Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa
File: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (raw, json)
Hash identifier: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=
Subject key identifier: 21:70:AD:11:A3:0D:78:85:21:A9:79:7C:2F:1D:E5:F3:E0:E2:AF:F4
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 0194266BFBF60DF28BBB664DF01BD026F24A
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa
Signing time: Thu 02 Jan 2025 09:49:58 +0000
ROA not before: Thu 02 Jan 2025 09:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51682
IP address blocks: 213.232.96.0/23 maxlen: 23
213.232.96.0/24 maxlen: 24
213.232.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fb:f6:0d:f2:8b:bb:66:4d:f0:1b:d0:26:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2170ad11a30d788521a9797c2f1de5f3e0e2aff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:d7:4c:9e:d6:68:41:d1:5c:c6:e1:1a:1f:
ca:9e:87:42:df:9d:1c:8b:ec:de:80:f2:60:7b:93:
68:cd:6a:e5:0a:6d:e8:60:da:c9:3f:8f:b8:d7:c0:
fa:b2:7b:c9:42:36:74:92:67:73:a6:62:94:a6:d6:
7e:de:9d:b1:d4:7e:86:2e:36:bf:9c:50:7e:33:7d:
50:2a:18:10:cc:e9:31:de:b4:16:fc:c6:4c:3c:e1:
1b:b4:75:25:6e:1a:70:d8:56:74:12:74:d6:a2:f3:
02:16:05:04:a5:05:ff:5b:55:d2:ce:f4:25:f1:01:
56:fa:93:ee:7d:0a:b2:f0:a4:d6:ae:46:c3:fe:76:
04:83:30:82:5b:dc:69:69:46:1b:9a:c3:cf:f4:f8:
3c:5c:cb:99:90:87:31:6e:fd:98:54:c1:77:92:2d:
c0:72:69:82:a2:0a:39:e7:e8:b8:51:81:3b:b6:da:
7f:42:10:79:91:3e:86:5d:19:ad:d6:3a:71:c7:42:
06:bc:15:0e:67:ea:7a:0e:69:73:f2:a1:2f:79:e6:
67:6f:a6:af:1d:f2:46:de:53:d5:fd:f9:98:26:58:
a8:29:dd:48:66:cf:bb:27:d1:19:b2:5a:e6:7f:4f:
f9:79:72:9a:ea:e5:f2:d1:20:7f:cd:5b:ef:1e:82:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:AD:11:A3:0D:78:85:21:A9:79:7C:2F:1D:E5:F3:E0:E2:AF:F4
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.96.0/23
Signature Algorithm: sha256WithRSAEncryption
32:36:f4:3b:7a:b8:09:64:9e:bc:01:b2:ec:1c:49:6c:7b:80:
2f:42:f2:d2:e6:fb:d9:17:53:02:d3:27:d1:7b:d0:2d:db:97:
d8:b5:fb:ec:ca:7c:ff:5a:94:43:ca:95:39:6e:52:65:97:e1:
92:93:d0:fd:f8:e3:53:a9:90:7c:17:fd:75:36:bf:dd:e2:50:
67:b5:f0:7f:dc:2b:ad:04:26:8e:bb:99:53:34:09:d6:c2:73:
c5:8d:31:6f:f6:47:81:42:dc:12:81:52:9e:bf:d6:10:20:bf:
e0:30:c7:0b:9c:6b:97:8d:2e:92:f1:fd:55:85:34:d9:88:9f:
48:29:2c:42:22:40:12:67:01:1e:4a:07:1c:a1:df:4d:2b:4a:
2a:cb:52:da:66:76:d1:dc:1f:48:1a:58:50:8d:8f:c7:10:fc:
b0:ab:f2:aa:40:3e:25:67:f3:72:cd:40:f8:9e:d7:97:72:e0:
5d:c9:7b:50:55:e7:ee:fe:bb:70:95:6c:3c:01:20:79:f1:23:
a4:d3:30:73:57:8b:f1:73:5a:54:f6:b4:17:b9:b0:d4:41:c7:
20:09:26:4e:ed:b9:c3:35:d9:a8:56:23:d2:a7:47:7e:84:27:
d2:49:9b:55:ac:18:29:cb:55:86:83:ac:c5:17:02:6e:ff:98:
8c:d8:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net