Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/HJRU5cMNQsyfexsuT7DhP5zx3pk.roa
File: HJRU5cMNQsyfexsuT7DhP5zx3pk.roa (raw, json)
Hash identifier: +Ds+sccC3Y4+UeaZx0qW8fIaYz2RCL5Up0qqonNY9zE=
Subject key identifier: 1C:94:54:E5:C3:0D:42:CC:9F:7B:1B:2E:4F:B0:E1:3F:9C:F1:DE:99
Certificate issuer: /CN=fe207422e1efb3cb87c250c446ec22a1753ffc50
Certificate serial: 0396AE38
Authority key identifier: FE:20:74:22:E1:EF:B3:CB:87:C2:50:C4:46:EC:22:A1:75:3F:FC:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iB0IuHvs8uHwlDERuwioXU__FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/HJRU5cMNQsyfexsuT7DhP5zx3pk.roa
Signing time: Sat 01 Jan 2022 06:06:21 +0000
ROA not before: Sat 01 Jan 2022 06:06:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39728
IP address blocks: 194.31.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60206648 (0x396ae38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe207422e1efb3cb87c250c446ec22a1753ffc50
Validity
Not Before: Jan 1 06:06:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c9454e5c30d42cc9f7b1b2e4fb0e13f9cf1de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:32:45:9c:b2:f2:71:f4:29:0d:6a:4a:f9:
6d:3c:e8:17:f9:50:3d:bd:47:58:f5:5c:33:27:c7:
87:73:7e:a4:d8:47:9c:54:93:e9:e5:12:80:93:61:
37:b1:2a:60:d1:1c:87:5b:a7:0b:cc:3d:f7:49:0f:
27:1a:a6:a0:6a:b2:74:a3:56:42:83:55:a3:0d:4c:
78:d6:b4:24:88:2f:f4:be:b4:0e:fe:9c:30:ab:8e:
47:67:ef:86:86:58:0a:25:30:ca:cc:c6:d9:69:25:
20:21:0a:70:b5:87:b2:4e:20:6e:37:e3:2d:bf:70:
cc:2e:4f:32:a8:ab:0b:92:82:f9:73:2d:e1:86:db:
3c:ef:d6:57:c6:d0:c0:84:ba:a4:42:31:89:cc:b4:
e5:e7:7f:25:e4:b1:a1:92:a8:cc:5b:f7:9a:d4:25:
bd:3a:c9:b0:5d:b1:02:74:80:ad:31:a2:2e:82:cf:
da:fd:05:1e:db:3f:8d:0d:ef:46:21:89:9e:db:14:
1c:ce:a8:ad:74:79:e3:51:6b:5c:17:a1:89:b4:9a:
9a:14:c9:ed:89:20:0e:8a:19:66:a5:cc:f4:6c:b7:
a4:9a:e2:fb:bd:80:fa:f4:64:3b:68:7d:46:86:21:
26:27:0b:08:20:80:e2:79:ed:75:7d:c3:94:8a:b8:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:54:E5:C3:0D:42:CC:9F:7B:1B:2E:4F:B0:E1:3F:9C:F1:DE:99
X509v3 Authority Key Identifier:
keyid:FE:20:74:22:E1:EF:B3:CB:87:C2:50:C4:46:EC:22:A1:75:3F:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iB0IuHvs8uHwlDERuwioXU__FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/HJRU5cMNQsyfexsuT7DhP5zx3pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/_iB0IuHvs8uHwlDERuwioXU__FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.152.0/22
Signature Algorithm: sha256WithRSAEncryption
