Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/HvZFP08B7xYA2IQmujw7UzbkG0Q.roa
File: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (raw, json)
Hash identifier: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=
Subject key identifier: 1E:F6:45:3F:4F:01:EF:16:00:D8:84:26:BA:3C:3B:53:36:E4:1B:44
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019423D6F907688B660511EBAE1352389B85
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/HvZFP08B7xYA2IQmujw7UzbkG0Q.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215879
IP address blocks: 193.29.144.0/23 maxlen: 23
193.29.144.0/24 maxlen: 24
193.29.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f9:07:68:8b:66:05:11:eb:ae:13:52:38:9b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ef6453f4f01ef1600d88426ba3c3b5336e41b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:4b:49:6f:38:ab:db:9e:4c:7f:74:31:7c:
0a:e5:4a:66:58:07:c1:8a:61:90:da:1d:45:16:1e:
ef:07:33:25:ac:88:93:e8:92:da:89:61:ce:ee:03:
ec:f7:0d:fb:4a:f6:16:97:49:6d:d7:ef:5b:be:1d:
03:cf:60:c2:56:30:f3:f8:d4:5b:f9:bd:84:5d:3c:
26:66:d5:8b:e7:91:55:4c:48:11:23:e8:84:78:ff:
08:ee:83:e3:3f:a4:b2:8f:9d:ef:68:c4:40:b4:42:
bc:5a:ff:ca:ff:a8:32:56:2d:2c:62:e9:9b:35:a4:
37:ed:87:fb:9b:0d:52:30:2b:3a:52:2a:96:60:5a:
d5:e8:e8:8f:1d:16:64:45:d1:94:3d:af:47:49:e7:
66:7f:b6:b2:69:7a:ce:9b:e4:ce:3b:40:e8:02:f2:
10:a1:99:6a:c9:92:2a:c8:30:b0:8c:3f:38:d2:70:
85:df:7e:14:0a:da:0d:a6:0e:e9:db:d0:2a:62:1d:
0a:6a:2c:42:a9:7d:9b:12:9e:43:dc:fa:e4:51:65:
55:6c:dd:a6:50:b7:6a:16:ac:c8:fe:31:fd:7b:4d:
87:6e:01:e3:6a:e2:62:1b:88:74:f0:2d:e0:4b:b6:
d4:63:5b:93:ec:1a:ea:bb:1d:e0:5b:35:1b:59:b1:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:45:3F:4F:01:EF:16:00:D8:84:26:BA:3C:3B:53:36:E4:1B:44
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/HvZFP08B7xYA2IQmujw7UzbkG0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.144.0/23
Signature Algorithm: sha256WithRSAEncryption
72:c6:d7:0e:af:7f:84:98:bc:42:ab:f2:50:ab:b5:3b:c6:a5:
c6:94:6e:db:91:57:28:5f:1f:3f:dc:83:69:0c:b5:96:66:43:
1a:d3:04:d5:35:39:74:4d:f7:c1:c8:e2:2d:d7:f5:97:7a:eb:
06:a3:8a:fe:9b:6b:a3:bb:5a:97:48:1a:6d:41:ba:51:4f:7a:
88:08:ef:74:42:c8:22:e2:f0:a9:a0:1b:b3:66:b0:fb:71:0c:
97:ce:fe:9d:22:8f:a7:6a:50:de:bb:a4:4b:33:a3:fa:e7:62:
89:b4:40:81:4b:13:6a:6c:da:dc:1c:67:ad:c4:65:52:33:c1:
64:87:0f:73:fe:14:1a:8c:e9:86:8b:3d:84:77:4b:58:f7:97:
6a:a4:6c:ca:0b:82:8a:bb:3a:37:f6:85:e4:29:17:05:2c:36:
f6:31:e6:ee:92:51:04:a0:5c:35:93:7e:05:02:cd:37:be:98:
ae:bd:c4:35:a8:8c:67:06:be:23:58:74:45:b5:2f:c5:2f:05:
18:24:35:2c:16:93:ff:8e:88:80:f5:17:b1:1d:16:2f:5d:9c:
b2:89:04:9d:83:db:bc:0c:20:2e:22:8f:97:ba:cd:ca:5f:10:
bb:b6:8b:26:34:49:e9:c9:60:61:15:b0:d2:a4:e0:57:91:e0:
66:9e:ef:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1vkHaItmBRHrrhNSOJuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj
NDAxZWQwHhcNMjUwMTAxMjE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWY2NDUzZjRmMDFlZjE2MDBkODg0MjZiYTNjM2I1MzM2ZTQxYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUZLSW84q9ueTH90MXwK5UpmWAfB
imGQ2h1FFh7vBzMlrIiT6JLaiWHO7gPs9w37SvYWl0lt1+9bvh0Dz2DCVjDz+NRb
+b2EXTwmZtWL55FVTEgRI+iEeP8I7oPjP6Syj53vaMRAtEK8Wv/K/6gyVi0sYumb
NaQ37Yf7mw1SMCs6UiqWYFrV6OiPHRZkRdGUPa9HSedmf7ayaXrOm+TOO0DoAvIQ
oZlqyZIqyDCwjD840nCF334UCtoNpg7p29AqYh0KaixCqX2bEp5D3PrkUWVVbN2m
ULdqFqzI/jH9e02HbgHjauJiG4h08C3gS7bUY1uT7Brqux3gWzUbWbFktwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB72RT9PAe8WANiEJro8O1M25BtEMB8GA1UdIwQY
MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt
ZGRiMGIxNDhlNDZiLzEvSHZaRlAwOEI3eFlBMklRbXVqdzdVemJrRzBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi
LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR2QMA0G
CSqGSIb3DQEBCwUAA4IBAQByxtcOr3+EmLxCq/JQq7U7xqXGlG7bkVcoXx8/3INp
DLWWZkMa0wTVNTl0TffByOIt1/WXeusGo4r+m2uju1qXSBptQbpRT3qICO90Qsgi
4vCpoBuzZrD7cQyXzv6dIo+nalDeu6RLM6P652KJtECBSxNqbNrcHGetxGVSM8Fk
hw9z/hQajOmGiz2Ed0tY95dqpGzKC4KKuzo39oXkKRcFLDb2MebuklEEoFw1k34F
As03vpiuvcQ1qIxnBr4jWHRFtS/FLwUYJDUsFpP/joiA9RexHRYvXZyyiQSdg9u8
DCAuIo+Xus3KXxC7tosmNEnpyWBhFbDSpOBXkeBmnu/V
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:04:26 2025 by rpki-client