Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa
File: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (raw, json)
Hash identifier: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=
Subject key identifier: 1E:6F:A3:E9:02:54:F4:5A:16:7F:93:E8:25:36:40:AE:C6:0E:3B:E6
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 019421B1B50EF5B9915C4F2B6AC92FC8E7A4
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 155.185.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b5:0e:f5:b9:91:5c:4f:2b:6a:c9:2f:c8:e7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e6fa3e90254f45a167f93e8253640aec60e3be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:8e:2d:00:e8:ea:92:a2:1c:35:e6:c6:1a:
c9:52:af:11:1c:7b:07:00:4e:ee:a6:48:69:ce:48:
77:8f:d4:22:1f:31:cd:6c:ae:7e:1f:69:51:78:21:
6f:64:fd:0b:db:50:38:22:e9:52:b7:e2:af:8b:00:
27:7a:de:a6:67:24:78:62:99:f3:fd:9a:74:2a:36:
b1:d0:06:b4:76:7f:34:a6:51:1a:fc:fb:04:3f:87:
49:54:23:82:3a:51:52:e2:6a:8d:7a:34:d3:46:e7:
6f:d5:81:d1:7f:f1:11:c8:b0:ba:6d:be:85:c4:93:
c2:39:dc:1f:73:45:84:f8:c8:70:db:e5:e1:d0:12:
6f:ff:58:1f:2d:6e:21:bd:fb:26:16:c2:95:59:0a:
df:4b:91:e4:c2:1e:db:31:39:d0:e2:e8:49:35:8f:
3a:4f:40:dc:0a:89:8d:df:cf:58:76:1d:ff:bb:fd:
dc:05:13:25:7b:e4:88:87:02:78:51:e0:15:c6:e9:
ec:00:9d:92:cd:a1:21:1a:ec:41:50:a4:63:0b:02:
cf:61:e1:e5:7c:3c:5e:62:b5:d9:cc:28:59:33:02:
f3:f7:01:23:da:dc:44:17:af:a1:34:a3:fe:99:0e:
37:7d:e4:0b:f4:a4:e8:d6:e0:b8:58:1b:2d:b9:fb:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:A3:E9:02:54:F4:5A:16:7F:93:E8:25:36:40:AE:C6:0E:3B:E6
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.185.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:f9:d7:d1:14:fa:7c:7a:6f:79:b8:1d:76:74:5b:68:32:a5:
c5:a3:32:f5:f6:55:c2:3e:0f:fd:e0:4a:ea:e0:44:aa:3b:49:
cd:3c:88:61:00:62:d9:e9:06:ce:36:93:cd:9b:0c:98:8b:43:
d7:ae:8d:5a:72:68:a9:38:f4:fa:76:1b:5a:b0:d9:93:67:1e:
d8:28:ea:a3:65:c9:6f:c7:75:19:61:24:a0:6b:c7:08:dc:70:
8c:2a:3a:06:34:dc:5a:ac:74:01:a5:54:4a:ef:bb:53:0e:f4:
1b:d8:a0:53:1c:6b:74:0a:ca:75:ea:11:ec:c6:49:ec:9a:aa:
4b:a8:54:e4:a6:0e:ac:ae:9a:6d:69:29:77:e0:a0:1f:01:0c:
cd:72:c4:6d:57:fe:b4:41:55:0b:8c:27:4f:80:d3:3c:40:c4:
8b:30:1f:23:4e:05:d6:d4:68:9f:23:68:50:86:e8:74:6e:90:
12:f1:5c:26:87:9c:23:d4:cd:7d:6b:52:c7:3e:d0:6f:11:b1:
72:5b:61:4b:be:d8:e3:12:1c:4e:61:68:04:0a:cc:a6:d9:ed:
f6:5c:04:66:82:25:ea:90:0c:0b:f4:3f:e4:b7:d1:b3:af:c6:
fb:6f:fb:23:14:93:dd:ce:db:a6:62:9e:24:92:4b:c1:24:eb:
2d:33:a5:b5
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQhsbUO9bmRXE8raskvyOekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1
MGY0MjIwHhcNMjUwMTAxMTE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTZmYTNlOTAyNTRmNDVhMTY3ZjkzZTgyNTM2NDBhZWM2MGUzYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/+OLQDo6pKiHDXmxhrJUq8RHHsH
AE7upkhpzkh3j9QiHzHNbK5+H2lReCFvZP0L21A4IulSt+KviwAnet6mZyR4Ypnz
/Zp0Kjax0Aa0dn80plEa/PsEP4dJVCOCOlFS4mqNejTTRudv1YHRf/ERyLC6bb6F
xJPCOdwfc0WE+Mhw2+Xh0BJv/1gfLW4hvfsmFsKVWQrfS5Hkwh7bMTnQ4uhJNY86
T0DcComN389Ydh3/u/3cBRMle+SIhwJ4UeAVxunsAJ2SzaEhGuxBUKRjCwLPYeHl
fDxeYrXZzChZMwLz9wEj2txEF6+hNKP+mQ43feQL9KTo1uC4WBstufvEYQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFB5vo+kCVPRaFn+T6CU2QK7GDjvmMB8GA1UdIwQY
MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt
YjEyYTY5MzNmODI5LzEvSG0tajZRSlU5Rm9XZjVQb0pUWkFyc1lPTy1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5
LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm7kwDQYJ
KoZIhvcNAQELBQADggEBAAX519EU+nx6b3m4HXZ0W2gypcWjMvX2VcI+D/3gSurg
RKo7Sc08iGEAYtnpBs42k82bDJiLQ9eujVpyaKk49Pp2G1qw2ZNnHtgo6qNlyW/H
dRlhJKBrxwjccIwqOgY03FqsdAGlVErvu1MO9BvYoFMca3QKynXqEezGSeyaqkuo
VOSmDqyumm1pKXfgoB8BDM1yxG1X/rRBVQuMJ0+A0zxAxIswHyNOBdbUaJ8jaFCG
6HRukBLxXCaHnCPUzX1rUsc+0G8RsXJbYUu+2OMSHE5haAQKzKbZ7fZcBGaCJeqQ
DAv0P+S30bOvxvtv+yMUk93O26ZiniSSS8Ek6y0zpbU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:32 2025 by rpki-client