Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/S4MSKhlROLlR5Upsz8Imvzal1s4.roa
File: S4MSKhlROLlR5Upsz8Imvzal1s4.roa (raw, json)
Hash identifier: 3Jal0pH9Mae4GU3mUSmbHI2OgrRY4vVRcn31cTe2Qq0=
Subject key identifier: 4B:83:12:2A:19:51:38:B9:51:E5:4A:6C:CF:C2:26:BF:36:A5:D6:CE
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0195A9D9AC62245B4DCE3F5ED24DC6AFDE28
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/S4MSKhlROLlR5Upsz8Imvzal1s4.roa
Signing time: Tue 18 Mar 2025 15:22:49 +0000
ROA not before: Tue 18 Mar 2025 15:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:d9:ac:62:24:5b:4d:ce:3f:5e:d2:4d:c6:af:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 18 15:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b83122a195138b951e54a6ccfc226bf36a5d6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:d2:ca:f7:05:b0:80:3d:c0:65:90:79:f7:
f3:6b:8d:25:8a:4b:71:3c:94:51:5d:7b:c5:cf:dc:
11:8c:88:08:0d:51:24:8a:76:6b:21:46:29:41:e0:
7c:a7:88:16:1a:09:d8:53:8e:a0:45:c9:bd:36:f8:
55:5e:a1:28:8f:cb:20:6b:1b:ce:08:fa:1d:ed:82:
c6:33:62:14:4f:2a:9e:4b:cb:cb:ff:b4:31:8a:52:
46:8c:c6:f0:bd:20:a3:96:87:70:0c:b6:bc:32:80:
c5:ac:c3:17:fc:12:98:21:ae:90:97:ca:14:96:fa:
b0:ba:8e:2e:7c:67:6a:57:bd:e4:cf:36:13:00:d4:
a0:b8:dc:5b:9a:50:09:20:d1:7e:08:59:c8:bb:af:
08:4b:53:35:28:6e:f5:8f:7e:df:4f:f6:bd:c7:10:
f0:4b:d3:28:cf:26:bd:66:d8:dc:15:15:49:e0:4c:
91:f4:be:1a:14:a0:11:bc:20:41:5f:74:87:3b:9b:
f2:89:17:b6:a5:b4:9d:c5:d5:e2:94:a4:76:d4:b8:
80:e0:75:e9:bb:44:29:cb:35:29:08:bd:e7:96:6f:
f9:98:00:98:f3:8b:f9:f0:2f:9c:df:18:7b:57:6d:
30:88:ab:c4:53:f0:3b:5b:47:34:f2:bc:fa:92:31:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:83:12:2A:19:51:38:B9:51:E5:4A:6C:CF:C2:26:BF:36:A5:D6:CE
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/S4MSKhlROLlR5Upsz8Imvzal1s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.2.0/24
213.220.4.0/23
Signature Algorithm: sha256WithRSAEncryption
81:f2:42:bf:af:59:0d:46:7b:c7:82:aa:0f:94:06:66:0b:d9:
54:33:6c:57:5d:d9:d7:5d:28:b4:ba:07:aa:a0:23:2f:58:52:
db:ba:b3:e6:73:5e:aa:d2:0e:e3:a9:ff:6b:bb:f5:a0:02:cb:
20:e2:ff:70:e2:2a:d4:d0:47:9b:a0:56:63:dd:06:e6:1a:f7:
bd:e4:8c:02:27:b2:91:be:15:bf:14:d6:bd:eb:66:3a:d2:77:
4d:bc:6a:e9:06:ed:30:cb:64:ba:44:a3:eb:f0:1d:9e:91:46:
04:dc:15:f1:5b:8b:c2:da:65:1c:50:6b:71:60:a5:cd:e9:0e:
57:80:24:d1:82:14:cf:c0:96:96:ee:2b:94:24:b5:db:50:0d:
9b:a6:41:d5:60:de:54:4a:f9:c2:c2:ad:64:58:63:1a:ee:7e:
e0:c4:0a:b8:ae:96:81:5e:fd:70:47:82:5e:6d:b8:c3:54:a8:
ba:0a:52:13:93:c0:d7:95:03:d8:db:4d:9f:24:77:bc:79:dd:
eb:f6:bd:ce:eb:5e:00:c6:a0:98:d0:f3:79:65:1f:61:47:3b:
39:e3:0f:93:00:fb:a1:d3:88:45:52:fd:7b:54:5f:cd:0b:e4:
b6:42:0e:92:df:3f:df:92:4a:2c:32:8d:e7:cc:2e:fb:23:68:
3d:5b:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:17:43 2025 by rpki-client on console.sobornost.net