Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/jOP869WZ6qv1K_02Bnny1yhOvWo.roa
File: jOP869WZ6qv1K_02Bnny1yhOvWo.roa (raw, json)
Hash identifier: LNfdvwnFCrboSjtcQ9oPTixma8vlfw2VPXVW2ZobI5A=
Subject key identifier: 8C:E3:FC:EB:D5:99:EA:AB:F5:2B:FD:36:06:79:F2:D7:28:4E:BD:6A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01956B7402B7A64754CF06A8ED440BA99DA7
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/jOP869WZ6qv1K_02Bnny1yhOvWo.roa
Signing time: Thu 06 Mar 2025 12:35:19 +0000
ROA not before: Thu 06 Mar 2025 12:35:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8311
IP address blocks: 194.143.196.0/24 maxlen: 24
194.143.200.0/24 maxlen: 24
194.143.210.0/23 maxlen: 23
194.143.211.0/24 maxlen: 24
194.143.212.0/23 maxlen: 23
194.143.214.0/24 maxlen: 24
194.143.215.0/24 maxlen: 24
213.220.10.0/23 maxlen: 23
213.220.12.0/22 maxlen: 22
213.220.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:74:02:b7:a6:47:54:cf:06:a8:ed:44:0b:a9:9d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 6 12:35:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce3fcebd599eaabf52bfd360679f2d7284ebd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:cc:8c:32:9a:b5:e8:cc:91:ee:aa:e9:03:
7d:11:6e:8a:aa:46:94:7c:c1:36:b5:57:66:96:f8:
6c:ca:ed:1e:8b:80:67:63:25:07:a9:bd:5c:92:99:
1f:d3:8e:a3:e2:5c:a9:38:5a:e2:40:df:46:f8:14:
7f:f3:49:6b:c8:09:ea:78:59:eb:86:49:bb:35:a8:
8a:39:0f:c1:6a:09:49:75:a9:b8:c0:d2:d2:d4:8a:
93:1b:d0:b5:d9:70:3b:83:7a:e3:84:e9:ba:09:46:
b1:d1:95:2f:1e:c5:5d:49:fb:6c:3c:f1:43:01:0d:
a2:16:12:a7:a3:54:28:60:9b:9c:6c:7f:b9:a2:f2:
06:a8:6e:3a:3e:81:27:f3:e9:22:79:53:df:84:06:
38:2d:5d:68:70:56:67:e6:07:04:fd:09:bc:d5:b0:
30:d7:04:5a:97:45:e0:21:36:1e:4b:c6:36:c2:c6:
32:80:22:73:d4:33:9e:5c:e7:be:44:19:a8:e2:2e:
c6:18:84:b1:2b:2c:2d:ed:c2:da:94:e7:90:b3:29:
bd:cd:80:8e:5b:8b:99:da:2d:31:61:1b:6f:37:68:
7f:9a:7c:6b:85:ac:16:95:05:ad:4b:62:d5:2f:52:
69:33:3f:ac:cb:bb:aa:8d:b0:c0:5d:52:72:71:35:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:FC:EB:D5:99:EA:AB:F5:2B:FD:36:06:79:F2:D7:28:4E:BD:6A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/jOP869WZ6qv1K_02Bnny1yhOvWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.196.0/24
194.143.200.0/24
194.143.210.0-194.143.215.255
213.220.10.0-213.220.15.255
213.220.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:df:5a:e1:87:4d:1c:6f:b1:9a:17:34:8f:8b:d2:f9:08:37:
f5:96:80:dc:d1:14:69:49:2c:1f:a9:85:5b:fa:a9:db:ac:ca:
93:53:f5:b8:16:98:a0:97:4b:df:2a:15:09:87:67:a1:3d:e4:
3d:94:7c:5d:e7:ee:d4:c1:b0:cd:e1:ab:5b:f9:0e:e5:8b:75:
10:99:f1:a1:1c:0b:4f:5d:fd:5d:76:40:53:d9:b0:73:09:b8:
60:e1:6a:9e:d9:e5:d1:a1:6c:de:a1:2d:3b:1f:99:01:b3:44:
cc:aa:11:e0:51:41:9a:8c:e5:d0:f9:da:ef:16:99:b0:0e:ec:
7b:b9:a3:b6:cc:47:15:67:64:ab:8f:82:40:55:fb:9c:91:de:
4d:97:09:a4:cb:df:ec:b0:f2:bc:3d:88:04:10:43:8c:0f:e7:
77:d2:fb:bf:66:3c:39:f7:58:d5:3e:38:9f:c1:80:07:8b:34:
e5:6d:bd:3c:49:ea:23:52:97:ff:77:55:67:26:4a:0f:0f:ce:
db:c8:a1:d2:20:56:2f:fc:67:dd:55:4b:d6:7f:c4:7e:a1:bf:
83:3c:cf:00:42:92:c1:ec:e5:4e:df:1d:fb:c4:ac:cb:11:3c:
e8:0a:a9:be:00:f8:66:ef:d7:90:69:29:82:c9:e4:35:e9:d6:
a5:b5:02:82
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZVrdAK3pkdUzwao7UQLqZ2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMzA2MTIzNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2UzZmNlYmQ1OTllYWFiZjUyYmZkMzYwNjc5ZjJkNzI4NGViZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEDMjDKatejMke6q6QN9EW6KqkaU
fME2tVdmlvhsyu0ei4BnYyUHqb1ckpkf046j4lypOFriQN9G+BR/80lryAnqeFnr
hkm7NaiKOQ/BaglJdam4wNLS1IqTG9C12XA7g3rjhOm6CUax0ZUvHsVdSftsPPFD
AQ2iFhKno1QoYJucbH+5ovIGqG46PoEn8+kieVPfhAY4LV1ocFZn5gcE/Qm81bAw
1wRal0XgITYeS8Y2wsYygCJz1DOeXOe+RBmo4i7GGISxKywt7cLalOeQsym9zYCO
W4uZ2i0xYRtvN2h/mnxrhawWlQWtS2LVL1JpMz+sy7uqjbDAXVJycTWwZwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFIzj/OvVmeqr9Sv9NgZ58tcoTr1qMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvak9QODY5V1o2cXYxS18wMkJubnkxeWhPdldvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAwo/EAwQA
wo/IMAwDBAHCj9IDBAPCj9AwDAMEAdXcCgMEBNXcAAMEAtXcIDANBgkqhkiG9w0B
AQsFAAOCAQEASt9a4YdNHG+xmhc0j4vS+Qg39ZaA3NEUaUksH6mFW/qp26zKk1P1
uBaYoJdL3yoVCYdnoT3kPZR8Xefu1MGwzeGrW/kO5Yt1EJnxoRwLT139XXZAU9mw
cwm4YOFqntnl0aFs3qEtOx+ZAbNEzKoR4FFBmozl0Pna7xaZsA7se7mjtsxHFWdk
q4+CQFX7nJHeTZcJpMvf7LDyvD2IBBBDjA/nd9L7v2Y8OfdY1T44n8GAB4s05W29
PEnqI1KX/3dVZyZKDw/O28ih0iBWL/xn3VVL1n/EfqG/gzzPAEKSwezlTt8d+8Ss
yxE86AqpvgD4Zu/XkGkpgsnkNenWpbUCgg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:46 2025 by rpki-client