Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/0RjgNRg0mrp-p0sUPcMzw9plAa8.roa
File: 0RjgNRg0mrp-p0sUPcMzw9plAa8.roa (raw, json)
Hash identifier: /sIoNqXyJWt95PHx7AGb8pmEwy8qEaDKsd4+c9cdNhU=
Subject key identifier: D1:18:E0:35:18:34:9A:BA:7E:A7:4B:14:3D:C3:33:C3:DA:65:01:AF
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 0194236A18AD0105671BA7EEEC933DFD5811
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/0RjgNRg0mrp-p0sUPcMzw9plAa8.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199382
IP address blocks: 213.140.140.0/23 maxlen: 23
213.140.140.0/24 maxlen: 24
213.140.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:18:ad:01:05:67:1b:a7:ee:ec:93:3d:fd:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d118e03518349aba7ea74b143dc333c3da6501af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:2d:4b:84:f7:45:ec:1f:b2:2c:28:ad:10:
5f:8d:17:f3:3b:b3:94:93:30:49:a7:5d:93:88:81:
cd:93:88:be:0f:13:38:98:67:a9:64:24:26:fa:76:
e7:39:ee:0a:81:d9:20:4b:22:e5:3b:b1:f5:8c:16:
ec:95:e5:cf:d0:5e:8f:12:91:57:22:f2:26:f4:00:
77:98:cb:4c:ac:6c:70:a5:9a:64:4d:de:3d:6c:06:
4f:0c:d5:92:1c:22:a3:7f:00:5a:b6:ce:f6:1c:72:
6a:29:a5:88:4e:b1:62:19:25:49:16:e6:b8:32:4a:
4b:f7:b5:14:89:35:d3:7c:78:da:ab:24:2a:9c:b9:
1c:9c:ce:bd:ca:06:4a:9e:d7:c9:48:f3:f0:86:1f:
2e:fd:46:5d:2d:20:fc:3a:73:95:68:8c:01:21:fe:
c5:12:c4:85:72:29:54:e3:71:f5:be:ed:49:c3:a2:
7a:62:10:15:dc:eb:19:ad:d4:ef:cd:71:a1:2a:23:
7a:64:59:8c:a1:2e:75:84:a7:68:d9:8b:13:ec:eb:
d2:9e:b8:69:46:cf:c1:09:2a:d7:02:a8:70:4d:a5:
f0:1a:58:b4:76:6d:bd:76:d4:01:13:df:38:d8:e7:
53:74:70:58:99:18:c1:50:f7:27:29:18:0b:8d:6a:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:E0:35:18:34:9A:BA:7E:A7:4B:14:3D:C3:33:C3:DA:65:01:AF
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/0RjgNRg0mrp-p0sUPcMzw9plAa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:f4:c9:39:6a:9a:15:45:0e:6d:2c:40:c2:c9:94:91:78:1a:
58:bf:6e:5a:8d:18:6b:8c:61:55:e9:f5:8e:04:a5:3b:6b:ad:
14:4b:2b:19:0d:31:51:b1:20:12:f2:2e:c5:3d:74:a5:a8:49:
ab:1b:ec:6c:79:20:5e:12:dd:4e:4a:13:e2:22:5b:88:30:2b:
66:6f:63:08:30:79:c4:72:49:cb:b8:8c:a2:6c:b2:9f:b3:c4:
ac:ce:00:3d:22:a7:bf:18:b6:2d:1c:cf:dd:0a:fc:01:07:ed:
99:67:d1:1c:2e:7b:71:ff:7a:27:40:70:e1:8e:6b:17:ed:36:
bc:b0:86:0c:3e:d9:f5:ef:c2:e0:5d:ac:67:fc:88:03:99:bf:
3c:e6:ab:74:76:49:ba:15:26:8f:b0:a4:6e:58:1b:7e:fa:15:
9b:54:c0:9c:28:4a:7a:b1:1a:40:77:67:d7:17:d2:20:a8:d3:
e2:69:36:e4:a3:bd:6c:6b:a3:9f:61:ba:04:94:db:2f:eb:b5:
00:1c:a8:4f:2d:74:12:ce:4b:f3:93:b0:cc:9e:a3:d2:95:b2:
0c:b6:81:1a:4d:5d:71:bc:0c:da:d0:9e:3d:e8:d2:06:67:20:
67:78:42:ab:af:e9:5f:c6:cb:76:41:67:b4:9f:5a:4a:b8:fb:
4d:37:04:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net