Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0eEVYCOV3q-TnlqCd-lA81klPTQ.roa
File: 0eEVYCOV3q-TnlqCd-lA81klPTQ.roa (raw, json)
Hash identifier: 9ZKMa4fp3AZbASYXZsxduUDTW6eWMZUhVwfsooDXEq0=
Subject key identifier: D1:E1:15:60:23:95:DE:AF:93:9E:5A:82:77:E9:40:F3:59:25:3D:34
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B579F1E2B7F5073BB4275203E90828
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0eEVYCOV3q-TnlqCd-lA81klPTQ.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201867
IP address blocks: 213.152.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:79:f1:e2:b7:f5:07:3b:b4:27:52:03:e9:08:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e115602395deaf939e5a8277e940f359253d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:e0:18:2c:87:05:59:73:58:7c:f1:ba:0c:
6f:33:c0:67:b5:e4:79:3e:cc:c4:f5:d0:b5:d3:f9:
a7:40:e5:be:ac:21:de:cd:40:c3:f0:98:7e:14:4d:
1d:4d:81:4d:e4:8a:3b:21:74:59:e2:e3:ff:57:f5:
76:ac:3c:b0:90:54:14:30:34:8d:3a:d8:37:80:78:
f8:e6:a4:1a:75:8b:5e:37:94:64:dd:5d:00:eb:5e:
9d:fa:b2:c3:1e:37:45:31:99:95:15:88:1b:20:1c:
e7:38:9c:82:e3:9a:03:91:42:3d:8b:07:d6:24:a9:
1c:79:bd:e5:c6:c5:60:d6:0a:4b:0a:8c:7c:e8:aa:
dd:47:b2:04:15:29:d7:ed:39:07:2d:44:98:73:11:
80:bb:8c:65:2e:02:4c:ae:b5:38:49:4b:12:f7:28:
36:62:37:56:ea:51:83:82:9f:bf:43:5e:48:cc:d6:
7e:f3:e2:46:47:16:6a:13:e7:27:ff:16:bb:c9:b0:
1c:57:50:bc:85:27:14:7f:fc:7e:a5:75:1a:31:1b:
a7:d4:23:45:3c:6e:59:86:c9:18:a9:63:f8:62:ce:
de:00:66:f0:0c:99:ba:75:21:cd:30:f7:58:1f:85:
58:f9:50:85:8e:7d:ba:5d:1e:76:22:5b:6d:d1:c8:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:15:60:23:95:DE:AF:93:9E:5A:82:77:E9:40:F3:59:25:3D:34
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0eEVYCOV3q-TnlqCd-lA81klPTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.250.0/24
Signature Algorithm: sha256WithRSAEncryption
30:94:19:bc:3b:3f:9f:52:d0:82:40:fb:f9:26:72:b7:00:66:
1b:0a:10:02:80:10:83:e6:a1:64:1e:2f:34:39:7b:17:0f:bf:
a9:20:d2:16:82:a1:09:03:c2:ec:31:6c:81:c0:58:80:e7:1a:
c2:4e:0d:b2:7b:e4:e8:63:98:d0:c1:d8:a2:74:7e:a0:0d:dd:
4a:ea:be:b5:ae:b3:99:c3:69:50:f8:de:bc:bc:85:a5:04:49:
6b:e1:c8:81:9e:4f:49:f6:8f:58:1a:03:da:d7:9b:ae:e0:5e:
c7:3e:f2:fc:62:1d:df:eb:b0:dd:2a:3b:74:25:34:dd:32:dc:
59:27:d4:15:de:b6:23:0d:98:f8:f4:60:ff:97:c6:14:eb:47:
2f:55:ee:24:a9:f0:eb:2a:4b:7f:76:83:e6:3c:63:81:af:6e:
06:e0:fa:ad:08:56:cf:91:9c:14:c1:4c:ad:98:81:98:ed:19:
9d:85:7a:72:a6:55:f9:8e:78:26:8c:7b:3a:9a:38:c9:16:cc:
03:c3:c3:ad:09:bb:27:8c:bb:ad:63:c2:40:f5:86:0f:6d:4f:
db:cb:3e:39:e9:58:fc:90:d9:d1:51:79:e5:2b:ff:24:ed:28:
f7:99:e0:eb:24:06:44:ac:c3:6c:9e:a9:cf:d6:28:46:15:15:
06:f3:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:42 2025 by rpki-client