Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/gdCSnbZJLxOMbI3QOJK28GKTchM.roa
File: gdCSnbZJLxOMbI3QOJK28GKTchM.roa (raw, json)
Hash identifier: XZ5ufvEuylBWh1SZLFjMYpTt+DrSCF2g31mb80zO5n4=
Subject key identifier: 81:D0:92:9D:B6:49:2F:13:8C:6C:8D:D0:38:92:B6:F0:62:93:72:13
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B57224A059B2A5B94E7331D10870E7
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/gdCSnbZJLxOMbI3QOJK28GKTchM.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14163
IP address blocks: 213.152.229.0/24 maxlen: 24
213.161.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:72:24:a0:59:b2:a5:b9:4e:73:31:d1:08:70:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81d0929db6492f138c6c8dd03892b6f062937213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:df:1b:ea:a4:6e:c0:34:25:6a:ae:e2:df:
0b:44:05:f6:88:ad:a5:3b:3f:f5:9d:85:6c:ca:cb:
a7:a9:75:2b:57:d1:1d:23:a3:d0:d5:43:d7:68:f1:
01:e2:2f:e1:58:2a:c9:38:d2:e3:96:86:04:c9:05:
9b:5b:f4:e2:05:7e:9b:01:2d:bc:80:93:2c:1f:07:
d5:09:18:07:2a:7a:18:a6:20:61:64:22:bd:d3:b6:
0a:c2:24:e9:e3:5d:3b:36:53:f8:c7:f2:88:00:b4:
89:76:a9:ab:b2:a8:44:83:52:82:b2:0d:af:fa:9c:
47:0e:37:a7:72:1d:02:e8:c4:8e:9a:5a:c2:91:10:
ef:25:32:1e:78:a8:56:4a:bc:50:6e:d1:2e:ee:9b:
41:17:5f:08:a4:78:25:98:8c:b3:ef:7a:d4:a2:41:
c6:b9:87:79:17:8d:62:3b:23:3f:b2:93:df:80:8b:
f0:9d:77:0c:57:30:88:15:54:5e:c9:6c:f4:84:e1:
a8:5d:75:7b:36:5c:7a:86:4f:ca:63:90:71:11:88:
a9:02:45:a0:09:5f:b0:f4:a2:ce:6e:23:db:bf:42:
0b:d7:40:77:aa:b6:b8:42:92:8f:f1:cd:4f:f6:22:
0d:35:c6:8c:c9:17:30:55:8e:f5:03:07:0f:bd:9a:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:92:9D:B6:49:2F:13:8C:6C:8D:D0:38:92:B6:F0:62:93:72:13
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/gdCSnbZJLxOMbI3QOJK28GKTchM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.229.0/24
213.161.86.0/24
Signature Algorithm: sha256WithRSAEncryption
04:56:61:56:50:e0:ac:ee:a6:94:a1:5b:41:ab:36:03:1a:9c:
70:09:32:09:49:8c:43:de:14:7a:48:1e:4e:88:1e:06:62:58:
7b:46:1d:22:63:5a:d3:76:db:27:f3:e9:9d:03:da:f0:3e:c8:
38:2a:31:64:48:b2:d7:ae:fc:df:81:ca:d0:a6:d1:81:ab:e1:
d1:4c:79:ed:1d:66:bc:5f:b9:f2:e4:f4:86:e1:c6:de:15:fc:
bf:e4:c8:fa:77:5e:9d:01:9c:29:bc:dc:16:55:b2:34:1a:9f:
54:3b:de:ed:04:8b:62:61:c4:ea:23:78:75:a5:c3:70:13:98:
ca:eb:8e:99:72:b9:36:42:f9:a5:23:61:bc:7f:21:4e:78:5e:
e0:08:09:f7:20:7e:20:6e:61:f3:1c:88:0a:74:dc:3e:f8:eb:
fd:32:ef:43:60:af:c5:fb:2f:68:03:a5:60:fd:9a:32:a1:78:
7c:3b:2a:e4:e5:bb:32:9e:13:14:4b:33:6d:e1:81:80:ab:86:
14:0f:c6:09:e4:65:76:f6:89:a4:4e:6b:55:20:3d:4d:be:e3:
47:fa:72:62:58:68:27:38:34:2c:15:b6:db:92:c4:8f:ad:84:
c5:01:2b:98:e9:84:83:02:f2:13:59:74:71:bf:c2:6c:39:e4:
7a:b9:b3:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntXIkoFmypblOczHRCHDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjUwMTAyMTU0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQwOTI5ZGI2NDkyZjEzOGM2YzhkZDAzODkyYjZmMDYyOTM3MjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP/fG+qkbsA0JWqu4t8LRAX2iK2l
Oz/1nYVsysunqXUrV9EdI6PQ1UPXaPEB4i/hWCrJONLjloYEyQWbW/TiBX6bAS28
gJMsHwfVCRgHKnoYpiBhZCK907YKwiTp4107NlP4x/KIALSJdqmrsqhEg1KCsg2v
+pxHDjench0C6MSOmlrCkRDvJTIeeKhWSrxQbtEu7ptBF18IpHglmIyz73rUokHG
uYd5F41iOyM/spPfgIvwnXcMVzCIFVReyWz0hOGoXXV7Nlx6hk/KY5BxEYipAkWg
CV+w9KLObiPbv0IL10B3qra4QpKP8c1P9iINNcaMyRcwVY71AwcPvZo+HQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIHQkp22SS8TjGyN0DiStvBik3ITMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvZ2RDU25iWkpMeE9NYkkzUU9KSzI4R0tUY2hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZjlAwQA
1aFWMA0GCSqGSIb3DQEBCwUAA4IBAQAEVmFWUOCs7qaUoVtBqzYDGpxwCTIJSYxD
3hR6SB5OiB4GYlh7Rh0iY1rTdtsn8+mdA9rwPsg4KjFkSLLXrvzfgcrQptGBq+HR
THntHWa8X7ny5PSG4cbeFfy/5Mj6d16dAZwpvNwWVbI0Gp9UO97tBItiYcTqI3h1
pcNwE5jK646Zcrk2QvmlI2G8fyFOeF7gCAn3IH4gbmHzHIgKdNw++Ov9Mu9DYK/F
+y9oA6Vg/ZoyoXh8Oyrk5bsynhMUSzNt4YGAq4YUD8YJ5GV29omkTmtVID1NvuNH
+nJiWGgnODQsFbbbksSPrYTFASuY6YSDAvITWXRxv8JsOeR6ubMq
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:28 2025 by rpki-client