Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/HckIWldHWwqX0CJ7X-XU88JAoY8.roa
File: HckIWldHWwqX0CJ7X-XU88JAoY8.roa (raw, json)
Hash identifier: 0kYehz1g3idStzqPQ6DNbC0IwoRnTc8QtqRoQ8JJZs8=
Subject key identifier: 1D:C9:08:5A:57:47:5B:0A:97:D0:22:7B:5F:E5:D4:F3:C2:40:A1:8F
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 019423690D0343EF454727C76859733FDBE8
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/HckIWldHWwqX0CJ7X-XU88JAoY8.roa
Signing time: Wed 01 Jan 2025 19:47:54 +0000
ROA not before: Wed 01 Jan 2025 19:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 193.242.97.0/24 maxlen: 24
2001:67c:18a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0d:03:43:ef:45:47:27:c7:68:59:73:3f:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dc9085a57475b0a97d0227b5fe5d4f3c240a18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:8a:70:90:d0:27:5b:b1:79:24:1a:00:d7:
3a:02:8b:0f:7c:39:1e:82:bc:fa:a1:c0:2a:99:52:
86:c3:9f:13:4d:22:05:d2:35:8c:84:0c:97:42:14:
b6:4a:db:de:4e:bd:4a:d8:c9:f6:f4:fe:3e:fa:c6:
35:78:f0:e1:ab:76:d4:72:96:d2:36:bf:ca:e0:3f:
65:04:58:6a:c3:44:ee:c5:78:38:be:1e:e1:af:ba:
59:87:77:b0:09:39:4f:1c:87:13:99:52:35:88:4d:
44:5d:9b:f5:39:43:89:06:cb:8b:e2:f3:9a:23:33:
02:9d:14:02:7f:94:8d:f2:a8:bc:99:6e:3f:7a:77:
81:e0:5f:1a:0b:90:ea:3d:0c:6e:59:fc:d9:52:68:
9c:4e:e4:f5:47:11:2e:9c:80:ca:db:9f:16:f7:16:
10:73:c1:38:e2:45:e9:d6:ce:08:a8:ad:ff:ba:8d:
1b:59:25:5b:a0:e2:7e:84:eb:1c:37:92:02:d6:bd:
e9:17:c8:5d:65:3f:e4:4e:70:4d:57:ba:47:31:5f:
9c:ed:4f:a3:f1:ba:ea:52:6c:d4:3c:4c:cf:f9:2f:
f0:db:55:b5:2a:37:15:d9:5a:47:4e:25:40:f8:03:
fe:64:64:9f:68:9b:11:96:25:bf:3e:47:3f:21:d2:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:08:5A:57:47:5B:0A:97:D0:22:7B:5F:E5:D4:F3:C2:40:A1:8F
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/HckIWldHWwqX0CJ7X-XU88JAoY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.97.0/24
IPv6:
2001:67c:18a0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:c0:b4:e5:73:94:6f:c3:90:a8:93:84:cb:e5:32:38:db:a2:
4f:aa:11:66:31:16:17:33:ec:23:61:b5:ad:d8:25:89:63:59:
30:6c:0b:10:5f:d1:ce:7d:6f:33:9e:ea:4d:ef:81:9f:78:b2:
05:17:6f:b3:11:40:04:30:a1:e7:75:e0:a8:62:fb:1f:ca:09:
83:ec:a5:8e:0b:f3:3d:d6:4c:5a:04:02:68:fb:79:c0:c1:e2:
5e:16:e1:10:a7:23:2b:84:ed:94:ba:88:11:61:4e:da:7a:5a:
7b:8f:bf:16:7f:25:45:42:54:23:7b:42:41:30:37:1c:a0:f2:
e4:2f:a7:c0:a0:81:88:2b:02:56:2a:22:fd:9b:4b:bc:9c:7d:
52:67:c7:3e:79:39:4f:c0:96:75:a1:13:b9:e4:e9:1c:c0:32:
b2:98:eb:3c:50:05:dc:b6:23:21:cb:5c:c4:a0:2a:64:ac:cd:
a3:3f:dd:1f:dc:ed:41:24:ab:e4:9a:e8:ef:41:ae:ba:6f:4d:
06:20:4f:62:72:0f:35:55:b1:09:d3:d4:79:e6:9f:7d:d5:bf:
2c:5d:03:a4:1a:95:af:44:a0:14:de:ff:7e:fd:95:0a:aa:a9:
f1:8f:aa:cc:c0:d3:ec:83:0c:1a:c7:8d:0c:04:e4:e8:ae:ae:
2d:77:bd:e3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQjaQ0DQ+9FRyfHaFlzP9voMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDY3YTg0NDA5Y2VkYmEwMjJlZWIwMzViZDhhZDYyMGQ2
ODNlYTcwHhcNMjUwMTAxMTk0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGM5MDg1YTU3NDc1YjBhOTdkMDIyN2I1ZmU1ZDRmM2MyNDBhMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIWKcJDQJ1uxeSQaANc6AosPfDke
grz6ocAqmVKGw58TTSIF0jWMhAyXQhS2StveTr1K2Mn29P4++sY1ePDhq3bUcpbS
Nr/K4D9lBFhqw0TuxXg4vh7hr7pZh3ewCTlPHIcTmVI1iE1EXZv1OUOJBsuL4vOa
IzMCnRQCf5SN8qi8mW4/eneB4F8aC5DqPQxuWfzZUmicTuT1RxEunIDK258W9xYQ
c8E44kXp1s4IqK3/uo0bWSVboOJ+hOscN5IC1r3pF8hdZT/kTnBNV7pHMV+c7U+j
8brqUmzUPEzP+S/w21W1KjcV2VpHTiVA+AP+ZGSfaJsRliW/Pkc/IdLoyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB3JCFpXR1sKl9Aie1/l1PPCQKGPMB8GA1UdIwQY
MBaAFIDWeoRAnO26Ai7rA1vYrWINaD6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05aNmhFQ2M3Ym9DTHVzRFc5aXRZZzFvUHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUt
NmViM2FhNmEyMWFmLzEvSGNrSVdsZEhXd3FYMENKN1gtWFU4OEpBb1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUtNmViM2FhNmEyMWFm
LzEvZ05aNmhFQ2M3Ym9DTHVzRFc5aXRZZzFvUHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwfJhMA8E
AgACMAkDBwAgAQZ8GKAwDQYJKoZIhvcNAQELBQADggEBAKXAtOVzlG/DkKiThMvl
Mjjbok+qEWYxFhcz7CNhta3YJYljWTBsCxBf0c59bzOe6k3vgZ94sgUXb7MRQAQw
oed14Khi+x/KCYPspY4L8z3WTFoEAmj7ecDB4l4W4RCnIyuE7ZS6iBFhTtp6WnuP
vxZ/JUVCVCN7QkEwNxyg8uQvp8CggYgrAlYqIv2bS7ycfVJnxz55OU/AlnWhE7nk
6RzAMrKY6zxQBdy2IyHLXMSgKmSszaM/3R/c7UEkq+Sa6O9BrrpvTQYgT2JyDzVV
sQnT1Hnmn33VvyxdA6Qala9EoBTe/379lQqqqfGPqszA0+yDDBrHjQwE5Oiuri13
veM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:11:29 2025 by rpki-client