Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HhOuRkbKPXvmzmASLyTEGZ5anx4.roa
File: HhOuRkbKPXvmzmASLyTEGZ5anx4.roa (raw, json)
Hash identifier: o1LZFIx/TNxh6s71Azl1PJ6jDD/FJvzclMtcVgf2yiE=
Subject key identifier: 1E:13:AE:46:46:CA:3D:7B:E6:CE:60:12:2F:24:C4:19:9E:5A:9F:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282467AF3BF74E9CCA563CD624A54623
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HhOuRkbKPXvmzmASLyTEGZ5anx4.roa
Signing time: Thu 02 Jan 2025 17:51:01 +0000
ROA not before: Thu 02 Jan 2025 17:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 85.209.135.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
193.148.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:67:af:3b:f7:4e:9c:ca:56:3c:d6:24:a5:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e13ae4646ca3d7be6ce60122f24c4199e5a9f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:b2:26:9c:2b:f8:7e:25:ce:db:65:16:ea:
2e:56:9d:a2:ae:25:89:8f:9c:69:49:ab:35:b6:3c:
ce:17:68:5a:32:04:a7:33:21:42:9e:d1:de:41:71:
ea:5f:b6:2d:59:1d:56:0f:60:6a:ce:5d:c9:da:d1:
6a:7d:51:20:4a:b3:37:c7:ff:e2:73:28:95:95:21:
c6:16:6d:0d:20:75:f2:92:69:c0:87:68:8e:8d:d9:
ff:9e:ae:b9:5c:9b:f6:2c:5c:62:9f:25:4c:04:7d:
7a:20:50:fb:43:15:d1:14:d0:24:95:b6:c4:bc:bc:
fb:96:71:94:40:02:fb:50:58:83:f9:7a:82:5a:80:
50:2c:fc:a3:61:c2:5e:a2:95:93:5f:b0:9d:f7:1c:
1e:a1:22:3f:64:b5:48:1e:01:fd:f8:a1:09:37:84:
fc:3f:7b:77:a4:c6:d6:b7:de:cd:ee:9a:c2:47:81:
1e:20:f0:76:3a:3b:71:0c:57:c5:29:36:74:75:67:
3e:0f:b3:4b:65:d6:26:7f:c3:03:47:66:a4:c8:b6:
52:3c:16:39:e1:dd:ad:9a:ae:16:f3:7b:d3:95:e6:
96:50:35:5b:a5:7b:7c:54:88:67:d3:2d:a9:2e:ce:
a0:5b:80:08:86:2b:e5:ef:62:e4:c5:6c:e5:19:5e:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:13:AE:46:46:CA:3D:7B:E6:CE:60:12:2F:24:C4:19:9E:5A:9F:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HhOuRkbKPXvmzmASLyTEGZ5anx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.135.0/24
94.156.14.0/24
193.148.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:92:75:3a:c9:d5:fb:5b:cd:35:be:32:f9:f4:e3:e5:bc:05:
40:2b:63:ba:ce:db:4a:c0:4d:f3:b3:b4:1d:e5:b2:f1:16:ee:
ec:f5:42:e7:b6:7d:c0:37:47:4c:f8:00:09:96:b0:36:af:7c:
ae:b2:5e:ba:c4:63:d1:60:9e:60:88:c7:ef:b8:78:5c:d1:ed:
09:4e:90:85:2c:5e:de:01:70:30:1e:03:06:27:73:ae:8e:66:
b8:f6:dd:1e:e4:65:3c:8a:b0:33:ec:36:c3:9e:40:49:f1:fc:
78:63:61:3a:ca:5f:b5:67:06:3a:5e:ee:ef:0c:9e:85:0b:80:
73:fa:e6:6f:d3:63:43:e5:8b:41:d1:9c:ba:a4:ef:ff:fd:69:
02:89:de:0c:23:03:c8:87:b5:59:e6:c9:4e:a1:c7:c6:e7:60:
05:b2:ff:70:2c:13:a3:bf:84:f0:dd:47:98:6f:e8:7e:b0:a1:
fb:78:81:6b:fb:b1:2c:3d:73:19:ad:95:88:51:e6:64:b0:f7:
06:1e:92:42:ae:f1:f8:4c:48:aa:89:ad:00:6d:47:18:a3:d2:
2a:09:48:03:57:96:0d:d1:21:31:99:61:8a:6c:81:9e:99:6c:
90:dd:5f:27:b1:17:f9:2a:74:1e:3b:d5:97:32:a5:0e:f9:ed:
4e:d2:9d:51
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJGevO/dOnMpWPNYkpUYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTEzYWU0NjQ2Y2EzZDdiZTZjZTYwMTIyZjI0YzQxOTllNWE5ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLCyJpwr+H4lzttlFuouVp2iriWJ
j5xpSas1tjzOF2haMgSnMyFCntHeQXHqX7YtWR1WD2Bqzl3J2tFqfVEgSrM3x//i
cyiVlSHGFm0NIHXykmnAh2iOjdn/nq65XJv2LFxinyVMBH16IFD7QxXRFNAklbbE
vLz7lnGUQAL7UFiD+XqCWoBQLPyjYcJeopWTX7Cd9xweoSI/ZLVIHgH9+KEJN4T8
P3t3pMbWt97N7prCR4EeIPB2OjtxDFfFKTZ0dWc+D7NLZdYmf8MDR2akyLZSPBY5
4d2tmq4W83vTleaWUDVbpXt8VIhn0y2pLs6gW4AIhivl72LkxWzlGV5gZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB4TrkZGyj175s5gEi8kxBmeWp8eMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSGhPdVJrYktQWHZtem1BU0x5VEVHWjVhbng0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVdGHAwQA
XpwOAwQAwZT9MA0GCSqGSIb3DQEBCwUAA4IBAQAOknU6ydX7W801vjL59OPlvAVA
K2O6zttKwE3zs7Qd5bLxFu7s9ULntn3AN0dM+AAJlrA2r3yusl66xGPRYJ5giMfv
uHhc0e0JTpCFLF7eAXAwHgMGJ3Oujma49t0e5GU8irAz7DbDnkBJ8fx4Y2E6yl+1
ZwY6Xu7vDJ6FC4Bz+uZv02ND5YtB0Zy6pO///WkCid4MIwPIh7VZ5slOocfG52AF
sv9wLBOjv4Tw3UeYb+h+sKH7eIFr+7EsPXMZrZWIUeZksPcGHpJCrvH4TEiqia0A
bUcYo9IqCUgDV5YN0SExmWGKbIGemWyQ3V8nsRf5KnQeO9WXMqUO+e1O0p1R
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:47 2025 by rpki-client