Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/8htMOFqOVNqhoJsQ8eG9k6J5bm0.roa
File: 8htMOFqOVNqhoJsQ8eG9k6J5bm0.roa (raw, json)
Hash identifier: rNYfDHzH00/YgG7o6n1oqXlAyVFBpl8DLX9g9USL/KU=
Subject key identifier: F2:1B:4C:38:5A:8E:54:DA:A1:A0:9B:10:F1:E1:BD:93:A2:79:6E:6D
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 0194236981790DFF2A9C54973130DB30B196
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/8htMOFqOVNqhoJsQ8eG9k6J5bm0.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 213.132.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:81:79:0d:ff:2a:9c:54:97:31:30:db:30:b1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f21b4c385a8e54daa1a09b10f1e1bd93a2796e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:55:64:6f:2d:89:e9:0c:a8:7d:17:8c:78:
96:cb:09:f2:dd:37:99:5b:a9:f4:2f:a5:bb:bb:40:
fa:a9:96:e1:58:48:49:bd:80:61:ff:d9:60:fd:8d:
f7:79:4d:11:34:9e:2e:55:6c:8a:f8:bc:aa:0d:cf:
83:83:54:30:c6:82:9e:ba:cf:eb:a6:fc:f7:a7:6e:
f5:fe:7f:19:b4:9b:6e:45:36:6d:31:ca:af:e4:d0:
bd:c8:73:bb:cf:22:0c:60:af:52:02:42:eb:50:74:
ca:e4:15:e4:39:94:c2:e5:eb:f3:27:74:86:a7:77:
de:bd:30:81:a1:98:2c:c3:e7:40:3f:b7:9f:87:0a:
6f:13:c0:24:dd:0b:c1:09:37:c7:eb:dc:6c:73:17:
58:f6:d4:e6:db:81:78:98:dc:07:1f:05:ab:2e:51:
82:75:67:04:6a:e2:cd:91:c3:05:a3:2f:32:c0:af:
bf:4f:49:f7:34:67:dd:8f:32:37:b1:63:c2:93:5a:
2b:14:b0:cc:44:19:2b:e9:1e:39:e3:cb:2f:21:75:
4b:a7:36:e5:f6:bd:55:b2:66:53:2f:2f:29:9d:62:
bf:51:45:0f:9b:7d:54:50:05:4a:20:d1:64:38:40:
7d:fc:a2:69:93:ef:f8:c4:40:a9:cd:41:08:2b:f2:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1B:4C:38:5A:8E:54:DA:A1:A0:9B:10:F1:E1:BD:93:A2:79:6E:6D
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/8htMOFqOVNqhoJsQ8eG9k6J5bm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:83:02:1f:a2:06:14:9c:6a:45:be:88:10:80:eb:31:aa:75:
52:79:86:1d:e5:59:ef:a6:5c:52:d4:00:67:8c:16:0c:0a:1a:
70:ad:57:bd:ca:d8:26:4e:92:e2:b2:e4:62:a7:76:86:5b:1e:
f0:46:b7:b6:d7:41:79:90:8b:10:d3:12:e1:91:e9:ad:b2:9b:
8e:d5:a3:bf:09:ec:7c:49:4d:88:da:19:6c:29:e9:39:f7:b2:
93:69:00:12:99:28:97:59:41:69:07:a4:52:46:ad:0a:7e:66:
83:4b:45:dc:28:c7:77:3b:4c:17:81:83:ea:9d:0c:11:e4:9a:
57:b5:d3:41:5f:fc:30:49:75:b8:5e:36:42:6d:d2:1d:e8:cf:
5a:b7:d7:ba:9a:bc:49:4c:0a:7d:c6:20:c9:17:4a:36:95:8d:
f8:df:a0:43:e7:f9:d7:7f:95:45:e3:50:85:7e:6c:50:71:af:
b0:69:94:49:89:14:18:48:41:8e:56:a0:b5:f9:e2:e2:86:a2:
8e:6c:c6:db:b5:ef:9c:de:3a:83:0d:62:7a:5d:72:34:57:a2:
cc:a4:3e:64:07:ac:3d:7d:a0:0c:73:44:52:e3:28:07:63:2c:
2e:de:7a:b6:6e:05:83:f7:45:e3:0d:67:b5:c8:3c:53:e7:c5:
8b:9b:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net