1d:ea:d3:8b:be:53:1b:2f:02:05:aa:22:8f:1a:16:32:
68:5b:5d:3b:1b:23:0d:e8:9e:68:91:43:20:04:8f:d3:26:df:
d4:96:a3:bb:c6:a6:c1:b5:e4:09:98:11:ee:77:a2:7f:c7:a1:
b6:ab:f6:f3:a1:df:f4:7d:1b:d0:9c:18:f1:61:dd:cd:c2:8d:
64:a4:cd:58:e3:ca:9f:ee:b2:0d:77:4a:e6:cb:41:71:ca:6e:
72:44:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:30 2025 by rpki-client