Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oVLA_gu9fGGAXaB7hMJHQ1du8SA.roa
File: oVLA_gu9fGGAXaB7hMJHQ1du8SA.roa (raw, json)
Hash identifier: ZJ78yypxxXUyEPsNV6baJQwJ6T0l+VfQofLBxsPVCJo=
Subject key identifier: A1:52:C0:FE:0B:BD:7C:61:80:5D:A0:7B:84:C2:47:43:57:6E:F1:20
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827B79E712BA8BFC3F605A4F832565B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oVLA_gu9fGGAXaB7hMJHQ1du8SA.roa
Signing time: Thu 02 Jan 2025 17:54:38 +0000
ROA not before: Thu 02 Jan 2025 17:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28924
IP address blocks: 213.181.216.0/24 maxlen: 24
213.181.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b7:9e:71:2b:a8:bf:c3:f6:05:a4:f8:32:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a152c0fe0bbd7c61805da07b84c24743576ef120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:02:1a:51:b5:96:a3:a1:5c:6f:ee:e6:76:
f7:84:13:af:98:25:1e:c4:4e:79:f7:53:be:57:a1:
6e:b6:10:bf:ef:6a:be:f5:53:50:dd:92:c4:d4:14:
9a:4f:fa:bb:22:c4:1d:ce:b2:32:c6:d7:b6:f0:8c:
1c:1d:cb:15:42:76:81:30:15:88:b7:0d:38:bb:6d:
61:8e:ed:5b:6f:e7:0a:6e:bc:d7:f4:3a:67:18:74:
82:0b:57:f8:0a:e4:d9:2b:03:81:9d:47:e3:f1:f0:
c4:57:6d:38:dc:f8:22:02:6d:97:ad:be:53:bb:f3:
ba:d8:bc:55:2a:3e:2a:39:18:c2:97:de:52:9c:d6:
df:d0:b6:0f:eb:63:3f:0f:35:6b:35:45:ee:80:ec:
72:6d:38:fc:4c:67:c7:35:fb:59:5a:7e:b0:83:d7:
12:64:31:38:de:dd:8e:83:f4:fc:f6:7f:b7:e2:17:
ae:1d:71:9c:49:b5:32:e6:5a:12:3c:fe:23:24:89:
af:11:19:c3:c5:90:a5:07:e3:2f:ba:e7:ca:71:a6:
3d:31:49:36:d4:56:3c:09:3f:33:ee:28:20:3d:42:
59:f5:95:b3:0a:a4:1d:f0:c4:41:8f:3b:66:14:70:
7a:74:9c:95:7f:42:36:f3:05:26:d9:1d:50:e2:57:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:52:C0:FE:0B:BD:7C:61:80:5D:A0:7B:84:C2:47:43:57:6E:F1:20
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oVLA_gu9fGGAXaB7hMJHQ1du8SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.181.216.0/24
213.181.220.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cf:74:89:ac:07:2a:98:f5:72:2c:a0:94:0a:24:c1:8f:2f:
83:6c:45:b0:34:72:89:33:f0:1a:7f:28:f0:70:a0:51:1c:79:
70:b8:39:7d:15:8f:c9:8f:f8:86:ee:96:ad:71:21:da:16:3b:
eb:d6:7c:61:e6:1b:a7:79:9b:f5:25:5a:d4:23:78:e3:b7:0c:
3b:78:05:e3:04:c5:7e:ba:32:8a:40:d7:fc:01:11:90:a1:2a:
4f:48:5d:52:9d:6c:b4:83:8b:96:b0:6c:da:df:a4:82:f1:49:
08:a0:69:34:d2:7f:49:c0:78:51:3a:48:af:17:1e:00:69:b3:
6a:89:34:1f:9d:1c:ca:98:e8:bc:80:ed:4c:17:f6:b2:0a:a1:
28:6c:23:a3:a6:ae:f8:69:e2:2d:f1:ee:bc:9c:ec:25:31:f4:
d4:65:2f:c4:ef:ea:c3:dd:a4:4f:21:80:c3:33:e1:63:a4:97:
60:03:aa:46:36:99:12:08:db:a5:e5:3f:86:81:29:92:e8:b5:
61:90:23:00:8e:49:eb:f5:44:1a:8a:b7:23:2e:aa:7d:41:32:
71:94:2c:ba:8f:2b:27:3d:61:d2:00:50:9d:c9:2a:d2:d8:56:
48:3b:ef:26:9a:35:2f:27:73:cd:63:a9:5f:cb:a6:e9:3b:28:
92:5b:bb:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJ7eecSuov8P2BaT4MlZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMTAyMTc1NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTUyYzBmZTBiYmQ3YzYxODA1ZGEwN2I4NGMyNDc0MzU3NmVmMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr8CGlG1lqOhXG/u5nb3hBOvmCUe
xE5591O+V6FuthC/72q+9VNQ3ZLE1BSaT/q7IsQdzrIyxte28IwcHcsVQnaBMBWI
tw04u21hju1bb+cKbrzX9DpnGHSCC1f4CuTZKwOBnUfj8fDEV2043PgiAm2Xrb5T
u/O62LxVKj4qORjCl95SnNbf0LYP62M/DzVrNUXugOxybTj8TGfHNftZWn6wg9cS
ZDE43t2Og/T89n+34heuHXGcSbUy5loSPP4jJImvERnDxZClB+MvuufKcaY9MUk2
1FY8CT8z7iggPUJZ9ZWzCqQd8MRBjztmFHB6dJyVf0I28wUm2R1Q4lfmuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKFSwP4LvXxhgF2ge4TCR0NXbvEgMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvb1ZMQV9ndTlmR0dBWGFCN2hNSkhRMWR1OFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1bXYAwQA
1bXcMA0GCSqGSIb3DQEBCwUAA4IBAQBSz3SJrAcqmPVyLKCUCiTBjy+DbEWwNHKJ
M/AafyjwcKBRHHlwuDl9FY/Jj/iG7patcSHaFjvr1nxh5huneZv1JVrUI3jjtww7
eAXjBMV+ujKKQNf8ARGQoSpPSF1SnWy0g4uWsGza36SC8UkIoGk00n9JwHhROkiv
Fx4AabNqiTQfnRzKmOi8gO1MF/ayCqEobCOjpq74aeIt8e68nOwlMfTUZS/E7+rD
3aRPIYDDM+FjpJdgA6pGNpkSCNul5T+GgSmS6LVhkCMAjknr9UQaircjLqp9QTJx
lCy6jysnPWHSAFCdySrS2FZIO+8mmjUvJ3PNY6lfy6bpOyiSW7vP
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:20:15 2025 by rpki-client