Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HjFfMDZe0_j75P0QAuTvF3KTwzg.roa
File: HjFfMDZe0_j75P0QAuTvF3KTwzg.roa (raw, json)
Hash identifier: OtfHduNahKNFpUULCSt63uebd9KTua27CepM0fJCd6c=
Subject key identifier: 1E:31:5F:30:36:5E:D3:F8:FB:E4:FD:10:02:E4:EF:17:72:93:C3:38
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0195D87EE580243DFCC7E25FC5A8E2BDA371
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HjFfMDZe0_j75P0QAuTvF3KTwzg.roa
Signing time: Thu 27 Mar 2025 16:45:49 +0000
ROA not before: Thu 27 Mar 2025 16:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
213.220.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:7e:e5:80:24:3d:fc:c7:e2:5f:c5:a8:e2:bd:a3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 27 16:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e315f30365ed3f8fbe4fd1002e4ef177293c338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:93:0e:b7:7a:0a:2a:95:75:6b:0b:7c:20:5b:
8e:7a:07:80:7b:14:c9:9e:0f:f2:fe:35:9f:e8:67:
af:fd:78:88:cf:16:83:5c:86:5f:ad:74:35:00:5b:
27:30:3d:46:6d:b7:c1:73:c3:a1:97:6e:7b:14:a6:
bf:a5:10:c5:03:96:b3:c1:b7:99:a3:e7:30:fd:db:
3d:73:78:83:4c:e6:ac:54:08:8d:75:6c:e6:2b:96:
a2:f6:50:65:ee:ec:0f:0b:a1:a0:03:fd:63:da:9c:
85:a6:c6:27:6c:0e:c4:c0:2f:1e:ed:df:59:97:57:
93:4f:7d:48:dd:a6:f6:31:8d:9f:7c:17:94:b8:12:
ba:dd:99:90:08:da:79:ab:a2:6e:4f:62:44:56:39:
b1:17:80:09:53:73:31:05:2a:54:7f:bb:43:30:fd:
43:cd:ec:98:ac:49:4d:66:45:50:84:57:94:71:13:
90:ae:b9:c2:f5:68:49:09:10:4f:f4:a8:64:06:4b:
2b:f2:63:05:fa:91:c9:ce:d3:54:65:ac:4c:55:2f:
84:12:cc:5b:d1:17:53:b1:99:e4:69:9b:2b:0e:e8:
95:ae:f6:92:26:7b:70:cd:db:33:06:8e:dd:fe:1e:
b8:b4:60:eb:9a:6b:96:93:43:83:04:2d:a6:c2:ef:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:5F:30:36:5E:D3:F8:FB:E4:FD:10:02:E4:EF:17:72:93:C3:38
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HjFfMDZe0_j75P0QAuTvF3KTwzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.2.0/24
213.220.4.0/23
213.220.9.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7c:d3:07:9c:38:a9:7b:a4:aa:b4:80:a8:11:8e:df:d0:6d:
ea:db:bb:ae:8b:34:a7:80:67:d2:7b:04:a3:3d:ac:3e:ae:64:
18:0d:2e:6f:70:9c:bc:c0:51:ae:c7:c6:f5:9e:42:70:1c:e6:
79:4e:13:7a:db:17:e6:96:2b:86:cf:94:f4:07:5b:55:b6:89:
20:fd:4c:2c:5a:e8:7e:e0:b1:18:11:a0:78:80:ff:39:b8:c1:
46:b9:aa:12:c7:d0:24:38:25:94:8e:3a:54:c1:7f:98:6c:70:
16:d5:a3:83:32:ad:6a:de:d4:a2:4c:0f:cf:e6:55:6e:d2:ee:
54:01:d5:7d:d9:a9:d0:19:bf:fb:f8:15:6b:a4:55:41:fb:dd:
e1:85:36:b7:17:d5:82:a7:10:d0:3a:2c:6f:28:84:8d:2f:64:
e6:c4:56:5c:79:75:5e:21:c8:76:63:97:b3:36:ac:0a:36:cd:
25:d9:6d:df:28:7b:ce:0b:3b:14:a0:63:9c:bf:57:c4:51:9f:
0b:87:af:8c:34:e6:26:72:eb:50:6c:1c:fb:11:94:d2:59:43:
c3:ef:e1:20:7f:80:2c:9f:b7:02:d7:2c:77:15:b5:4a:9c:a3:
b7:fb:72:1e:7c:57:70:65:7f:54:12:93:65:06:14:db:00:58:
72:f0:6f:54
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZXYfuWAJD38x+JfxajivaNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMzI3MTY0NTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTMxNWYzMDM2NWVkM2Y4ZmJlNGZkMTAwMmU0ZWYxNzcyOTNjMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85MOt3oKKpV1awt8IFuOegeAexTJ
ng/y/jWf6Gev/XiIzxaDXIZfrXQ1AFsnMD1GbbfBc8Ohl257FKa/pRDFA5azwbeZ
o+cw/ds9c3iDTOasVAiNdWzmK5ai9lBl7uwPC6GgA/1j2pyFpsYnbA7EwC8e7d9Z
l1eTT31I3ab2MY2ffBeUuBK63ZmQCNp5q6JuT2JEVjmxF4AJU3MxBSpUf7tDMP1D
zeyYrElNZkVQhFeUcROQrrnC9WhJCRBP9KhkBksr8mMF+pHJztNUZaxMVS+EEsxb
0RdTsZnkaZsrDuiVrvaSJntwzdszBo7d/h64tGDrmmuWk0ODBC2mwu914wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB4xXzA2XtP4++T9EALk7xdyk8M4MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvSGpGZk1EWmUwX2o3NVAwUUF1VHZGM0tUd3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1dwCAwQB
1dwEAwQA1dwJMA0GCSqGSIb3DQEBCwUAA4IBAQBCfNMHnDipe6SqtICoEY7f0G3q
27uuizSngGfSewSjPaw+rmQYDS5vcJy8wFGux8b1nkJwHOZ5ThN62xfmliuGz5T0
B1tVtokg/UwsWuh+4LEYEaB4gP85uMFGuaoSx9AkOCWUjjpUwX+YbHAW1aODMq1q
3tSiTA/P5lVu0u5UAdV92anQGb/7+BVrpFVB+93hhTa3F9WCpxDQOixvKISNL2Tm
xFZceXVeIch2Y5ezNqwKNs0l2W3fKHvOCzsUoGOcv1fEUZ8Lh6+MNOYmcutQbBz7
EZTSWUPD7+Egf4Asn7cC1yx3FbVKnKO3+3IefFdwZX9UEpNlBhTbAFhy8G9U
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:35:39 2025 by rpki-client