Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/hkEEBeSBNTyx105gMqinOhr6zBc.roa
File: hkEEBeSBNTyx105gMqinOhr6zBc.roa (raw, json)
Hash identifier: quUJq0tHtG6vnMQ86E6ZCMcfr4ctD+gvtACQTeGqyEo=
Subject key identifier: 86:41:04:05:E4:81:35:3C:B1:D7:4E:60:32:A8:A7:3A:1A:FA:CC:17
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 019448261C10B2F5D68886629182DFDEFFDA
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/hkEEBeSBNTyx105gMqinOhr6zBc.roa
Signing time: Wed 08 Jan 2025 23:00:44 +0000
ROA not before: Wed 08 Jan 2025 23:00:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214967
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:26:1c:10:b2:f5:d6:88:86:62:91:82:df:de:ff:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Jan 8 23:00:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86410405e481353cb1d74e6032a8a73a1afacc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:a8:09:e6:4c:d2:2f:c2:9f:a2:1f:0d:d8:
7c:6b:10:68:b1:b8:b7:f9:9f:e7:eb:b8:a7:58:3f:
ec:2b:d3:74:9b:96:a8:f6:92:aa:5d:80:5b:1c:05:
6b:09:7a:c7:b2:91:01:ff:dd:70:86:82:84:ee:90:
ec:8f:95:e0:39:f9:5b:f6:55:53:ac:b9:a1:fd:91:
0c:a0:8e:5c:91:5d:89:fd:5e:70:b5:3a:0a:51:f1:
35:a6:7e:e6:c2:68:ff:5f:48:b8:69:57:79:ce:57:
1c:c5:53:62:71:40:07:d8:5f:12:06:11:3a:3c:ea:
16:67:f0:e4:1c:7b:36:f5:1d:38:6a:23:61:6b:12:
07:63:b8:1c:bd:16:77:f7:43:c9:6e:50:99:97:a1:
2e:a7:7d:d9:67:c6:80:5e:1f:e3:a3:98:8e:ff:69:
f1:37:49:39:e5:fb:58:0c:ab:43:fd:e9:71:22:16:
f2:83:66:74:92:b3:92:6d:6e:5a:15:1b:db:5a:17:
98:09:47:88:92:e5:21:89:4f:c1:3b:53:9c:0d:d8:
3c:9a:8a:56:3c:f3:40:e5:0a:fc:23:91:76:3b:fe:
a6:96:dc:d7:cf:0e:02:93:f6:ee:b2:b3:ca:d0:e7:
40:d0:8c:b1:26:69:a6:16:06:88:ec:a9:15:41:cb:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:04:05:E4:81:35:3C:B1:D7:4E:60:32:A8:A7:3A:1A:FA:CC:17
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/hkEEBeSBNTyx105gMqinOhr6zBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9a:bf:3b:ec:8b:0c:a4:5d:61:95:56:d2:f0:7f:66:18:24:
a2:80:91:d2:d2:51:dd:1c:2a:d9:a5:cf:c7:77:e0:7d:5f:25:
e1:9f:14:1d:88:99:01:af:32:61:0d:73:9f:ca:fa:ae:1a:6b:
03:49:d8:2a:b7:e9:dd:7f:50:24:16:04:fc:c0:96:d2:70:5f:
63:c4:19:c8:d5:33:8a:ed:a2:57:4a:40:87:65:2c:05:4a:8b:
e5:14:f1:50:02:52:29:3e:3e:5a:ce:94:77:c2:a3:84:cd:d6:
8c:0f:9d:9f:42:a5:f5:18:c6:89:06:5b:de:c1:b0:7e:3e:cd:
3b:17:a3:73:97:07:d6:2f:86:ed:58:a6:61:3a:a9:62:5e:7b:
bf:7d:d0:bf:b4:ce:6e:b4:a6:33:5b:0c:fb:6d:d2:87:ec:8e:
55:4d:9c:a2:78:18:9d:34:33:19:1f:15:c3:6e:47:69:f5:eb:
e3:d7:3d:14:38:6c:ab:dd:f2:8f:d8:df:24:ca:0d:e9:2a:5d:
58:d7:b6:c1:2c:6e:2a:e5:69:2d:98:d4:02:31:cc:e7:46:9d:
13:5a:3d:44:9a:eb:89:b6:48:90:4c:2d:54:c3:14:b7:da:3d:
e7:f8:29:8d:77:72:6a:fa:6c:9e:a7:86:b8:e1:c7:03:6f:bd:
9c:d7:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:40 2025 by rpki-client