Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4JR2BxFpAexJMEZdbVCcaYbR92Q.roa
File: 4JR2BxFpAexJMEZdbVCcaYbR92Q.roa (raw, json)
Hash identifier: QlyMPPgY5VI7aDe4yv3ZLPiEFzhf1/zOjsFFKom49eU=
Subject key identifier: E0:94:76:07:11:69:01:EC:49:30:46:5D:6D:50:9C:69:86:D1:F7:64
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0196199CC65D5B5B051AC93E3070805F3513
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4JR2BxFpAexJMEZdbVCcaYbR92Q.roa
Signing time: Wed 09 Apr 2025 08:13:46 +0000
ROA not before: Wed 09 Apr 2025 08:13:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 195.114.198.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:9c:c6:5d:5b:5b:05:1a:c9:3e:30:70:80:5f:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 9 08:13:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0947607116901ec4930465d6d509c6986d1f764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:e7:7e:ac:d7:27:c8:61:00:e5:a1:45:c8:
da:bc:3d:ca:09:5e:2c:6a:ef:c3:75:b6:e3:ae:3e:
61:4f:ac:e4:53:15:a5:d0:13:49:67:e5:69:13:aa:
a6:90:cc:e8:a0:09:d8:57:22:b0:db:ef:11:59:a6:
22:f9:d4:f9:9d:cf:19:ca:0f:1a:58:1e:ec:a9:08:
1f:35:33:c9:0e:3c:23:1d:74:43:c5:90:c8:bf:8a:
d5:dc:fc:dd:ef:79:07:52:0a:c6:86:67:e2:02:1e:
19:89:98:c8:67:a7:a1:cb:4f:f4:61:4e:6a:a1:7d:
80:1c:9a:93:47:f5:ff:2a:d2:9f:bc:5e:3e:7f:c2:
6f:78:22:fa:c9:5d:6f:73:ad:80:79:89:f9:6d:7c:
a5:d0:2f:08:78:41:90:87:ef:02:87:3e:5c:c4:18:
ef:7a:9d:63:70:8f:04:87:0a:08:41:b1:d8:05:10:
a6:a9:2f:e8:cf:67:24:73:da:19:e0:a2:72:f7:ea:
d8:a6:22:a9:31:ed:1d:6c:ec:db:df:11:46:ef:f7:
26:52:61:d7:d5:0f:70:b6:3f:57:44:11:64:36:3d:
c5:fe:ad:19:48:a4:80:82:3f:d7:75:9c:16:f1:a7:
e0:c2:17:1f:25:7b:03:8d:58:fd:6b:ea:84:fc:4a:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:94:76:07:11:69:01:EC:49:30:46:5D:6D:50:9C:69:86:D1:F7:64
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4JR2BxFpAexJMEZdbVCcaYbR92Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.198.0/24
213.220.2.0/24
213.220.4.0/24
213.220.9.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2a:dd:0a:e6:78:aa:43:ea:c8:32:aa:c4:67:4c:61:8f:fe:
6d:8c:55:9f:1e:2c:b2:08:e9:ad:ac:d7:68:6f:1d:0b:8d:2c:
ac:93:df:b1:e4:b8:12:6f:9d:cb:68:d2:f1:cb:0e:7e:01:f4:
a2:f2:69:eb:7e:04:e5:4d:bf:e9:c5:81:b1:05:01:4d:6b:cd:
5f:89:58:18:49:44:21:93:27:a9:d5:06:6e:28:d4:46:cd:26:
cf:e9:e4:ce:d0:94:d7:78:8e:4d:ad:bb:88:07:a4:c9:0a:9a:
26:14:36:08:ca:b9:56:09:6b:ea:b6:2b:8e:ac:cc:04:de:fd:
cc:da:c8:42:dc:e3:c9:39:20:4a:d3:58:0c:e4:91:4f:10:c7:
ed:c4:bf:8b:39:27:5c:26:3e:27:1e:1c:ce:77:32:e8:68:e2:
29:18:8f:2e:32:d6:c8:6f:01:8d:06:52:8d:63:f3:06:13:de:
61:d6:cf:81:87:d9:c5:74:c4:7f:d5:7f:c6:43:0a:8d:4d:76:
f3:8d:ee:d4:63:c1:2d:16:12:bd:c3:68:56:cb:aa:f9:be:81:
49:3a:a1:51:7f:02:02:08:d4:c8:27:55:90:72:6f:6b:f9:2c:
49:71:3f:e9:59:39:cf:5f:40:95:22:6a:8f:5e:ce:37:63:a1:
7f:ef:02:35
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZYZnMZdW1sFGsk+MHCAXzUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwNDA5MDgxMzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDk0NzYwNzExNjkwMWVjNDkzMDQ2NWQ2ZDUwOWM2OTg2ZDFmNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZHnfqzXJ8hhAOWhRcjavD3KCV4s
au/Ddbbjrj5hT6zkUxWl0BNJZ+VpE6qmkMzooAnYVyKw2+8RWaYi+dT5nc8Zyg8a
WB7sqQgfNTPJDjwjHXRDxZDIv4rV3Pzd73kHUgrGhmfiAh4ZiZjIZ6ehy0/0YU5q
oX2AHJqTR/X/KtKfvF4+f8JveCL6yV1vc62AeYn5bXyl0C8IeEGQh+8Chz5cxBjv
ep1jcI8EhwoIQbHYBRCmqS/oz2ckc9oZ4KJy9+rYpiKpMe0dbOzb3xFG7/cmUmHX
1Q9wtj9XRBFkNj3F/q0ZSKSAgj/XdZwW8afgwhcfJXsDjVj9a+qE/ErfAQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOCUdgcRaQHsSTBGXW1QnGmG0fdkMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvNEpSMkJ4RnBBZXhKTUVaZGJWQ2NhWWJSOTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAw3LGAwQA
1dwCAwQA1dwEAwQA1dwJMA0GCSqGSIb3DQEBCwUAA4IBAQA0Kt0K5niqQ+rIMqrE
Z0xhj/5tjFWfHiyyCOmtrNdobx0LjSysk9+x5LgSb53LaNLxyw5+AfSi8mnrfgTl
Tb/pxYGxBQFNa81fiVgYSUQhkyep1QZuKNRGzSbP6eTO0JTXeI5NrbuIB6TJCpom
FDYIyrlWCWvqtiuOrMwE3v3M2shC3OPJOSBK01gM5JFPEMftxL+LOSdcJj4nHhzO
dzLoaOIpGI8uMtbIbwGNBlKNY/MGE95h1s+Bh9nFdMR/1X/GQwqNTXbzje7UY8Et
FhK9w2hWy6r5voFJOqFRfwICCNTIJ1WQcm9r+SxJcT/pWTnPX0CVImqPXs43Y6F/
7wI1
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net