Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/H3Ae8Q3e_rR7MK4hAzj1EvP8VEU.roa
File: H3Ae8Q3e_rR7MK4hAzj1EvP8VEU.roa (raw, json)
Hash identifier: 5P9vQwM4b6vv//hAIabzYt+PZ71OKqlHd9YyRRPD468=
Subject key identifier: 1F:70:1E:F1:0D:DE:FE:B4:7B:30:AE:21:03:38:F5:12:F3:FC:54:45
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019494ABFB133D12B246B529F3C3707DBA4C
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/H3Ae8Q3e_rR7MK4hAzj1EvP8VEU.roa
Signing time: Thu 23 Jan 2025 19:38:06 +0000
ROA not before: Thu 23 Jan 2025 19:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 195.216.176.0/23 maxlen: 23
213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.218.0/24 maxlen: 24
213.182.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:ab:fb:13:3d:12:b2:46:b5:29:f3:c3:70:7d:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 23 19:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f701ef10ddefeb47b30ae210338f512f3fc5445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:f1:9d:dd:6e:5d:a8:9a:75:be:7d:b9:cd:
c7:10:0c:dd:25:6a:47:dc:13:ac:aa:5c:e0:be:4f:
36:df:b6:6e:35:9f:a8:79:e9:1a:ac:70:84:72:41:
ac:cb:bb:e2:e3:a3:41:43:27:4e:d9:17:e2:3e:47:
80:e0:1e:88:0b:9f:c5:26:0e:fc:44:bb:68:ba:0f:
20:fe:e1:97:6b:7f:e9:bc:54:81:e3:fd:45:43:31:
30:97:11:6d:10:b2:bf:32:63:a1:d2:52:aa:27:f8:
66:80:51:d1:80:4a:e9:69:eb:f3:50:fe:ad:06:73:
5a:35:fc:36:73:90:94:09:9b:a3:0b:95:cd:c6:be:
3a:78:08:c7:68:8d:10:45:9e:07:c9:44:6b:58:7f:
6a:72:cf:61:ba:a3:1e:58:18:92:e7:70:96:76:b3:
0b:6b:db:cf:67:1f:91:58:0f:65:04:63:00:3e:e3:
b1:55:28:0b:1a:15:9b:28:93:8d:f7:4d:54:6e:47:
2f:40:07:fc:54:15:ba:cd:a1:65:23:c1:85:27:1f:
05:85:16:17:66:25:03:45:b8:da:c7:6d:96:e4:0e:
e5:6b:bf:66:57:3e:1d:b9:17:2a:5d:51:d0:32:29:
47:81:47:d6:da:8b:42:8d:fe:2c:e3:92:59:e8:aa:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:1E:F1:0D:DE:FE:B4:7B:30:AE:21:03:38:F5:12:F3:FC:54:45
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/H3Ae8Q3e_rR7MK4hAzj1EvP8VEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.176.0/23
213.182.196.0/23
213.182.206.0/24
213.182.218.0/24
213.182.220.0/22
Signature Algorithm: sha256WithRSAEncryption
11:f1:e0:ce:ba:82:64:75:32:69:f1:80:cd:ce:59:bf:d2:f6:
31:14:83:f2:6b:d7:16:d4:e6:76:af:8d:96:e1:53:90:bb:88:
b3:ed:d5:17:e3:c3:c2:95:18:9f:c9:49:92:51:a8:3a:8e:a0:
f9:cd:ca:f3:13:6a:cc:cb:9e:f0:bf:85:e1:84:b5:21:a6:e7:
cc:e1:34:a2:25:6b:42:68:f1:9a:36:ed:be:f6:52:13:0e:dc:
08:4b:c9:c7:17:04:62:c1:9a:bf:32:97:42:c3:c7:1c:41:1d:
30:55:02:36:b8:80:7e:4a:de:98:a7:a8:be:3b:fa:30:24:70:
d4:da:3b:f3:3d:6b:a2:31:03:b3:de:b6:49:71:e4:41:74:6b:
dd:a5:cb:f4:c1:8b:02:3f:77:37:99:3c:97:a8:91:d7:ac:1f:
66:90:4d:d2:98:d0:0b:55:75:07:69:a3:0f:1f:c5:07:f8:f2:
0d:db:11:44:9a:7e:47:ae:d6:52:3b:d7:1f:56:ac:3b:fa:b1:
80:d9:9e:0b:cc:10:ed:57:6a:5b:98:47:cb:17:11:4d:e7:79:
c4:aa:2d:06:d5:6d:82:85:a3:4c:3b:58:3c:32:84:43:19:1f:
ac:00:25:14:e4:c2:02:4f:c3:ce:65:71:f5:47:90:fb:8a:99:
04:b1:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:50 2025 by rpki-client