Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ifi8emv4Rmh7GOQP68jo4lG1t9Y.roa
File: Ifi8emv4Rmh7GOQP68jo4lG1t9Y.roa (raw, json)
Hash identifier: al8WI07r8VJbS+WmwD96QacLRYK56xHazIAR91Gu0rY=
Subject key identifier: 21:F8:BC:7A:6B:F8:46:68:7B:18:E4:0F:EB:C8:E8:E2:51:B5:B7:D6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195ADFB1D221449958026BB40FC822831FC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ifi8emv4Rmh7GOQP68jo4lG1t9Y.roa
Signing time: Wed 19 Mar 2025 10:37:50 +0000
ROA not before: Wed 19 Mar 2025 10:37:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 213.130.132.0/24 maxlen: 24
213.130.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:fb:1d:22:14:49:95:80:26:bb:40:fc:82:28:31:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 19 10:37:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21f8bc7a6bf846687b18e40febc8e8e251b5b7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:ee:e5:20:52:15:2a:1f:14:2f:26:13:2d:
00:4a:93:ef:e2:40:15:d9:a2:f6:c2:12:17:57:71:
d0:9f:a5:aa:49:fe:43:6d:b8:70:87:90:17:44:99:
d6:a1:d8:89:51:3c:b6:8a:59:d7:37:d8:98:59:05:
84:45:bb:ea:fc:82:72:06:cf:4e:96:66:5c:50:5c:
4d:d8:44:35:f1:5b:e6:a2:5e:6a:84:3b:19:df:cc:
a6:8c:a9:4c:a1:8f:ce:39:c4:03:d6:8d:0e:98:1c:
2d:3f:43:75:f7:01:c9:c8:c9:76:2d:72:69:de:51:
b0:83:60:92:2a:f7:7b:d1:e0:5a:3f:d3:6e:7c:d6:
3e:63:d9:e2:12:39:f2:21:af:d9:24:2a:7f:dc:87:
73:d0:56:98:5c:2f:4c:d7:be:4c:fa:b4:08:15:2b:
44:3e:4e:de:40:ad:86:cf:f1:91:2e:24:e3:38:9e:
86:c4:5b:6e:fa:9e:9f:f9:bb:b2:d0:e4:53:38:47:
2e:16:3d:bf:58:f8:f1:dc:e4:69:85:be:f8:cf:de:
05:89:f3:53:f3:d9:98:ad:8b:43:ef:bb:d5:a1:71:
5c:03:a5:ee:03:d8:99:a4:0c:ee:8d:73:96:31:6c:
d4:8f:80:1c:b1:1e:0e:28:5c:96:38:1e:fb:30:fa:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F8:BC:7A:6B:F8:46:68:7B:18:E4:0F:EB:C8:E8:E2:51:B5:B7:D6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ifi8emv4Rmh7GOQP68jo4lG1t9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.132.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:ac:b5:c7:44:81:f9:3f:28:5c:3d:09:c4:d3:3f:20:c1:9c:
f2:c2:4f:9d:24:4e:ff:75:71:2b:bf:24:c1:60:40:c0:9b:5f:
a1:46:60:5d:73:95:71:ed:f6:ec:10:a7:f8:d0:d7:cc:ff:87:
0e:f5:5d:ce:28:47:0e:ac:a6:ca:31:40:6d:5b:9c:bb:ab:84:
87:d3:86:1a:0c:4a:b8:58:a6:13:3a:cb:10:9d:fc:c6:af:b8:
6a:e3:6c:c6:36:9c:45:23:e5:a2:39:58:df:f6:aa:ee:b2:75:
5f:b5:7c:fc:7e:cf:da:74:35:d9:09:06:27:d5:04:6b:69:5a:
1c:e7:37:4c:6d:28:9b:b0:43:1d:5d:44:11:76:91:83:cc:62:
f2:33:6c:70:4a:04:1c:b5:ec:fb:c6:21:fd:ad:3d:09:63:56:
b9:bf:f5:43:a7:e5:03:05:7e:f9:fe:e1:f8:72:a4:39:9a:a8:
db:0d:0c:9c:6c:67:88:96:44:2f:9b:d9:2a:24:17:26:da:2a:
06:45:92:a0:a1:bb:a4:c2:15:80:cc:47:94:44:7f:87:72:c7:
79:79:8e:c4:39:f1:0d:7b:ba:39:e9:d5:14:19:8b:43:44:c7:
81:55:14:2d:9f:9d:ae:7f:b3:ac:40:4c:54:84:08:95:18:23:
99:5e:b6:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWt+x0iFEmVgCa7QPyCKDH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMzE5MTAzNzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWY4YmM3YTZiZjg0NjY4N2IxOGU0MGZlYmM4ZThlMjUxYjViN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfzu5SBSFSofFC8mEy0ASpPv4kAV
2aL2whIXV3HQn6WqSf5Dbbhwh5AXRJnWodiJUTy2ilnXN9iYWQWERbvq/IJyBs9O
lmZcUFxN2EQ18Vvmol5qhDsZ38ymjKlMoY/OOcQD1o0OmBwtP0N19wHJyMl2LXJp
3lGwg2CSKvd70eBaP9NufNY+Y9niEjnyIa/ZJCp/3Idz0FaYXC9M175M+rQIFStE
Pk7eQK2Gz/GRLiTjOJ6GxFtu+p6f+buy0ORTOEcuFj2/WPjx3ORphb74z94FifNT
89mYrYtD77vVoXFcA6XuA9iZpAzujXOWMWzUj4AcsR4OKFyWOB77MPqmBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCH4vHpr+EZoexjkD+vI6OJRtbfWMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSWZpOGVtdjRSbWg3R09RUDY4am80bEcxdDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1YKEMA0G
CSqGSIb3DQEBCwUAA4IBAQCsrLXHRIH5PyhcPQnE0z8gwZzywk+dJE7/dXErvyTB
YEDAm1+hRmBdc5Vx7fbsEKf40NfM/4cO9V3OKEcOrKbKMUBtW5y7q4SH04YaDEq4
WKYTOssQnfzGr7hq42zGNpxFI+WiOVjf9qrusnVftXz8fs/adDXZCQYn1QRraVoc
5zdMbSibsEMdXUQRdpGDzGLyM2xwSgQctez7xiH9rT0JY1a5v/VDp+UDBX75/uH4
cqQ5mqjbDQycbGeIlkQvm9kqJBcm2ioGRZKgobukwhWAzEeURH+Hcsd5eY7EOfEN
e7o56dUUGYtDRMeBVRQtn52uf7OsQExUhAiVGCOZXrbI
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:57:04 2025 by rpki-client