Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa
File: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (raw, json)
Hash identifier: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=
Subject key identifier: 1D:C0:86:55:FD:5C:D9:38:BD:43:C1:A9:47:5F:35:CC:AC:68:2B:EE
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 0194221FF5D87A2A094C3C6F452314D4D0F0
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42724
IP address blocks: 185.235.77.0/24 maxlen: 24
194.169.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f5:d8:7a:2a:09:4c:3c:6f:45:23:14:d4:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dc08655fd5cd938bd43c1a9475f35ccac682bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:f0:8c:48:40:d3:bc:75:2d:7f:92:75:ee:
de:1b:97:f7:6f:00:6b:da:1f:bd:f4:70:a5:02:6e:
16:e9:71:64:9a:e5:54:c0:6f:55:db:6a:d4:f5:13:
21:23:cd:23:9d:ea:fc:7b:e1:64:76:f1:f5:cb:6e:
2a:fa:73:20:46:2d:de:3f:b6:0c:82:b8:66:60:34:
26:70:fc:c3:f9:74:52:06:cf:fb:b5:98:a5:ea:6b:
11:d2:75:ae:f5:9e:e3:9e:00:21:f0:2d:4c:79:a0:
dd:7d:be:49:89:99:7c:63:d4:65:15:23:08:62:3a:
1f:75:88:fb:9f:af:99:d3:55:db:52:dc:52:4a:4a:
d2:e2:72:69:a8:28:bf:a6:5c:c3:1a:76:c1:b0:79:
d0:d6:56:35:b0:d1:7c:51:f7:bc:28:ce:05:56:75:
7f:8f:ca:b1:1b:1c:23:37:39:18:fc:ce:e4:d4:a9:
33:1e:95:69:f2:db:e9:d5:4f:ed:e6:93:aa:fe:6b:
a0:5a:f0:05:e3:6c:e5:50:3e:b7:25:84:fa:46:85:
66:0d:e1:fc:9b:23:db:a1:bf:cf:79:92:a6:04:ba:
bb:96:b2:18:c9:f8:c6:cf:50:8a:17:d1:96:89:98:
44:b3:3b:eb:69:11:be:56:34:19:52:cf:c4:09:bf:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:86:55:FD:5C:D9:38:BD:43:C1:A9:47:5F:35:CC:AC:68:2B:EE
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fb:66:51:c7:ba:21:eb:59:4b:24:56:4f:93:c2:c5:21:c8:
c5:da:e3:fc:0b:2b:c5:64:39:11:13:be:36:89:9d:a4:9e:0a:
e1:b1:a4:2f:38:e2:e6:08:b3:06:c0:f0:9e:cc:bc:2e:7d:a5:
27:d0:c9:69:01:40:23:d1:9a:15:5d:27:40:7b:7e:0f:de:98:
28:37:66:b6:c3:84:2e:da:90:9b:90:76:47:01:0c:67:f8:d8:
e9:9f:91:0a:67:36:76:16:2f:1c:36:36:f9:cf:7a:3d:e0:1c:
d2:8c:95:bd:18:62:54:84:4a:9c:62:83:41:ec:14:cb:00:62:
47:52:da:51:3f:2e:57:29:e8:bf:81:8f:55:50:dc:93:77:b9:
4d:50:0c:d4:98:50:f2:ce:40:bd:22:01:f2:fb:6d:41:c2:69:
ca:4c:15:8c:33:78:fd:c1:b1:0f:1b:40:bf:42:d6:5a:61:1b:
25:46:6f:50:46:e4:1d:c4:b9:44:a5:8e:c2:52:73:91:e4:10:
61:27:3a:58:b6:ff:cd:c6:fa:ac:73:5f:0e:17:61:73:24:fc:
bf:11:8b:0b:6f:87:da:e3:39:8d:76:75:23:81:3b:b6:cb:42:
22:eb:f8:2c:e5:6b:01:f2:91:a8:dc:d2:c8:8a:f6:88:a4:09:
37:12:79:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH/XYeioJTDxvRSMU1NDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3
MGUwY2QwHhcNMjUwMTAxMTM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGMwODY1NWZkNWNkOTM4YmQ0M2MxYTk0NzVmMzVjY2FjNjgyYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixTwjEhA07x1LX+Sde7eG5f3bwBr
2h+99HClAm4W6XFkmuVUwG9V22rU9RMhI80jner8e+FkdvH1y24q+nMgRi3eP7YM
grhmYDQmcPzD+XRSBs/7tZil6msR0nWu9Z7jngAh8C1MeaDdfb5JiZl8Y9RlFSMI
YjofdYj7n6+Z01XbUtxSSkrS4nJpqCi/plzDGnbBsHnQ1lY1sNF8Ufe8KM4FVnV/
j8qxGxwjNzkY/M7k1KkzHpVp8tvp1U/t5pOq/mugWvAF42zlUD63JYT6RoVmDeH8
myPbob/PeZKmBLq7lrIYyfjGz1CKF9GWiZhEszvraRG+VjQZUs/ECb9kZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB3AhlX9XNk4vUPBqUdfNcysaCvuMB8GA1UdIwQY
MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt
Yzk5NWQyZWM5ZTk0LzEvSGNDR1ZmMWMyVGk5UThHcFIxODF6S3hvSy00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0
LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuetNAwQA
wql4MA0GCSqGSIb3DQEBCwUAA4IBAQBe+2ZRx7oh61lLJFZPk8LFIcjF2uP8CyvF
ZDkRE742iZ2kngrhsaQvOOLmCLMGwPCezLwufaUn0MlpAUAj0ZoVXSdAe34P3pgo
N2a2w4Qu2pCbkHZHAQxn+Njpn5EKZzZ2Fi8cNjb5z3o94BzSjJW9GGJUhEqcYoNB
7BTLAGJHUtpRPy5XKei/gY9VUNyTd7lNUAzUmFDyzkC9IgHy+21BwmnKTBWMM3j9
wbEPG0C/QtZaYRslRm9QRuQdxLlEpY7CUnOR5BBhJzpYtv/Nxvqsc18OF2FzJPy/
EYsLb4fa4zmNdnUjgTu2y0Ii6/gs5WsB8pGo3NLIivaIpAk3EnkQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:02 2025 by rpki-client