Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/sjitqywkz9ufiQpRQwXHpL0dJPA.roa
File: sjitqywkz9ufiQpRQwXHpL0dJPA.roa (raw, json)
Hash identifier: O1YNzqfVoGDW6rve4zWAx2oDjZ7sBc+TeGZe932UNgQ=
Subject key identifier: B2:38:AD:AB:2C:24:CF:DB:9F:89:0A:51:43:05:C7:A4:BD:1D:24:F0
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 0194221FAF861737503F666FE9F513B2F3FC
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/sjitqywkz9ufiQpRQwXHpL0dJPA.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201184
IP address blocks: 213.109.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:af:86:17:37:50:3f:66:6f:e9:f5:13:b2:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b238adab2c24cfdb9f890a514305c7a4bd1d24f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:07:b3:fc:f3:0b:82:e5:95:93:00:16:12:
1e:5c:c2:c4:6d:8c:76:58:8c:18:ae:4f:de:d8:b6:
be:86:c1:c0:0c:87:d1:3e:01:18:dd:11:a1:93:fc:
6f:af:57:41:ee:ec:79:b1:4e:9e:e5:c7:dd:b7:8b:
d7:f6:6c:ab:7d:f5:54:03:01:48:16:f1:bf:e9:cb:
18:e5:74:55:fb:6c:67:9e:0e:35:14:f9:3f:1a:00:
55:4a:3b:52:3f:be:54:dd:92:9f:bc:bb:5b:73:c0:
24:62:90:eb:56:ed:89:56:7f:a2:64:c4:43:d9:0b:
05:5b:42:c5:8f:6d:de:7f:36:41:19:f4:4b:6f:f3:
7d:f1:c7:55:0d:9a:60:ae:18:c1:36:c4:1e:18:64:
23:0c:07:53:a8:2f:79:03:21:d7:aa:79:a1:5b:c1:
7b:47:5d:47:cc:83:82:e1:9d:e0:61:e3:11:fd:2a:
80:c8:fb:89:45:54:f6:86:f8:dc:44:ce:f7:56:f9:
be:5a:dc:02:0e:55:1b:a3:bc:5b:1d:9c:0c:01:ca:
74:d7:d2:65:e0:95:f1:5b:20:67:c7:f7:64:e9:0a:
e0:54:6a:7d:0e:c5:70:37:9d:19:8f:3a:82:f4:58:
3c:85:c8:17:26:e8:c0:c0:35:c2:c1:2e:ea:49:c1:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:AD:AB:2C:24:CF:DB:9F:89:0A:51:43:05:C7:A4:BD:1D:24:F0
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/sjitqywkz9ufiQpRQwXHpL0dJPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.81.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f3:95:09:b4:66:05:2c:b3:ae:99:c2:04:6d:26:21:1b:3e:
0f:c8:1a:d9:b2:ad:f3:36:a9:c8:28:b7:80:e4:b0:75:7f:f7:
32:fc:f8:a8:76:83:b8:f2:7e:42:3f:46:27:0a:19:3e:9d:9e:
73:cb:ad:91:37:5d:e0:c2:76:22:ff:98:f5:c3:d1:b7:6a:2d:
65:d1:62:b5:08:12:c4:10:4f:69:3b:99:df:75:9e:59:73:57:
d2:7e:9c:35:fc:d7:93:91:7f:88:48:bc:62:c2:c9:fd:39:4d:
85:90:61:76:04:a4:f9:af:95:88:9e:03:34:46:10:77:f6:f6:
a3:70:e8:d4:8c:40:69:eb:13:fc:0e:55:62:29:de:22:2c:39:
62:12:40:99:87:86:15:ef:6c:91:0e:bd:24:97:e0:67:be:73:
55:5b:c8:9f:f9:b1:52:4d:a1:42:ef:ff:04:c7:46:5d:c2:3b:
11:46:28:1b:e5:e6:73:4a:4e:5e:83:d3:83:0f:e8:a0:c2:98:
7d:f2:5b:25:e7:f0:6c:93:28:e7:84:a8:64:72:55:88:96:32:
ed:54:95:4c:4e:0b:a6:d0:e0:53:fb:62:d9:b7:d9:e6:4e:8d:
c3:ce:92:a5:25:69:bf:cc:4f:24:79:08:4b:fe:03:ab:1e:71:
af:57:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:05 2025 by rpki-client