Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa
File: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (raw, json)
Hash identifier: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=
Subject key identifier: 1F:CE:07:C0:A8:CD:7B:F6:88:61:13:71:66:E1:FB:1B:E2:EB:FD:88
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 019427B5E9FCC8AEC4F783531C4489E5480E
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa
Signing time: Thu 02 Jan 2025 15:50:20 +0000
ROA not before: Thu 02 Jan 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58169
IP address blocks: 193.0.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e9:fc:c8:ae:c4:f7:83:53:1c:44:89:e5:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fce07c0a8cd7bf68861137166e1fb1be2ebfd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:a8:55:d9:9f:0f:b8:3b:9c:30:01:e5:e1:
08:52:11:65:8c:d9:97:0d:74:4b:13:7b:73:74:2f:
af:ab:bd:72:59:ae:c7:c6:68:c7:38:9f:ac:ca:7b:
7f:39:3d:3b:84:3d:96:fa:10:a1:57:79:9e:7c:49:
5c:8f:03:4a:e4:43:76:7e:f7:97:95:33:e0:b7:d7:
d1:4e:9c:da:7a:ce:3a:91:0d:cf:b8:5a:cd:7f:1d:
93:e1:87:c6:7c:02:5d:3b:ef:95:a1:89:e7:91:d8:
6e:5f:59:ba:c5:00:18:db:1a:9c:c4:ca:0e:a2:c4:
20:73:0e:4e:36:a7:3c:2e:ec:61:45:6b:2b:76:91:
e0:fe:4b:b7:d8:31:7c:0b:4f:75:b0:0b:81:42:de:
4e:10:85:43:82:13:32:8b:c8:90:18:db:20:e4:15:
ac:86:9c:a3:9f:6e:82:be:dd:53:d1:eb:95:93:f2:
4a:2c:cb:0c:21:de:d5:fb:16:a3:f6:23:b1:4b:4d:
b3:c0:4a:86:51:63:ce:13:ec:c3:52:b5:e5:2f:7a:
1f:ce:63:12:43:ae:6e:99:ba:17:73:7b:1c:fc:8b:
c1:12:0f:b7:62:ad:4a:a3:30:e8:32:f2:70:25:f0:
85:61:db:04:70:fa:b5:1a:0f:8d:b0:35:91:a4:21:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:07:C0:A8:CD:7B:F6:88:61:13:71:66:E1:FB:1B:E2:EB:FD:88
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:62:b9:8e:e7:0c:51:23:25:e4:07:6c:2e:38:62:91:ac:5a:
a2:47:aa:9a:6f:bb:22:68:dc:bd:ec:c6:c1:40:44:5b:93:70:
66:ed:f9:ef:5a:08:d1:9d:c5:b9:cb:dd:94:2d:aa:6c:d1:74:
16:6b:40:13:b9:ba:52:0d:27:40:f7:de:87:9b:05:22:a3:af:
60:40:6e:32:74:52:2a:24:42:da:bf:63:a5:75:e5:13:4f:c3:
95:9a:11:51:63:2b:9d:85:8f:a8:e2:a3:01:1d:65:2e:14:52:
7a:94:db:8f:19:bc:f0:71:20:62:45:74:db:59:a1:8d:1f:f4:
23:91:24:01:21:d6:50:ce:50:b1:90:84:37:64:53:14:92:99:
82:ae:50:0a:91:6e:a1:60:7d:8d:f2:b5:ca:0e:ea:b5:26:98:
63:3e:fc:2a:60:e1:f6:7a:3e:a8:c0:25:4b:fe:6c:f0:8e:b5:
b1:23:e7:c4:d0:9b:92:66:75:eb:2b:23:bb:ee:ba:31:ec:32:
62:88:cd:71:dd:c3:ca:d9:b7:4d:db:49:08:66:e6:dd:0b:7a:
ec:4b:8c:0c:4f:d3:d9:8d:7b:00:aa:39:9d:66:89:c9:1b:44:
c5:33:00:38:4c:1d:d3:c8:38:30:7f:9f:50:f8:6d:a5:12:58:
85:2f:29:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnten8yK7E94NTHESJ5UgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NWZjMjExNjM1OTZhNTE0NzJjMGZmMTg0YTY0OTkxZGM4
M2E2YzEwHhcNMjUwMTAyMTU1MDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmNlMDdjMGE4Y2Q3YmY2ODg2MTEzNzE2NmUxZmIxYmUyZWJmZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCuoVdmfD7g7nDAB5eEIUhFljNmX
DXRLE3tzdC+vq71yWa7HxmjHOJ+synt/OT07hD2W+hChV3mefElcjwNK5EN2fveX
lTPgt9fRTpzaes46kQ3PuFrNfx2T4YfGfAJdO++VoYnnkdhuX1m6xQAY2xqcxMoO
osQgcw5ONqc8LuxhRWsrdpHg/ku32DF8C091sAuBQt5OEIVDghMyi8iQGNsg5BWs
hpyjn26Cvt1T0euVk/JKLMsMId7V+xaj9iOxS02zwEqGUWPOE+zDUrXlL3ofzmMS
Q65umboXc3sc/IvBEg+3Yq1KozDoMvJwJfCFYdsEcPq1Gg+NsDWRpCHIiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/OB8CozXv2iGETcWbh+xvi6/2IMB8GA1UdIwQY
MBaAFDdfwhFjWWpRRywP8YSmSZHcg6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFfQ0VXTlphbEZITEFfeGhLWkprZHlEcHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hMmQ0N2UtZDExNC00M2ExLWJkY2Et
NTkwMDViMjk4MWQzLzEvSDg0SHdLak5lX2FJWVJOeFp1SDdHLUxyX1lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hMmQ0N2UtZDExNC00M2ExLWJkY2EtNTkwMDViMjk4MWQz
LzEvTjFfQ0VXTlphbEZITEFfeGhLWkprZHlEcHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQCcMA0G
CSqGSIb3DQEBCwUAA4IBAQAsYrmO5wxRIyXkB2wuOGKRrFqiR6qab7siaNy97MbB
QERbk3Bm7fnvWgjRncW5y92ULaps0XQWa0ATubpSDSdA996HmwUio69gQG4ydFIq
JELav2OldeUTT8OVmhFRYyudhY+o4qMBHWUuFFJ6lNuPGbzwcSBiRXTbWaGNH/Qj
kSQBIdZQzlCxkIQ3ZFMUkpmCrlAKkW6hYH2N8rXKDuq1JphjPvwqYOH2ej6owCVL
/mzwjrWxI+fE0JuSZnXrKyO77rox7DJiiM1x3cPK2bdN20kIZubdC3rsS4wMT9PZ
jXsAqjmdZonJG0TFMwA4TB3TyDgwf59Q+G2lEliFLyl/
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:23 2025 by rpki-client