17:0a:50:02:96:a8:a5:74:61:46:33:23:9a:0e:0f:c7:c5:29:
60:e1:d3:8d:4b:f6:f8:13:26:8e:f2:2f:56:55:ca:83:3d:4a:
a5:83:19:5f:3a:62:70:3a:9d:92:ec:96:8c:58:c1:89:45:56:
a5:72:07:5c:e2:8b:2c:92:4e:69:d5:a7:75:56:e9:30:56:e8:
89:df:4f:ef:be:cc:27:30:ff:3b:ed:f8:de:c2:ea:13:02:c3:
3f:7b:25:e5:06:e0:92:cb:69:e9:75:7a:b9:89:5d:63:03:d7:
d6:4f:d2:d8:43:1a:a6:12:c9:32:33:e4:7d:d6:fd:7b:4f:57:
dc:4e:c3:f0:85:37:f4:57:0a:ef:d2:cc:71:38:15:6f:bb:54:
f6:8b:99:bd:4d:ce:aa:d5:54:ea:00:2e:5d:73:fc:c8:68:24:
27:d6:50:c6:bf:99:55:ab:31:8e:7e:7e:ca:fc:49:77:11:c4:
10:a5:87:9e:55:94:a1:23:85:8c:c5:ee:0b:fb:25:df:73:43:
e1:9b:0d:0e:8e:92:c9:65:e3:77:b8:37:9b:f3:3e:f9:05:9e:
12:81:21:3c:b9:6e:18:09:14:01:51:7f:36:6d:03:58:30:79:
4a:10:be:91:cb:d2:60:db:e2:90:aa:6f:cf:80:e7:ba:1d:03:
87:a2:f2:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA5auODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZTIwNzQyMmUxZWZiM2NiODdjMjUwYzQ0NmVjMjJhMTc1M2ZmYzUwMB4XDTIyMDEw
MTA2MDYyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWM5NDU0ZTVjMzBk
NDJjYzlmN2IxYjJlNGZiMGUxM2Y5Y2YxZGU5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIdjMkWcsvJx9CkNakr5bTzoF/lQPb1HWPVcMyfHh3N+pNhH
nFST6eUSgJNhN7EqYNEch1unC8w990kPJxqmoGqydKNWQoNVow1MeNa0JIgv9L60
Dv6cMKuOR2fvhoZYCiUwyszG2WklICEKcLWHsk4gbjfjLb9wzC5PMqirC5KC+XMt
4YbbPO/WV8bQwIS6pEIxicy05ed/JeSxoZKozFv3mtQlvTrJsF2xAnSArTGiLoLP
2v0FHts/jQ3vRiGJntsUHM6orXR541FrXBehibSamhTJ7YkgDooZZqXM9Gy3pJri
+72A+vRkO2h9RoYhJicLCCCA4nntdX3DlIq40rcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQclFTlww1CzJ97Gy5PsOE/nPHemTAfBgNVHSMEGDAWgBT+IHQi4e+zy4fC
UMRG7CKhdT/8UDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19pQjBJdUh2czh1SHdsREVSdXdpb1hVX19GQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNWYyZWM0LThlYWUtNDJiMS1iNzRhLTAxYWVhNGQzMDBhNi8x
L0hKUlU1Y01OUXN5ZmV4c3VUN0RoUDV6eDNway5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NWYyZWM0LThlYWUtNDJiMS1iNzRhLTAxYWVhNGQzMDBhNi8xL19pQjBJdUh2czh1
SHdsREVSdXdpb1hVX19GQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsIfmDANBgkqhkiG9w0BAQsFAAOC
AQEAFwpQApaopXRhRjMjmg4Px8UpYOHTjUv2+BMmjvIvVlXKgz1KpYMZXzpicDqd
kuyWjFjBiUVWpXIHXOKLLJJOadWndVbpMFboid9P777MJzD/O+343sLqEwLDP3sl
5Qbgkstp6XV6uYldYwPX1k/S2EMaphLJMjPkfdb9e09X3E7D8IU39FcK79LMcTgV
b7tU9ouZvU3OqtVU6gAuXXP8yGgkJ9ZQxr+ZVasxjn5+yvxJdxHEEKWHnlWUoSOF
jMXuC/sl33ND4ZsNDo6SyWXjd7g3m/M++QWeEoEhPLluGAkUAVF/Nm0DWDB5ShC+
kcvSYNvikKpvz4Dnuh0Dh6Lynw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:47 2025 by rpki-client