Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa
File: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (raw, json)
Hash identifier: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=
Subject key identifier: 1F:76:0C:06:9D:47:5A:7F:F2:25:49:AC:54:34:99:4E:48:08:45:99
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 01941FFAAEA083FC76C017BB57B7156F4A8B
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 81.20.208.0/21 maxlen: 21
81.20.216.0/21 maxlen: 21
213.151.176.0/22 maxlen: 22
213.151.180.0/22 maxlen: 22
213.151.184.0/23 maxlen: 23
213.151.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ae:a0:83:fc:76:c0:17:bb:57:b7:15:6f:4a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f760c069d475a7ff22549ac5434994e48084599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:11:06:7b:51:2b:f3:eb:7e:b2:f2:83:84:
4d:13:b4:8f:2a:37:b7:b1:e8:48:95:b9:8a:04:f8:
c4:9b:d1:2a:a7:4a:53:25:37:91:54:e4:dd:17:33:
05:6f:8b:c4:ba:9d:a7:39:60:f6:6f:98:49:b0:ee:
9b:01:7c:7f:32:36:70:94:50:fd:67:d0:5f:a3:92:
17:7a:6d:07:81:28:f3:3b:33:01:1d:90:1f:a1:93:
55:8a:40:e0:39:a4:51:c6:33:a7:70:c1:af:1b:34:
f0:bb:fd:3f:5d:a0:cc:57:f0:86:50:d0:65:53:91:
43:3a:1c:29:c0:2f:5b:44:16:12:56:55:6a:88:f5:
7c:fd:c8:b1:16:58:d9:cb:dd:e7:47:c7:8c:58:af:
56:63:5b:ce:23:ec:60:13:d5:92:8a:de:df:1f:87:
d6:8a:7a:ad:3c:5b:cf:7c:e4:a6:60:9e:22:af:c0:
1a:b7:1f:dc:8e:4b:01:79:4d:0b:66:83:4f:2a:c7:
da:7d:60:e4:8e:df:2f:e1:ca:29:88:8a:25:7b:79:
57:fb:58:a4:80:4e:f9:01:7a:76:b8:86:ec:2c:61:
0e:06:52:d0:f5:6a:b6:7c:8d:df:bd:fe:6f:ed:29:
63:17:cd:19:56:a7:bd:90:89:d9:2d:9b:7a:c3:3e:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:0C:06:9D:47:5A:7F:F2:25:49:AC:54:34:99:4E:48:08:45:99
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.208.0/20
213.151.176.0-213.151.187.255
Signature Algorithm: sha256WithRSAEncryption
0d:ea:5c:bc:24:71:56:0d:7f:5e:38:79:94:78:27:a0:8b:2b:
64:96:63:71:1b:96:4b:5f:97:05:e4:eb:54:06:7f:0b:ac:d4:
fa:43:b3:78:0b:35:41:28:a5:a6:91:63:a1:02:d4:cb:51:7d:
b6:85:ac:f0:ca:24:99:73:27:08:04:fc:31:ae:ba:d6:0b:4e:
c5:e5:88:81:f9:22:c7:88:75:13:7e:41:72:ab:e2:b0:cb:91:
91:b2:05:f2:1d:7f:a6:9a:35:9f:c9:96:db:8a:ae:a3:9d:e4:
d5:90:9a:50:77:62:45:7b:32:7f:09:d8:e0:15:92:03:8f:12:
38:36:fa:b4:8b:0b:1a:28:8c:95:fe:e2:ac:6e:d6:70:08:a0:
db:8b:e3:13:99:e3:2c:77:0a:f1:a9:95:6b:bb:2e:57:9e:a9:
35:e9:de:ce:36:3d:d4:f0:1a:36:23:99:06:5f:fb:fc:af:1e:
0d:ff:7f:13:a8:6a:24:db:92:c6:41:d8:e2:d7:cd:bf:a2:05:
42:e3:8e:4e:29:e4:fe:0c:b2:45:55:34:67:0d:87:d0:ca:d5:
05:62:44:23:d2:14:8f:2b:cf:a7:d2:77:c9:22:2d:47:1a:5d:
77:39:82:6e:a4:c8:5a:90:2e:29:be:a2:81:f3:14:cf:53:cf:
47:0c:64:83
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQf+q6gg/x2wBe7V7cVb0qLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx
OTEwNzYwHhcNMjUwMTAxMDM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjc2MGMwNjlkNDc1YTdmZjIyNTQ5YWM1NDM0OTk0ZTQ4MDg0NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxIRBntRK/PrfrLyg4RNE7SPKje3
sehIlbmKBPjEm9Eqp0pTJTeRVOTdFzMFb4vEup2nOWD2b5hJsO6bAXx/MjZwlFD9
Z9Bfo5IXem0HgSjzOzMBHZAfoZNVikDgOaRRxjOncMGvGzTwu/0/XaDMV/CGUNBl
U5FDOhwpwC9bRBYSVlVqiPV8/cixFljZy93nR8eMWK9WY1vOI+xgE9WSit7fH4fW
inqtPFvPfOSmYJ4ir8Aatx/cjksBeU0LZoNPKsfafWDkjt8v4copiIole3lX+1ik
gE75AXp2uIbsLGEOBlLQ9Wq2fI3fvf5v7SljF80ZVqe9kInZLZt6wz73FQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFB92DAadR1p/8iVJrFQ0mU5ICEWZMB8GA1UdIwQY
MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt
ZGZmZTE3ZjNkYjU0LzEvSDNZTUJwMUhXbl95SlVtc1ZEU1pUa2dJUlprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0
LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEURTQMAwD
BATVl7ADBALVl7gwDQYJKoZIhvcNAQELBQADggEBAA3qXLwkcVYNf144eZR4J6CL
K2SWY3EblktflwXk61QGfwus1PpDs3gLNUEopaaRY6EC1MtRfbaFrPDKJJlzJwgE
/DGuutYLTsXliIH5IseIdRN+QXKr4rDLkZGyBfIdf6aaNZ/JltuKrqOd5NWQmlB3
YkV7Mn8J2OAVkgOPEjg2+rSLCxoojJX+4qxu1nAIoNuL4xOZ4yx3CvGplWu7Llee
qTXp3s42PdTwGjYjmQZf+/yvHg3/fxOoaiTbksZB2OLXzb+iBULjjk4p5P4MskVV
NGcNh9DK1QViRCPSFI8rz6fSd8kiLUcaXXc5gm6kyFqQLim+ooHzFM9Tz0cMZIM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:52:06 2025 by rpki-client