Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/CXfl0vZF1sbQq93reOXuNh2tfq0.roa
File: CXfl0vZF1sbQq93reOXuNh2tfq0.roa (raw, json)
Hash identifier: ouJvYI4QUtdTBIQDtkd9tLF9CepiUn3okCMjYpiyZEI=
Subject key identifier: 09:77:E5:D2:F6:45:D6:C6:D0:AB:DD:EB:78:E5:EE:36:1D:AD:7E:AD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 019425FC33466DE6ACB4B14624C70388548F
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/CXfl0vZF1sbQq93reOXuNh2tfq0.roa
Signing time: Thu 02 Jan 2025 07:47:52 +0000
ROA not before: Thu 02 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43647
IP address blocks: 213.148.18.0/23 maxlen: 24
213.148.20.0/22 maxlen: 24
213.148.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:33:46:6d:e6:ac:b4:b1:46:24:c7:03:88:54:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Jan 2 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0977e5d2f645d6c6d0abddeb78e5ee361dad7ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:9d:ac:7b:0f:de:05:eb:6e:98:e9:3c:fe:
d0:a5:42:9d:63:0c:1b:03:57:ce:fe:f2:d3:a5:c2:
aa:2a:40:f5:2b:85:f9:22:fe:91:23:94:9d:66:5a:
2d:fe:9f:07:15:d8:d7:fd:12:c9:aa:12:6a:4d:94:
24:7b:af:89:7d:b0:7d:1c:ed:95:47:75:4a:22:2b:
59:d7:3f:5c:4f:5b:f5:e8:38:8a:c8:e6:96:ae:18:
bf:a8:9e:59:c4:b7:c3:8d:c4:f7:9a:f1:96:f8:d7:
35:1c:85:28:7b:67:5d:91:3c:32:ff:20:0f:b0:09:
0d:79:46:3b:ac:c2:f6:d1:a5:d0:23:0a:0f:4e:b1:
48:cd:3d:da:b6:ec:b3:f9:dc:46:68:2e:bc:e0:97:
9a:95:1f:10:75:04:8f:4d:04:ca:20:bd:c4:ac:8a:
5e:bc:03:30:69:d5:a0:7d:77:2a:3b:c2:a9:b4:21:
2f:bc:39:ac:7b:f8:a0:cc:48:b3:dd:d9:a6:50:49:
63:25:77:a0:87:b0:0d:55:ff:3a:ea:36:4e:fe:79:
21:90:5d:b8:4d:86:94:62:12:f5:3b:6d:e7:64:11:
e3:a4:52:40:d1:00:8c:a0:58:42:77:f8:5c:4f:1d:
18:3c:79:a2:6e:44:82:3b:b7:63:9f:67:af:dd:2e:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:E5:D2:F6:45:D6:C6:D0:AB:DD:EB:78:E5:EE:36:1D:AD:7E:AD
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/CXfl0vZF1sbQq93reOXuNh2tfq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.18.0-213.148.23.255
213.148.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:11:c3:a1:6e:6d:80:ca:d3:08:08:38:34:de:a6:ba:14:c8:
13:2a:aa:00:f7:ff:8a:10:32:2a:b5:60:90:ad:02:cc:10:04:
93:e3:fc:eb:a9:7c:e3:14:fa:29:f4:a5:e5:2d:f9:cf:17:87:
f6:c7:2e:48:9f:55:17:5f:f9:ab:fd:35:cd:31:ea:8b:7a:f9:
db:5c:6e:a3:11:59:e2:f0:9b:ee:a9:2c:c7:17:eb:0c:79:16:
8f:e6:f7:50:d0:5d:8a:31:6f:90:2c:2a:fe:66:47:a8:ed:e3:
f3:55:d1:c2:79:6f:fe:a7:b9:d5:78:1a:55:0b:f4:d2:4a:53:
06:71:c7:d1:e8:fc:c0:bb:c1:f2:b1:91:ee:30:7d:31:82:de:
97:a0:b6:a0:34:c6:db:5a:5a:a0:79:1a:37:7b:a6:b1:1e:c3:
2e:db:01:cb:df:e6:6a:ee:81:98:76:e3:0d:cb:90:ba:e7:67:
c7:b3:c0:76:17:ab:02:70:8a:51:9b:c8:cc:80:cc:df:e1:96:
cb:37:90:5e:2d:96:16:b6:07:2e:b0:c0:8e:1a:6c:94:7c:7c:
c5:42:59:13:d7:58:45:7e:61:aa:b4:ab:fa:cb:0a:45:98:6b:
f7:24:9c:06:83:c1:83:18:fe:34:29:cc:8e:b9:77:aa:ad:09:
9e:fc:2f:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:30 2025 by rpki-client