Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hqgoQi7D5NCBZqmhnsB86r_tAHk.roa
File: hqgoQi7D5NCBZqmhnsB86r_tAHk.roa (raw, json)
Hash identifier: 4yOsA5Dal5BHpJyTrk9alP3chadILNOFrXQAUxk+WmI=
Subject key identifier: 86:A8:28:42:2E:C3:E4:D0:81:66:A9:A1:9E:C0:7C:EA:BF:ED:00:79
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282972C69333073D24559BA40C2B07
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hqgoQi7D5NCBZqmhnsB86r_tAHk.roa
Signing time: Thu 02 Jan 2025 17:55:08 +0000
ROA not before: Thu 02 Jan 2025 17:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201406
IP address blocks: 92.247.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:29:72:c6:93:33:07:3d:24:55:9b:a4:0c:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a828422ec3e4d08166a9a19ec07ceabfed0079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:77:8c:72:b4:cb:11:52:a7:34:33:0f:4a:
43:7b:d7:8f:15:2a:8f:4c:39:2d:76:aa:f1:04:bc:
17:5a:45:ee:ed:a7:f5:75:ee:8c:43:56:29:62:f3:
11:20:1d:8d:87:e9:fc:9e:cd:12:01:c2:79:f8:5f:
b3:2c:b8:13:1d:ab:fe:1c:76:5b:70:9f:bb:22:05:
96:50:9d:b5:60:d4:bf:9c:d0:04:0f:55:2d:0a:8c:
3f:19:98:e2:b4:1d:c9:02:0d:3b:36:5c:2b:7d:77:
48:e2:c5:0f:00:42:40:b5:31:55:c0:ec:ad:85:8f:
08:ae:3f:97:22:43:39:92:0e:63:e2:66:85:da:4a:
3b:50:4d:02:c6:54:be:27:c5:c3:17:30:3d:6a:e0:
76:bc:d8:f4:81:18:ab:0a:34:d0:a1:77:06:48:d0:
df:d3:96:47:8e:c3:b4:76:7c:f9:8b:93:1c:1c:ac:
46:87:d2:17:28:54:30:1d:80:8f:9b:69:32:2d:a9:
d6:9c:f6:04:7d:5e:04:89:e1:35:4c:bb:e3:5a:a4:
64:cf:d8:45:3b:a9:30:21:64:59:ba:7b:d4:1b:03:
04:f5:e4:5c:d7:79:ad:d6:9e:5c:7e:a3:3b:ad:55:
37:31:55:88:29:9c:75:75:ff:8a:9b:ec:fe:6a:e9:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:28:42:2E:C3:E4:D0:81:66:A9:A1:9E:C0:7C:EA:BF:ED:00:79
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hqgoQi7D5NCBZqmhnsB86r_tAHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.112.0/22
Signature Algorithm: sha256WithRSAEncryption
63:67:b8:bd:60:e1:91:ce:5b:09:c4:fd:b7:c3:55:c3:f8:c0:
79:a6:25:aa:57:18:eb:e1:3b:cb:88:be:87:c2:69:fe:d4:a2:
e6:72:ab:2b:b6:c8:05:95:4e:44:48:9b:1e:32:d1:3c:ea:6a:
60:48:7a:bf:d9:33:29:33:07:53:eb:18:c4:04:dc:42:98:b0:
31:ab:1a:ba:d7:8f:33:f2:f0:28:6e:3b:7b:3c:42:b9:34:0c:
c0:71:10:c3:3d:85:fe:22:0d:ed:b1:b9:d4:d7:4d:57:41:00:
c6:44:d2:fe:8d:d9:5e:44:5a:18:42:95:b3:55:a9:58:5a:2f:
80:0f:b7:d4:76:4f:43:35:60:01:8d:e0:0e:92:94:09:6e:bf:
ef:36:4f:3c:46:fa:1c:8b:04:f5:da:16:38:99:fe:e3:d7:44:
68:c5:81:a7:c3:1a:fe:ab:f2:f8:5e:d3:89:e9:67:d1:a9:cb:
02:5b:bb:67:14:eb:df:48:3b:6f:4c:ee:4d:d4:47:26:ef:f6:
74:99:84:4b:94:f5:c7:2f:e4:c4:89:09:08:d8:8b:ed:14:14:
93:f7:5e:ef:ed:bb:f6:d2:9d:91:0e:ac:ba:b4:92:dc:4c:ea:
e5:3f:5f:14:31:d5:c5:db:ed:29:2f:1d:f3:b9:37:95:1b:52:
12:22:7f:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKClyxpMzBz0kVZukDCsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmE4Mjg0MjJlYzNlNGQwODE2NmE5YTE5ZWMwN2NlYWJmZWQwMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vx3jHK0yxFSpzQzD0pDe9ePFSqP
TDktdqrxBLwXWkXu7af1de6MQ1YpYvMRIB2Nh+n8ns0SAcJ5+F+zLLgTHav+HHZb
cJ+7IgWWUJ21YNS/nNAED1UtCow/GZjitB3JAg07NlwrfXdI4sUPAEJAtTFVwOyt
hY8Irj+XIkM5kg5j4maF2ko7UE0CxlS+J8XDFzA9auB2vNj0gRirCjTQoXcGSNDf
05ZHjsO0dnz5i5McHKxGh9IXKFQwHYCPm2kyLanWnPYEfV4EieE1TLvjWqRkz9hF
O6kwIWRZunvUGwME9eRc13mt1p5cfqM7rVU3MVWIKZx1df+Km+z+aum4nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIaoKEIuw+TQgWapoZ7AfOq/7QB5MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvaHFnb1FpN0Q1TkNCWnFtaG5zQjg2cl90QUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPdwMA0G
CSqGSIb3DQEBCwUAA4IBAQBjZ7i9YOGRzlsJxP23w1XD+MB5piWqVxjr4TvLiL6H
wmn+1KLmcqsrtsgFlU5ESJseMtE86mpgSHq/2TMpMwdT6xjEBNxCmLAxqxq6148z
8vAobjt7PEK5NAzAcRDDPYX+Ig3tsbnU101XQQDGRNL+jdleRFoYQpWzValYWi+A
D7fUdk9DNWABjeAOkpQJbr/vNk88RvociwT12hY4mf7j10RoxYGnwxr+q/L4XtOJ
6WfRqcsCW7tnFOvfSDtvTO5N1Ecm7/Z0mYRLlPXHL+TEiQkI2IvtFBST917v7bv2
0p2RDqy6tJLcTOrlP18UMdXF2+0pLx3zuTeVG1ISIn9v
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:29 2025 by rpki-client