Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa
File: HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa (raw, json)
Hash identifier: RrsPdmWqoOnc37eNmh2WMAAS+360HWRIjhjqZURUhWk=
Subject key identifier: 1D:99:82:7E:C1:DB:D3:DC:65:AD:20:61:DA:22:31:A4:E5:99:DC:EC
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E3D22071E866694D54FE21197A5F
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44209
IP address blocks: 193.53.252.0/24 maxlen: 24
193.53.253.0/24 maxlen: 24
193.56.12.0/24 maxlen: 24
193.56.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e3:d2:20:71:e8:66:69:4d:54:fe:21:19:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d99827ec1dbd3dc65ad2061da2231a4e599dcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:86:ae:5f:db:dc:6a:e8:f8:79:9f:cd:d0:
c6:46:2c:c7:54:51:05:2b:bf:16:5d:52:79:7e:d4:
1d:ca:52:9c:cf:05:e0:e6:60:1d:b5:11:3e:13:36:
fb:0f:86:95:7c:60:cc:de:bd:fc:3b:04:bb:de:f8:
53:02:b9:25:01:0b:db:02:fc:74:d2:dc:7f:ac:1e:
3f:d3:5d:52:9f:e4:d8:94:d2:c9:1a:5e:dd:02:5f:
ff:c5:40:c9:bc:1e:a6:9d:fa:5b:c3:af:14:1b:33:
7e:ab:94:49:f0:90:ac:d5:52:67:f5:ba:39:9b:4b:
13:dd:8a:64:ab:0b:01:39:d6:84:de:4a:49:58:ce:
cc:f7:3f:88:87:cc:fd:51:e2:26:76:a4:1c:70:4e:
bb:17:87:07:15:7e:76:98:44:96:84:4a:66:6b:67:
ed:3b:91:46:fb:36:f8:d5:f3:8d:27:b0:ce:ef:10:
aa:27:b7:3f:38:f3:c9:6a:90:07:ed:09:e6:fb:30:
61:bf:7a:48:f4:16:84:18:6d:54:c2:ef:33:9b:eb:
34:45:db:59:b9:98:68:09:2d:e6:46:a3:d0:8a:8d:
9b:47:2a:5f:d6:a2:08:f9:dd:ea:2d:c9:21:ba:26:
be:98:8b:7f:b9:af:5e:a0:4a:f0:bc:2a:6e:16:89:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:82:7E:C1:DB:D3:DC:65:AD:20:61:DA:22:31:A4:E5:99:DC:EC
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.252.0/23
193.56.12.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:eb:90:57:e9:3d:14:b6:02:18:7c:24:d7:d4:9c:29:9d:33:
54:97:ec:07:c5:78:80:a7:02:26:35:81:6d:b4:e8:81:c3:ea:
c2:65:b2:46:a0:9d:80:d0:4c:9a:84:0d:93:9d:5d:50:d2:3d:
cf:10:b4:db:2d:a9:70:41:f5:7e:34:79:8a:b4:34:6e:0e:43:
b5:c8:7e:4b:08:52:bb:33:0a:90:ab:7b:af:02:05:ae:14:76:
b7:bc:24:12:d5:f7:65:2b:c8:32:27:a1:f6:b6:a7:56:d5:6b:
b1:eb:94:80:a1:fb:2b:b0:f4:1c:4f:06:d5:85:cf:3c:25:46:
f1:a1:2b:32:09:8f:ef:f0:ca:a4:1a:76:81:eb:e6:4d:c4:d5:
26:df:c6:cb:a3:26:06:6b:49:df:50:50:c4:ed:41:57:2d:93:
74:c0:69:98:7f:d1:bd:37:8a:26:81:64:fe:55:c6:32:a0:95:
a9:43:c4:33:8d:5a:a2:0c:71:30:f9:c6:8a:95:18:dc:25:c3:
46:0b:4d:bc:d6:d5:0e:66:fd:28:e1:12:9d:9c:e3:b2:7f:46:
59:57:79:0a:99:f6:f1:b8:d0:7d:a2:e1:4c:41:b5:cb:d3:64:
7f:07:10:ab:b0:f6:29:50:ce:15:ec:68:b7:ae:9e:46:e3:fa:
eb:be:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:45 2025 by rpki-client