Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4ltCuuM_GdOVrMzVXdtZZcpOj5g.roa
File: 4ltCuuM_GdOVrMzVXdtZZcpOj5g.roa (raw, json)
Hash identifier: cl1NwgdIll6nhRsIy37XQTOEGpdXa4qboW4bfYa6e4Y=
Subject key identifier: E2:5B:42:BA:E3:3F:19:D3:95:AC:CC:D5:5D:DB:59:65:CA:4E:8F:98
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0195D78D340089909D8C6EB3DA3A1F9FAC4E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4ltCuuM_GdOVrMzVXdtZZcpOj5g.roa
Signing time: Thu 27 Mar 2025 12:21:49 +0000
ROA not before: Thu 27 Mar 2025 12:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 194.143.218.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:8d:34:00:89:90:9d:8c:6e:b3:da:3a:1f:9f:ac:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 27 12:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25b42bae33f19d395acccd55ddb5965ca4e8f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:a4:85:d8:cd:6a:25:ae:f0:77:58:53:57:
ab:14:6e:26:27:b1:30:fb:8d:fe:64:a7:b3:92:90:
b6:82:4c:7e:b0:a5:1b:58:89:5e:33:03:3f:e8:3c:
10:fc:86:da:6c:be:c3:a5:f1:a4:18:e3:f0:0c:52:
b3:73:2e:dc:8e:03:1b:48:86:ab:fc:dc:69:42:37:
8f:53:5a:1f:16:74:82:11:57:76:82:02:f7:3d:41:
52:45:59:87:cd:d9:da:28:dc:16:ff:6e:77:11:ac:
f2:1d:dd:82:97:58:71:61:c2:4d:c5:6d:70:8e:a4:
32:db:cd:9e:f1:27:97:1f:46:66:72:eb:f6:d1:71:
b4:d6:42:c8:7e:76:b0:56:0c:76:69:1d:e5:ae:d7:
15:95:87:ab:e1:03:41:2f:dd:45:6b:2d:c3:b8:35:
86:f2:83:6c:90:69:e4:cc:63:67:66:26:76:98:07:
d0:ca:e8:9e:13:eb:28:51:f4:e3:7b:bd:cd:75:d0:
86:28:34:4b:21:73:74:4e:b0:c3:e5:8f:7d:20:28:
61:1e:ee:4d:1f:59:b6:96:02:b4:68:cf:0f:91:c9:
9b:bc:7d:63:2e:2a:e3:81:dd:9e:e8:a3:c2:09:8b:
ad:05:56:bc:4a:d3:24:7d:9b:58:df:ec:f8:98:4b:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:42:BA:E3:3F:19:D3:95:AC:CC:D5:5D:DB:59:65:CA:4E:8F:98
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4ltCuuM_GdOVrMzVXdtZZcpOj5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.218.0/24
195.114.205.0/24
213.220.20.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d6:cb:4f:f9:64:e1:52:5f:6f:0d:eb:07:b7:81:16:75:6a:
0f:56:c3:e8:00:a9:c2:6c:31:15:6c:73:20:c1:21:2c:88:60:
1b:95:a4:2b:42:96:e1:15:cc:00:a6:98:f7:b2:e0:51:5e:20:
19:e1:b8:33:6d:0e:83:e7:77:45:18:1a:52:20:2e:14:78:44:
70:40:29:6b:6a:22:ef:f4:1a:d4:c5:5a:13:9f:aa:28:8f:7b:
35:eb:93:c4:42:a5:be:4e:bd:54:fb:7c:c1:23:35:1e:db:3d:
6e:45:2f:63:88:76:75:26:88:34:e4:60:2b:6e:66:4d:14:a6:
d2:18:c7:45:7b:6e:b6:f3:30:e3:d1:3c:7a:2d:64:3a:d8:35:
09:57:49:de:34:23:1a:aa:2d:87:9e:b3:ac:cc:79:1e:b0:1f:
a6:ea:d2:83:34:00:ae:a3:34:f3:a8:0f:82:85:4d:6c:ad:a1:
11:e9:52:4f:c7:e6:6c:af:da:ce:eb:3b:3f:3d:2a:c5:88:67:
ee:84:14:24:f3:9b:18:f2:f4:10:0b:d1:0f:2e:69:d8:7f:e8:
a2:d7:e3:b8:9f:7e:e5:6a:4d:37:46:3b:46:c1:ea:dc:dd:57:
5d:de:61:63:86:d8:da:0c:44:9a:2b:79:62:fc:4c:df:66:9d:
4b:05:44:c6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZXXjTQAiZCdjG6z2jofn6xOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMzI3MTIyMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjViNDJiYWUzM2YxOWQzOTVhY2NjZDU1ZGRiNTk2NWNhNGU4Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSOkhdjNaiWu8HdYU1erFG4mJ7Ew
+43+ZKezkpC2gkx+sKUbWIleMwM/6DwQ/IbabL7DpfGkGOPwDFKzcy7cjgMbSIar
/NxpQjePU1ofFnSCEVd2ggL3PUFSRVmHzdnaKNwW/253EazyHd2Cl1hxYcJNxW1w
jqQy282e8SeXH0Zmcuv20XG01kLIfnawVgx2aR3lrtcVlYer4QNBL91Fay3DuDWG
8oNskGnkzGNnZiZ2mAfQyuieE+soUfTje73NddCGKDRLIXN0TrDD5Y99IChhHu5N
H1m2lgK0aM8PkcmbvH1jLirjgd2e6KPCCYutBVa8StMkfZtY3+z4mEtxEQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOJbQrrjPxnTlazM1V3bWWXKTo+YMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvNGx0Q3V1TV9HZE9Wck16VlhkdFpaY3BPajVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwo/aAwQA
w3LNAwQA1dwUAwQA1dw+MA0GCSqGSIb3DQEBCwUAA4IBAQB01stP+WThUl9vDesH
t4EWdWoPVsPoAKnCbDEVbHMgwSEsiGAblaQrQpbhFcwAppj3suBRXiAZ4bgzbQ6D
53dFGBpSIC4UeERwQClraiLv9BrUxVoTn6ooj3s165PEQqW+Tr1U+3zBIzUe2z1u
RS9jiHZ1Jog05GArbmZNFKbSGMdFe2628zDj0Tx6LWQ62DUJV0neNCMaqi2HnrOs
zHkesB+m6tKDNACuozTzqA+ChU1sraER6VJPx+Zsr9rO6zs/PSrFiGfuhBQk85sY
8vQQC9EPLmnYf+ii1+O4n37lak03RjtGwerc3Vdd3mFjhtjaDESaK3li/EzfZp1L
BUTG
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:52:13 2025 by rpki-client