Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/HB4IhdwJTMbxhpvjbt56qq4pRj4.roa
File: HB4IhdwJTMbxhpvjbt56qq4pRj4.roa (raw, json)
Hash identifier: 9DEHc5XR7sLsTAJDe4PK9ikNGkjNKZGV2LC/PP63QHo=
Subject key identifier: 1C:1E:08:85:DC:09:4C:C6:F1:86:9B:E3:6E:DE:7A:AA:AE:29:46:3E
Certificate issuer: /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial: 0194468D6631B4BC35D99D7A5C1BF2A22076
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/HB4IhdwJTMbxhpvjbt56qq4pRj4.roa
Signing time: Wed 08 Jan 2025 15:34:19 +0000
ROA not before: Wed 08 Jan 2025 15:34:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 195.184.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:8d:66:31:b4:bc:35:d9:9d:7a:5c:1b:f2:a2:20:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Validity
Not Before: Jan 8 15:34:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c1e0885dc094cc6f1869be36ede7aaaae29463e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:42:f4:f1:18:17:84:5a:49:10:3a:3b:df:
8d:a5:7c:a5:28:17:ec:b4:f4:97:d2:ed:dc:1f:53:
ba:fb:39:2b:6c:28:b8:7a:b2:54:2f:55:3e:55:bb:
60:8a:6a:54:5a:67:b0:b8:cb:b8:d7:64:36:1e:50:
3a:f0:7b:41:ff:c9:5d:03:d9:f4:2c:2a:94:ad:2d:
de:ad:79:8d:41:fd:4c:b7:79:4f:d5:76:79:d6:cb:
15:29:47:57:1e:33:f4:b1:5f:bd:5a:99:96:6a:c8:
38:bd:39:a9:06:60:d3:34:7a:54:c7:79:56:aa:d4:
f7:5f:9c:52:90:53:da:43:52:1b:58:9e:ff:9f:28:
15:ec:f7:46:16:b7:d0:50:da:1d:99:5e:5f:e4:42:
19:95:dc:32:22:cd:32:f6:08:5a:a3:70:a3:b7:69:
ba:28:5f:d8:85:d2:0f:60:ec:38:4c:79:ef:d9:c1:
6c:f5:e2:76:c0:69:fb:70:be:a0:31:49:89:6e:4c:
f8:13:75:9d:98:9c:eb:63:c1:33:51:3a:2e:a9:eb:
0f:94:61:1f:2a:10:1f:1f:06:d7:fa:82:e4:db:5a:
b3:82:d6:ff:71:d3:0f:13:a4:23:5e:7b:80:04:64:
a8:cf:0b:b0:c9:1e:7f:45:1a:48:12:bd:0c:39:38:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:08:85:DC:09:4C:C6:F1:86:9B:E3:6E:DE:7A:AA:AE:29:46:3E
X509v3 Authority Key Identifier:
keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/HB4IhdwJTMbxhpvjbt56qq4pRj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:9a:c7:af:41:8f:11:15:61:14:f4:6e:9f:91:af:a3:43:a7:
a8:29:36:32:10:86:28:28:b6:2c:84:6c:a9:1f:5f:7a:fa:cc:
b2:eb:ff:64:d7:bc:6e:e9:9a:ba:fa:40:90:5c:1e:50:e9:de:
f6:aa:75:98:9a:4e:e4:a9:fa:72:f9:6d:79:18:c8:6c:df:ba:
c2:45:5e:81:97:96:8e:dc:d4:6d:ce:07:35:e4:7c:23:57:b3:
00:0a:38:d2:e5:54:95:17:38:db:5c:ad:ef:c3:52:3d:56:01:
8a:54:c7:21:cf:a3:1b:38:f6:d5:4d:66:cb:b8:77:7d:d3:cb:
9b:97:ec:e6:98:c1:8a:21:19:65:cd:f3:2a:59:c0:6f:74:57:
ab:7c:d7:37:a3:3c:be:13:3f:b2:31:e0:72:13:01:a5:55:29:
82:16:d6:53:ed:f7:0b:f6:bf:01:2c:fc:f5:69:ea:ac:00:6b:
6b:50:2b:b3:dc:fe:0f:46:ef:35:38:15:32:c5:ee:a5:1e:22:
e9:ac:07:46:0f:bb:b8:49:06:d8:5a:2f:3b:9e:42:f5:67:df:
0d:33:8d:38:ff:f3:ee:75:95:ab:ba:c5:f0:48:91:df:cb:8b:
52:4b:63:1f:78:b6:dd:70:14:de:6c:0a:df:e0:78:d2:75:89:
04:9f:95:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRGjWYxtLw12Z16XBvyoiB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTYwYTFmYzYyODJmNTc4MmE3YThhN2VhMGVkMjA2Yjk0
NDQxMjMwHhcNMjUwMTA4MTUzNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzFlMDg4NWRjMDk0Y2M2ZjE4NjliZTM2ZWRlN2FhYWFlMjk0NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdFC9PEYF4RaSRA6O9+NpXylKBfs
tPSX0u3cH1O6+zkrbCi4erJUL1U+VbtgimpUWmewuMu412Q2HlA68HtB/8ldA9n0
LCqUrS3erXmNQf1Mt3lP1XZ51ssVKUdXHjP0sV+9WpmWasg4vTmpBmDTNHpUx3lW
qtT3X5xSkFPaQ1IbWJ7/nygV7PdGFrfQUNodmV5f5EIZldwyIs0y9ghao3Cjt2m6
KF/YhdIPYOw4THnv2cFs9eJ2wGn7cL6gMUmJbkz4E3WdmJzrY8EzUTouqesPlGEf
KhAfHwbX+oLk21qzgtb/cdMPE6QjXnuABGSozwuwyR5/RRpIEr0MOTjctQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBweCIXcCUzG8Yab427eeqquKUY+MB8GA1UdIwQY
MBaAFDAWCh/GKC9Xgqeop+oO0ga5REEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYt
NGIzOWZjYWJjMzcxLzEvSEI0SWhkd0pUTWJ4aHB2amJ0NTZxcTRwUmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYtNGIzOWZjYWJjMzcx
LzEvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7j5MA0G
CSqGSIb3DQEBCwUAA4IBAQB+msevQY8RFWEU9G6fka+jQ6eoKTYyEIYoKLYshGyp
H196+syy6/9k17xu6Zq6+kCQXB5Q6d72qnWYmk7kqfpy+W15GMhs37rCRV6Bl5aO
3NRtzgc15HwjV7MACjjS5VSVFzjbXK3vw1I9VgGKVMchz6MbOPbVTWbLuHd908ub
l+zmmMGKIRllzfMqWcBvdFerfNc3ozy+Ez+yMeByEwGlVSmCFtZT7fcL9r8BLPz1
aeqsAGtrUCuz3P4PRu81OBUyxe6lHiLprAdGD7u4SQbYWi87nkL1Z98NM404//Pu
dZWrusXwSJHfy4tSS2MfeLbdcBTebArf4HjSdYkEn5Wl
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:11:20 2025 by rpki-client