Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/hhOCjjctZE2elUUQzzzNpbofAzE.roa
File: hhOCjjctZE2elUUQzzzNpbofAzE.roa (raw, json)
Hash identifier: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=
Subject key identifier: 86:13:82:8E:37:2D:64:4D:9E:95:45:10:CF:3C:CD:A5:BA:1F:03:31
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0194282790CD0A699836E5384A55DF30C4B8
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/hhOCjjctZE2elUUQzzzNpbofAzE.roa
Signing time: Thu 02 Jan 2025 17:54:29 +0000
ROA not before: Thu 02 Jan 2025 17:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141757
IP address blocks: 193.118.160.0/24 maxlen: 24
193.118.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:90:cd:0a:69:98:36:e5:38:4a:55:df:30:c4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8613828e372d644d9e954510cf3ccda5ba1f0331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:72:8d:e6:08:37:72:06:d3:8f:e6:ab:db:
6b:c1:7f:90:62:89:18:7a:80:3f:af:f0:3c:cd:00:
15:df:12:4d:e9:a4:80:f4:9c:c7:73:00:7d:79:a4:
75:2f:d0:cf:d9:fa:9c:3d:bc:09:a7:e9:87:a9:de:
cd:82:fb:71:50:39:cf:39:ec:20:32:92:88:1e:02:
f9:a5:b6:4d:0b:11:9a:f7:a9:f6:2e:19:96:c9:a3:
8d:e0:39:77:c5:2e:71:4a:d7:8a:90:38:76:5c:c3:
c8:e3:a6:fd:aa:06:f4:9d:30:53:42:bb:f8:02:6e:
6d:ca:e4:33:be:da:69:66:65:3c:35:92:c8:df:93:
5f:b0:86:cc:50:54:a1:2e:2f:84:d4:46:7b:00:b1:
2c:d3:24:ac:57:97:df:e9:bf:83:14:ad:30:55:d6:
02:ce:72:89:42:9b:7f:6b:96:3a:0f:28:16:62:83:
ff:e4:16:47:53:bb:38:a7:5f:be:71:9e:bc:ce:2a:
50:e4:ee:2c:af:cb:6c:33:ae:62:1f:8b:2a:76:6f:
5e:75:30:9f:06:1a:e7:22:dc:07:c3:2d:70:e5:c3:
2e:c3:c3:d1:77:46:91:10:ba:98:f2:6f:39:27:1d:
81:fd:30:e6:42:d6:0c:cf:4a:68:51:80:93:cb:69:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:82:8E:37:2D:64:4D:9E:95:45:10:CF:3C:CD:A5:BA:1F:03:31
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/hhOCjjctZE2elUUQzzzNpbofAzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.160.0/23
Signature Algorithm: sha256WithRSAEncryption
22:c5:28:91:4d:a6:d9:64:ae:ba:cc:67:e2:65:d3:f8:23:9d:
e5:f9:0d:ab:a5:4b:2b:1e:1f:43:06:43:85:95:ef:28:15:ad:
a6:d3:f7:5a:76:38:3e:5c:1c:fd:f9:fb:50:44:34:18:4b:6b:
9a:8c:63:e3:6f:10:ac:93:cc:bf:4d:ec:e0:16:ed:13:62:2d:
96:48:c1:85:20:be:ab:43:cc:5d:bf:d4:4c:6c:92:49:ec:7e:
28:09:22:34:a9:a5:34:05:12:06:04:9b:58:42:38:d1:1f:a7:
e7:f5:64:d9:2a:c4:ee:d7:48:91:a4:5a:e6:7a:5b:ea:5a:2d:
10:3c:04:af:f4:98:dc:19:22:59:6b:c1:0a:19:a3:f0:4f:6b:
05:99:32:3d:30:2b:41:29:cc:96:31:30:b2:cf:b8:bf:6a:44:
1b:97:0d:b8:ec:78:23:66:e0:05:31:e2:b0:f4:cc:f9:0e:f6:
f6:cf:b7:34:61:9a:71:5e:10:0d:38:c6:82:b0:0a:7c:7f:73:
2a:bd:17:f6:b3:9d:b6:03:02:e7:e3:87:eb:63:58:b9:e3:8e:
7f:f4:c9:37:7a:32:36:a4:2b:89:81:96:0e:9d:4d:60:d7:63:
7c:31:73:66:34:cb:6a:79:8f:4f:71:db:40:5b:33:b9:cb:ba:
07:c8:d9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:04 2025 by rpki-client