Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa
File: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (raw, json)
Hash identifier: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=
Subject key identifier: 1D:60:67:71:9A:5E:F9:05:1D:23:E5:23:2A:D0:F7:28:EB:8E:6B:A4
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019420D60E175F39D9F40F33553B2C526EEC
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56402
IP address blocks: 185.120.168.0/23 maxlen: 23
185.120.168.0/24 maxlen: 24
185.120.169.0/24 maxlen: 24
2a02:16c0::/29 maxlen: 29
2a02:16c0::/30 maxlen: 30
2a02:16c4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0e:17:5f:39:d9:f4:0f:33:55:3b:2c:52:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d6067719a5ef9051d23e5232ad0f728eb8e6ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:f5:d6:0e:d5:5f:29:d2:39:fb:23:d5:68:
00:9c:2a:c6:88:f4:2f:e8:dc:de:f5:29:86:74:8e:
91:c5:a0:72:c1:2e:fc:df:90:e9:e3:b8:99:eb:66:
4b:4b:60:50:66:8c:92:fe:87:d5:cc:46:62:cc:7f:
bb:d0:4f:b6:20:97:d2:d8:16:49:19:f6:ad:33:84:
3b:55:21:86:c6:c7:43:92:77:f3:1d:76:d7:4c:a9:
f6:f2:d0:19:ee:5d:eb:1b:dd:e7:ec:a8:89:bc:a8:
5c:3d:37:89:d3:a2:15:74:74:2c:3b:1a:f1:90:85:
ca:b9:4d:bf:36:a0:9b:ba:d3:10:39:b0:ce:c9:dc:
92:71:c0:e5:d0:a0:3b:02:11:ab:82:95:cb:6b:2c:
5b:de:43:ee:b0:09:f6:45:24:a0:cd:c7:4e:be:69:
39:c4:63:a7:02:7f:a9:6f:cf:05:2b:1e:3a:13:5b:
1f:54:b2:a0:84:df:a6:15:5d:b8:77:ed:01:f4:d8:
3d:96:a5:98:dc:b8:e7:ed:31:8b:07:78:c6:7b:2c:
3e:11:c7:b7:7e:41:ba:b8:6b:64:31:f7:ee:f6:03:
7e:a2:66:27:ab:68:09:03:24:45:e8:d8:dc:92:c3:
09:91:a4:22:7e:7f:f7:8e:fa:aa:b6:0c:8d:ab:22:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:67:71:9A:5E:F9:05:1D:23:E5:23:2A:D0:F7:28:EB:8E:6B:A4
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.168.0/23
IPv6:
2a02:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:26:3d:c7:dc:18:0c:98:de:58:68:f9:0f:da:5a:8d:f6:4e:
6a:fb:8d:b4:c6:da:b3:d3:07:01:aa:92:df:6d:ff:da:ef:2f:
87:16:de:e9:48:ac:33:a3:83:3f:00:e0:98:f4:b2:0b:5b:0a:
9a:43:69:78:32:7f:b6:ac:ec:e2:0c:0a:14:b1:2d:d1:c4:4d:
97:3a:8e:c7:c8:ef:12:fd:d4:63:23:6b:00:a9:e4:c1:bd:bd:
52:77:fb:3e:3e:b9:ef:19:6b:68:f7:32:1b:3c:fa:98:a9:05:
b4:be:98:d1:ca:e2:a7:fe:05:c1:e4:81:1d:8d:b9:fc:1b:49:
b8:1d:af:3f:71:a8:f7:e0:6d:6b:31:20:60:10:6b:18:4c:fc:
b0:96:dc:98:04:d8:fe:be:71:e2:79:5a:a9:29:72:a8:d9:d8:
e4:4d:ff:d3:52:3e:45:27:b2:83:ba:c3:a5:4d:8a:e9:1f:56:
9d:05:db:e5:e6:46:3a:4c:57:c4:dd:dc:ad:14:da:ea:d1:5a:
5e:7e:55:ae:cb:91:d7:f9:b0:32:48:b8:2a:a5:18:ef:ae:f6:
a3:f6:f1:1e:e7:f8:32:4d:02:d1:a0:e1:0f:de:6e:e9:30:1d:
f7:c5:6f:f6:21:c0:91:3c:d9:4b:37:c8:b0:32:39:65:7e:f8:
89:34:a8:f5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQg1g4XXznZ9A8zVTssUm7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm
MmNjMDcwHhcNMjUwMTAxMDc0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDYwNjc3MTlhNWVmOTA1MWQyM2U1MjMyYWQwZjcyOGViOGU2YmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeP11g7VXynSOfsj1WgAnCrGiPQv
6Nze9SmGdI6RxaBywS7835Dp47iZ62ZLS2BQZoyS/ofVzEZizH+70E+2IJfS2BZJ
GfatM4Q7VSGGxsdDknfzHXbXTKn28tAZ7l3rG93n7KiJvKhcPTeJ06IVdHQsOxrx
kIXKuU2/NqCbutMQObDOydySccDl0KA7AhGrgpXLayxb3kPusAn2RSSgzcdOvmk5
xGOnAn+pb88FKx46E1sfVLKghN+mFV24d+0B9Ng9lqWY3Ljn7TGLB3jGeyw+Ece3
fkG6uGtkMffu9gN+omYnq2gJAyRF6NjcksMJkaQifn/3jvqqtgyNqyK6swIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB1gZ3GaXvkFHSPlIyrQ9yjrjmukMB8GA1UdIwQY
MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt
NTkyYzBkY2RhZjc5LzEvSFdCbmNacGUtUVVkSS1Vakt0RDNLT3VPYTZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5
LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuXioMA0E
AgACMAcDBQMqAhbAMA0GCSqGSIb3DQEBCwUAA4IBAQBbJj3H3BgMmN5YaPkP2lqN
9k5q+420xtqz0wcBqpLfbf/a7y+HFt7pSKwzo4M/AOCY9LILWwqaQ2l4Mn+2rOzi
DAoUsS3RxE2XOo7HyO8S/dRjI2sAqeTBvb1Sd/s+PrnvGWto9zIbPPqYqQW0vpjR
yuKn/gXB5IEdjbn8G0m4Ha8/caj34G1rMSBgEGsYTPywltyYBNj+vnHieVqpKXKo
2djkTf/TUj5FJ7KDusOlTYrpH1adBdvl5kY6TFfE3dytFNrq0VpeflWuy5HX+bAy
SLgqpRjvrvaj9vEe5/gyTQLRoOEP3m7pMB33xW/2IcCRPNlLN8iwMjllfviJNKj1
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:04:47 2025 by rpki-client