Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa
File: HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa (raw, json)
Hash identifier: OJbfZZsxLOCgQrK35DXHBmPs1yNnWYKSyp7qwV6yc2A=
Subject key identifier: 1E:31:51:27:03:96:0E:A0:67:02:9C:5A:4E:D1:74:4E:9B:1B:C9:84
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B5280CBE24EADF3DF5D24B5874C3
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42115
IP address blocks: 178.155.0.0/22 maxlen: 22
178.155.2.0/24 maxlen: 24
213.87.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b5:28:0c:be:24:ea:df:3d:f5:d2:4b:58:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e31512703960ea067029c5a4ed1744e9b1bc984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:14:12:e2:da:0c:0f:df:2d:53:6e:f0:6e:
69:5e:bd:a4:f4:99:9b:7e:96:32:e0:c6:76:e2:12:
fa:bc:18:9b:3e:ae:57:c7:85:ce:01:b8:03:4e:f9:
a6:d4:43:e3:f1:f6:db:66:5d:ea:99:2f:ed:48:ef:
dd:dc:eb:13:93:30:4d:6e:a5:a4:b7:82:2a:5c:98:
69:d2:71:a5:7d:37:01:5f:8b:0c:01:f8:62:9c:63:
bf:ed:93:4d:66:b3:7f:3a:47:a8:0b:51:dc:44:cb:
45:ca:de:eb:95:ce:06:75:b1:ed:e0:66:62:7e:61:
bc:59:44:d9:00:60:08:86:52:ab:7a:be:9d:dd:6e:
c2:21:5e:48:b9:4e:80:78:46:b5:82:32:68:83:83:
7e:2b:9b:31:1b:c6:b2:a7:b5:8e:38:be:af:02:46:
7d:1a:aa:bb:59:0f:a1:14:c0:eb:b7:cd:c4:f1:8b:
90:bc:5e:51:79:5b:9b:d0:fd:9b:24:e5:53:85:43:
9a:37:c1:74:13:85:b8:d3:ac:88:71:08:a5:9e:0d:
11:48:0e:19:33:c7:7f:5b:b2:53:14:06:e3:fe:21:
2a:05:2a:99:a6:89:eb:80:09:30:92:40:12:a4:f3:
68:04:4e:9d:97:4c:37:aa:b5:ad:59:e1:65:aa:ea:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:51:27:03:96:0E:A0:67:02:9C:5A:4E:D1:74:4E:9B:1B:C9:84
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.155.0.0/22
213.87.192.0/21
Signature Algorithm: sha256WithRSAEncryption
42:7a:27:3c:e7:ac:49:32:5c:bb:c6:54:05:2c:a5:b2:3f:27:
93:1a:00:d0:7b:82:e7:c8:cf:16:c5:53:63:41:84:ba:4a:b7:
fa:be:2f:c4:ae:9d:b9:3d:86:4f:00:51:90:87:31:00:74:5b:
64:9e:6b:d3:ad:ab:71:38:3a:ad:9f:d0:c5:c2:92:ce:ad:ad:
3a:06:66:90:fa:d8:f1:6a:05:ee:09:10:d1:01:7b:98:ef:c4:
df:a5:84:26:aa:52:a1:5d:54:37:54:01:e2:70:a9:64:66:d1:
37:41:55:00:e9:32:cb:b4:b0:96:27:28:95:bd:40:0c:d1:87:
43:71:f3:79:5d:18:b9:d8:cb:0a:23:e2:fa:aa:55:c3:78:b2:
4e:74:17:e4:48:43:9f:ea:2e:54:df:a9:c0:0a:b6:27:fc:01:
96:b6:9b:93:82:bf:1d:06:96:64:94:4d:9c:37:2e:63:82:ed:
d7:77:57:96:12:37:2a:86:f5:69:25:e8:dc:f6:f2:74:e1:0a:
21:56:dd:4b:da:18:f4:d8:1c:21:d4:15:cb:17:87:53:f9:6a:
4a:47:78:3a:83:d0:29:f5:14:75:e0:5d:b8:e4:67:f6:29:2a:
7e:0c:7f:d3:18:ea:2b:53:ba:69:01:54:61:1d:90:da:87:c5:
da:80:01:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2bUoDL4k6t899dJLWHTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjUwMTAyMTE0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTMxNTEyNzAzOTYwZWEwNjcwMjljNWE0ZWQxNzQ0ZTliMWJjOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnEUEuLaDA/fLVNu8G5pXr2k9Jmb
fpYy4MZ24hL6vBibPq5Xx4XOAbgDTvmm1EPj8fbbZl3qmS/tSO/d3OsTkzBNbqWk
t4IqXJhp0nGlfTcBX4sMAfhinGO/7ZNNZrN/OkeoC1HcRMtFyt7rlc4GdbHt4GZi
fmG8WUTZAGAIhlKrer6d3W7CIV5IuU6AeEa1gjJog4N+K5sxG8ayp7WOOL6vAkZ9
Gqq7WQ+hFMDrt83E8YuQvF5ReVub0P2bJOVThUOaN8F0E4W406yIcQilng0RSA4Z
M8d/W7JTFAbj/iEqBSqZponrgAkwkkASpPNoBE6dl0w3qrWtWeFlquqxfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB4xUScDlg6gZwKcWk7RdE6bG8mEMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvSGpGUkp3T1dEcUJuQXB4YVR0RjBUcHNieVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCspsAAwQD
1VfAMA0GCSqGSIb3DQEBCwUAA4IBAQBCeic856xJMly7xlQFLKWyPyeTGgDQe4Ln
yM8WxVNjQYS6Srf6vi/Erp25PYZPAFGQhzEAdFtknmvTratxODqtn9DFwpLOra06
BmaQ+tjxagXuCRDRAXuY78TfpYQmqlKhXVQ3VAHicKlkZtE3QVUA6TLLtLCWJyiV
vUAM0YdDcfN5XRi52MsKI+L6qlXDeLJOdBfkSEOf6i5U36nACrYn/AGWtpuTgr8d
BpZklE2cNy5jgu3Xd1eWEjcqhvVpJejc9vJ04QohVt1L2hj02Bwh1BXLF4dT+WpK
R3g6g9Ap9RR14F245Gf2KSp+DH/TGOorU7ppAVRhHZDah8XagAFj
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:49 2025 by rpki-client