Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/HQ3yZskbutSTJWROGTuEMeM34RI.roa
File: HQ3yZskbutSTJWROGTuEMeM34RI.roa (raw, json)
Hash identifier: MTg4/dDmjzU3m207Y7TsV6esHh4FAjCT6hXPpaJPchM=
Subject key identifier: 1D:0D:F2:66:C9:1B:BA:D4:93:25:64:4E:19:3B:84:31:E3:37:E1:12
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB22A523CEFEA12E81F4E8A6F1733
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/HQ3yZskbutSTJWROGTuEMeM34RI.roa
Signing time: Thu 02 Jan 2025 07:48:25 +0000
ROA not before: Thu 02 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197474
IP address blocks: 77.79.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b2:2a:52:3c:ef:ea:12:e8:1f:4e:8a:6f:17:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d0df266c91bbad49325644e193b8431e337e112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:bd:70:a4:55:fc:4c:de:e9:9a:6b:51:45:
4e:08:64:2a:19:47:ae:ef:86:9d:30:f1:95:6b:1f:
fc:07:05:e2:5e:39:d4:9a:01:83:a8:3e:3d:ed:cc:
af:1c:bf:2c:69:f1:45:3f:a8:51:fa:55:e7:0b:89:
5e:fe:48:38:12:95:63:30:ff:6f:af:40:c4:5a:37:
da:06:d3:ae:1c:a6:2c:4d:3b:aa:bf:90:ce:f8:16:
15:a7:36:f4:75:3e:e9:e4:8e:ec:4e:c5:8a:8f:14:
eb:5b:8b:73:5a:b1:93:54:c7:f2:c2:61:17:a3:2d:
62:21:ec:2d:a0:2b:d2:5b:72:98:fe:ce:e8:4c:66:
6f:47:ea:85:0c:1b:48:f2:e6:e7:d2:50:29:0d:5b:
68:7a:3a:94:7b:e7:74:16:cb:7b:f3:ae:3d:e8:7e:
df:ff:af:1b:35:3c:fd:88:97:5f:b3:1d:62:5f:e1:
dc:6a:62:92:d9:ef:20:04:84:da:e8:27:29:65:2e:
29:f7:dd:29:20:da:ed:5f:db:b5:84:6a:48:65:da:
77:78:b5:7d:9e:6d:c2:b3:7c:8b:de:8f:11:10:37:
cf:ad:26:ba:f1:75:3a:e2:be:39:84:82:ef:7a:b5:
28:7b:67:14:8f:48:62:b5:34:11:6d:36:29:d1:cf:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:F2:66:C9:1B:BA:D4:93:25:64:4E:19:3B:84:31:E3:37:E1:12
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/HQ3yZskbutSTJWROGTuEMeM34RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.230.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:b6:05:95:b6:b9:8a:81:88:19:52:1f:fc:1d:e8:b1:6e:a8:
9b:80:6a:d2:56:93:a6:2a:2f:6a:dd:f5:21:2f:5d:60:d6:3f:
56:85:e0:a9:ea:1f:8b:5f:b3:af:fb:fa:e4:5e:fd:b3:7f:c6:
ee:85:42:34:ee:23:8a:24:9f:cc:fd:03:2f:3d:a1:f3:81:87:
ce:2f:f3:1c:53:8f:1a:37:d4:e0:be:5a:7d:21:77:48:61:1d:
ba:16:69:ee:e9:52:d7:b1:bd:cb:e9:61:2f:0e:c6:8d:70:eb:
12:e2:53:c2:d1:db:af:b7:40:70:49:1e:56:32:77:16:4e:80:
a5:43:cb:b4:ee:b3:e3:fe:a1:94:57:d0:34:21:27:c1:02:4d:
97:af:e0:85:8a:5d:54:e0:90:54:ef:b6:ca:0b:df:79:e4:ae:
86:ff:13:24:41:15:d4:57:a2:c5:9c:bf:a6:79:64:45:aa:77:
0a:11:4c:b4:54:03:b8:f0:7d:fa:7e:4b:e2:b0:4f:d7:f8:13:
13:58:85:c0:9b:25:f7:91:66:ec:c6:05:aa:cc:b3:00:1d:69:
20:d4:1e:fc:85:8c:5d:f3:eb:df:b3:bb:cb:fa:3d:7f:f1:30:
5d:a2:fc:e3:80:87:51:3e:13:b2:f7:1a:15:a1:80:4c:33:02:
f4:2a:59:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/LIqUjzv6hLoH06KbxczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjUwMTAyMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDBkZjI2NmM5MWJiYWQ0OTMyNTY0NGUxOTNiODQzMWUzMzdlMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2We9cKRV/Eze6ZprUUVOCGQqGUeu
74adMPGVax/8BwXiXjnUmgGDqD497cyvHL8safFFP6hR+lXnC4le/kg4EpVjMP9v
r0DEWjfaBtOuHKYsTTuqv5DO+BYVpzb0dT7p5I7sTsWKjxTrW4tzWrGTVMfywmEX
oy1iIewtoCvSW3KY/s7oTGZvR+qFDBtI8ubn0lApDVtoejqUe+d0Fst786496H7f
/68bNTz9iJdfsx1iX+HcamKS2e8gBITa6CcpZS4p990pINrtX9u1hGpIZdp3eLV9
nm3Cs3yL3o8REDfPrSa68XU64r45hILverUoe2cUj0hitTQRbTYp0c/BJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0N8mbJG7rUkyVkThk7hDHjN+ESMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvSFEzeVpza2J1dFNUSldST0dUdUVNZU0zNFJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTU/mMA0G
CSqGSIb3DQEBCwUAA4IBAQCrtgWVtrmKgYgZUh/8HeixbqibgGrSVpOmKi9q3fUh
L11g1j9WheCp6h+LX7Ov+/rkXv2zf8buhUI07iOKJJ/M/QMvPaHzgYfOL/McU48a
N9Tgvlp9IXdIYR26Fmnu6VLXsb3L6WEvDsaNcOsS4lPC0duvt0BwSR5WMncWToCl
Q8u07rPj/qGUV9A0ISfBAk2Xr+CFil1U4JBU77bKC9955K6G/xMkQRXUV6LFnL+m
eWRFqncKEUy0VAO48H36fkvisE/X+BMTWIXAmyX3kWbsxgWqzLMAHWkg1B78hYxd
8+vfs7vL+j1/8TBdovzjgIdRPhOy9xoVoYBMMwL0KlkO
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:05 2025 by rpki-client