Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hirG0wCdPPp74UU2BJCRBx2I3xI.roa
File: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (raw, json)
Hash identifier: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=
Subject key identifier: 86:2A:C6:D3:00:9D:3C:FA:7B:E1:45:36:04:90:91:07:1D:88:DF:12
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449F3F964B931ED2F4D2A033F63365
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hirG0wCdPPp74UU2BJCRBx2I3xI.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212505
IP address blocks: 83.139.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9f:3f:96:4b:93:1e:d2:f4:d2:a0:33:f6:33:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=862ac6d3009d3cfa7be14536049091071d88df12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:0c:9b:94:ff:d0:39:10:f4:be:c7:ed:17:
f8:4e:51:a0:da:12:c0:73:47:c9:bf:e7:07:10:c7:
14:9d:88:b3:cc:2c:ca:64:fe:fd:ff:d4:8e:42:c9:
12:c0:c3:36:28:58:ee:62:7a:10:7f:81:50:6e:dc:
34:b7:39:b9:85:72:5d:31:cf:50:f9:5e:e5:9f:b9:
9b:bf:7d:61:4d:93:91:d1:cd:e7:1f:b3:43:03:d1:
62:80:06:25:1d:d1:42:d0:f1:ef:d5:1c:03:f1:0a:
46:65:54:06:ce:db:17:13:1e:6c:cd:eb:92:66:ca:
60:6b:e8:bc:7d:e2:54:d4:42:6a:bb:98:53:0e:8d:
13:23:61:04:5a:b9:79:64:8e:21:15:e9:bf:d6:15:
40:b8:64:ac:6e:82:c2:e1:89:1a:25:65:85:c6:65:
26:30:c0:8b:bb:67:7f:1a:65:bd:0d:15:cc:9e:56:
57:e4:b9:f0:c6:cd:62:42:e3:f7:d0:9a:18:f2:64:
b9:fb:0a:62:a3:93:6a:07:35:88:90:f0:2d:58:50:
34:89:6a:a3:bb:c4:6a:87:33:86:ea:be:64:3f:d2:
f9:00:65:63:24:c6:4b:98:9b:b7:13:38:dd:a9:7f:
b8:b6:37:48:4f:1b:ac:bf:bf:b3:db:87:7c:41:d4:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2A:C6:D3:00:9D:3C:FA:7B:E1:45:36:04:90:91:07:1D:88:DF:12
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hirG0wCdPPp74UU2BJCRBx2I3xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:01:21:f0:d2:91:22:98:c2:8b:9d:0a:5f:62:ee:ab:d1:43:
85:6d:15:3d:ab:90:55:28:e7:42:e8:17:c3:93:f3:0c:a1:74:
dc:4e:3c:bd:d9:98:ae:c7:84:6b:7e:90:f4:67:b5:7f:f1:34:
4a:e6:b7:e2:00:82:68:27:f1:62:13:1a:80:15:d6:69:50:6c:
51:62:5b:54:ae:eb:aa:81:3c:18:5e:6f:9b:8b:b8:02:31:cd:
a4:a9:8e:d7:ac:21:2b:a2:3d:ed:d4:97:1a:57:66:bf:d3:98:
71:6d:2c:2a:d2:4c:14:a0:e9:53:aa:31:a4:19:3f:63:3f:5c:
d7:e0:fb:7f:8d:2f:e0:64:49:bb:f3:08:11:fa:45:b9:75:57:
d4:22:a8:64:da:2a:8e:1b:53:50:f9:fb:f6:a5:aa:df:ac:ea:
5c:ee:ff:5d:b0:9d:fa:7e:e2:1a:7f:22:04:82:b5:2e:15:e9:
07:33:24:ed:51:ac:98:fa:8a:05:01:78:11:4a:f7:08:3d:bb:
c4:56:dd:05:37:a5:68:79:02:47:69:3c:5e:0a:e7:0d:8b:91:
46:55:51:30:73:28:f7:5b:e2:45:21:00:d8:19:95:2b:8d:95:
d2:86:89:a5:77:41:dd:16:cc:53:fc:fd:48:f0:23:60:00:63:
83:fc:fd:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJ8/lkuTHtL00qAz9jNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh
ZTMyOGUwHhcNMjUwMTAxMjM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjJhYzZkMzAwOWQzY2ZhN2JlMTQ1MzYwNDkwOTEwNzFkODhkZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYgMm5T/0DkQ9L7H7Rf4TlGg2hLA
c0fJv+cHEMcUnYizzCzKZP79/9SOQskSwMM2KFjuYnoQf4FQbtw0tzm5hXJdMc9Q
+V7ln7mbv31hTZOR0c3nH7NDA9FigAYlHdFC0PHv1RwD8QpGZVQGztsXEx5szeuS
Zspga+i8feJU1EJqu5hTDo0TI2EEWrl5ZI4hFem/1hVAuGSsboLC4YkaJWWFxmUm
MMCLu2d/GmW9DRXMnlZX5Lnwxs1iQuP30JoY8mS5+wpio5NqBzWIkPAtWFA0iWqj
u8RqhzOG6r5kP9L5AGVjJMZLmJu3EzjdqX+4tjdITxusv7+z24d8QdTxbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIYqxtMAnTz6e+FFNgSQkQcdiN8SMB8GA1UdIwQY
MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt
MzViYTI2N2RlZDNiLzEvaGlyRzB3Q2RQUHA3NFVVMkJKQ1JCeDJJM3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi
LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4sTMA0G
CSqGSIb3DQEBCwUAA4IBAQChASHw0pEimMKLnQpfYu6r0UOFbRU9q5BVKOdC6BfD
k/MMoXTcTjy92Ziux4RrfpD0Z7V/8TRK5rfiAIJoJ/FiExqAFdZpUGxRYltUruuq
gTwYXm+bi7gCMc2kqY7XrCEroj3t1JcaV2a/05hxbSwq0kwUoOlTqjGkGT9jP1zX
4Pt/jS/gZEm78wgR+kW5dVfUIqhk2iqOG1NQ+fv2parfrOpc7v9dsJ36fuIafyIE
grUuFekHMyTtUayY+ooFAXgRSvcIPbvEVt0FN6VoeQJHaTxeCucNi5FGVVEwcyj3
W+JFIQDYGZUrjZXShomld0HdFsxT/P1I8CNgAGOD/P1Z
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:15 2025 by rpki-client