Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/HcO5cdSF05y0wg63MJNFAdh4QAo.roa
File: HcO5cdSF05y0wg63MJNFAdh4QAo.roa (raw, json)
Hash identifier: Mz3glj/KonDBgt2SiP6Zk96rLbwRRRt7COjMo5lu2/M=
Subject key identifier: 1D:C3:B9:71:D4:85:D3:9C:B4:C2:0E:B7:30:93:45:01:D8:78:40:0A
Certificate issuer: /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial: 01941FFA36B90D03249314066196D8B4A6B9
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/HcO5cdSF05y0wg63MJNFAdh4QAo.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56984
IP address blocks: 193.36.168.0/24 maxlen: 24
193.36.169.0/24 maxlen: 24
193.36.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:36:b9:0d:03:24:93:14:06:61:96:d8:b4:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dc3b971d485d39cb4c20eb730934501d878400a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:3e:17:97:c0:4e:aa:29:eb:14:28:d4:13:
1b:40:2a:94:13:74:94:95:b6:98:37:f2:8c:82:d8:
b6:5d:51:63:7c:19:a5:fa:77:f4:14:10:31:e5:49:
ee:c2:62:c1:0f:de:19:bf:9d:9a:8f:35:49:67:5b:
86:38:bb:f7:33:dc:2e:80:19:a7:6d:7e:25:42:3b:
2c:ac:4a:88:ef:7d:3b:01:fc:c3:48:af:a8:55:ef:
fe:fb:e4:67:4a:eb:43:ac:24:dd:a4:6d:48:b6:61:
6a:10:5d:c7:44:f7:92:1c:e9:fa:e6:a8:13:a3:96:
e7:2c:20:e7:9c:9d:68:dd:f8:62:48:63:b9:94:a6:
05:29:c5:bf:2a:a0:92:5d:2a:b1:c3:3e:5e:9f:49:
45:96:56:46:9e:bf:cb:71:12:51:5c:62:20:76:d0:
65:e1:4e:38:7a:71:c3:e1:f5:35:e9:50:0c:43:d6:
4c:d4:22:64:64:cb:e2:b8:73:a9:4c:f9:a7:1e:ec:
2d:69:ef:45:b1:8d:80:5d:9e:26:d1:85:19:87:6d:
2c:53:f4:0b:c9:e7:92:5d:14:cc:17:11:a5:5d:bb:
db:b1:e4:04:53:bf:ba:04:db:f3:56:41:d4:b8:9e:
d9:35:04:d1:07:90:9a:a1:fc:43:5a:3b:3a:2b:0c:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:B9:71:D4:85:D3:9C:B4:C2:0E:B7:30:93:45:01:D8:78:40:0A
X509v3 Authority Key Identifier:
keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/HcO5cdSF05y0wg63MJNFAdh4QAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.168.0-193.36.170.255
Signature Algorithm: sha256WithRSAEncryption
5a:c5:a2:0a:9a:83:03:cb:40:37:f0:bb:ec:6f:f8:82:e4:05:
bd:54:82:f2:4f:ca:f3:12:bc:ce:3e:37:5f:0e:c6:36:8d:aa:
5f:7d:a7:83:4b:7d:fe:87:f1:64:35:f9:cb:66:d1:df:67:09:
ca:81:00:cd:2e:94:7c:2e:fc:49:56:7f:4e:f7:44:fe:17:73:
af:25:e7:cc:23:da:2c:1e:8f:31:fd:18:7f:79:e7:1e:7a:69:
33:90:65:97:74:70:53:a5:21:d2:c6:45:f8:65:9f:32:27:ac:
3a:73:fb:52:26:33:d8:12:34:82:ee:3f:ec:57:d9:83:4f:8d:
89:aa:b4:35:04:9b:c7:95:35:b8:74:c4:c8:97:bf:86:4d:2a:
f8:97:6d:39:56:31:17:25:ff:30:63:80:3b:51:5c:6f:75:ed:
f8:f2:d4:c7:9b:2b:39:90:cb:49:00:1b:fe:88:b4:d7:c2:15:
fe:61:db:c0:07:31:8f:22:0c:00:31:37:69:f8:a5:11:aa:5d:
cb:29:e7:f7:07:cf:4c:f9:95:b5:17:13:27:0e:e6:06:62:74:
8a:89:81:79:c0:8f:6a:6a:4d:cb:2d:68:0c:69:97:b2:56:00:
5b:a7:3f:bd:c5:8e:dc:89:b4:69:b5:13:5f:27:4e:f4:0d:91:
8b:d0:33:2f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQf+ja5DQMkkxQGYZbYtKa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODA1N2E4ZDg2ZGQzMzBmMzg3ODAxZjEwM2YzZWJiNmZk
YmNhYWEwHhcNMjUwMTAxMDM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGMzYjk3MWQ0ODVkMzljYjRjMjBlYjczMDkzNDUwMWQ4Nzg0MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24w+F5fATqop6xQo1BMbQCqUE3SU
lbaYN/KMgti2XVFjfBml+nf0FBAx5UnuwmLBD94Zv52ajzVJZ1uGOLv3M9wugBmn
bX4lQjssrEqI7307AfzDSK+oVe/+++RnSutDrCTdpG1ItmFqEF3HRPeSHOn65qgT
o5bnLCDnnJ1o3fhiSGO5lKYFKcW/KqCSXSqxwz5en0lFllZGnr/LcRJRXGIgdtBl
4U44enHD4fU16VAMQ9ZM1CJkZMviuHOpTPmnHuwtae9FsY2AXZ4m0YUZh20sU/QL
yeeSXRTMFxGlXbvbseQEU7+6BNvzVkHUuJ7ZNQTRB5CaofxDWjs6KwzzjwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFB3DuXHUhdOctMIOtzCTRQHYeEAKMB8GA1UdIwQY
MBaAFHqAV6jYbdMw84eAHxA/Prtv28qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9CWHFOaHQwekR6aDRBZkVEOC11Ml9ieXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNDhkNDUtNjNhZi00MTZiLThhMjQt
ZjY5NzZlNTQwZDk0LzEvSGNPNWNkU0YwNXkwd2c2M01KTkZBZGg0UUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNDhkNDUtNjNhZi00MTZiLThhMjQtZjY5NzZlNTQwZDk0
LzEvZW9CWHFOaHQwekR6aDRBZkVEOC11Ml9ieXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPBJKgD
BADBJKowDQYJKoZIhvcNAQELBQADggEBAFrFogqagwPLQDfwu+xv+ILkBb1UgvJP
yvMSvM4+N18OxjaNql99p4NLff6H8WQ1+ctm0d9nCcqBAM0ulHwu/ElWf073RP4X
c68l58wj2iwejzH9GH955x56aTOQZZd0cFOlIdLGRfhlnzInrDpz+1ImM9gSNILu
P+xX2YNPjYmqtDUEm8eVNbh0xMiXv4ZNKviXbTlWMRcl/zBjgDtRXG917fjy1Meb
KzmQy0kAG/6ItNfCFf5h28AHMY8iDAAxN2n4pRGqXcsp5/cHz0z5lbUXEycO5gZi
dIqJgXnAj2pqTcstaAxpl7JWAFunP73FjtyJtGm1E18nTvQNkYvQMy8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:35 2025 by rpki-client