Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Hgs-lk3hdjQdP5BwMBxtPrmQBnM.roa
File: Hgs-lk3hdjQdP5BwMBxtPrmQBnM.roa (raw, json)
Hash identifier: bo2BZ/P1Ez/XwKsDMbSlpCiJ8f700KUghZsQ6E80pQQ=
Subject key identifier: 1E:0B:3E:96:4D:E1:76:34:1D:3F:90:70:30:1C:6D:3E:B9:90:06:73
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA76C0DA7FD1995FB63D19C073692C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Hgs-lk3hdjQdP5BwMBxtPrmQBnM.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 24
62.3.50.0/24 maxlen: 24
194.28.98.0/23 maxlen: 24
2a0c:b640::/32 maxlen: 48
2a0c:b641::/44 maxlen: 48
2a0c:b641:10::/44 maxlen: 48
2a0c:b641:50::/44 maxlen: 48
2a0c:b641:60::/44 maxlen: 48
2a0c:b641:530::/44 maxlen: 48
2a0c:b641:540::/44 maxlen: 48
2a0c:b641:70f::/48 maxlen: 48
2a0c:b641:820::/44 maxlen: 48
2a0d:ef07::/32 maxlen: 48
2a0f:8400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:c0:da:7f:d1:99:5f:b6:3d:19:c0:73:69:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0b3e964de176341d3f9070301c6d3eb9900673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:d7:24:fd:51:7b:a4:54:5c:50:42:20:87:
58:28:70:5f:42:0a:71:0f:0c:d9:32:99:3e:cf:43:
6b:ab:92:76:a8:26:a2:31:c9:66:c8:1e:3a:7d:95:
de:2a:ea:f6:87:2d:a8:70:55:20:29:7b:c8:a3:cf:
d6:5d:0d:2f:16:6b:f2:73:d3:eb:de:09:7a:2a:62:
48:b8:2e:e7:39:84:68:8e:37:12:37:47:18:cf:f1:
0a:de:9c:fe:4c:20:29:fa:fa:13:27:c4:6f:73:15:
53:0e:e8:e4:52:15:de:e3:ce:9a:db:a1:f7:bf:0d:
5c:e9:04:b2:78:8d:2c:c1:2a:1a:86:3b:ec:fe:53:
64:8e:bd:d6:59:38:6b:6b:93:84:b9:30:a3:ce:9a:
a9:8f:b2:24:65:64:ae:1c:bf:8e:8e:c5:c7:b7:c4:
4b:a0:e7:a4:2e:2c:f3:e0:df:bb:26:29:cb:d8:d0:
eb:7c:8c:b2:54:9e:27:43:b3:e2:71:77:15:fe:85:
91:be:27:92:56:66:a9:d0:90:96:db:cd:d8:31:9e:
4e:14:31:de:ce:a9:25:16:e7:c6:bb:b9:bd:ec:7a:
6f:24:71:eb:ef:bf:68:86:8d:5b:97:ed:11:a6:c9:
9e:16:37:13:9b:7d:bf:c4:b4:a0:89:d5:0e:6f:36:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0B:3E:96:4D:E1:76:34:1D:3F:90:70:30:1C:6D:3E:B9:90:06:73
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Hgs-lk3hdjQdP5BwMBxtPrmQBnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
62.3.50.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::-2a0c:b641:54f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:70f::/48
2a0c:b641:820::/44
2a0d:ef07::/32
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
13:9d:4b:c4:fe:89:06:3f:57:07:77:44:b8:87:68:57:5f:1f:
ed:a1:4a:4d:ef:33:93:c1:5e:44:83:bd:60:0f:8f:4a:ff:73:
59:5e:9c:55:0a:54:b4:d3:df:8e:bb:5f:49:52:7d:c2:0f:f3:
e5:96:07:73:77:e7:6d:4a:ef:09:c1:a6:4e:c6:0e:87:a0:7d:
07:5c:3a:72:a2:3f:38:24:57:d2:aa:ed:ce:82:91:2d:5a:c0:
fe:e8:02:cf:dc:ae:2b:cc:01:15:d7:ff:12:19:55:4f:3c:b6:
b3:db:e4:72:f6:38:a7:31:4e:bb:15:ae:9a:d8:4b:9b:bb:4c:
f9:cb:b8:bc:be:33:61:b7:cf:e8:03:48:77:f7:79:87:75:11:
f4:52:d8:a0:24:d2:c4:ad:73:33:25:c6:e1:cf:1e:09:a2:29:
2b:9f:56:3c:33:1f:98:06:a6:e2:48:c3:28:de:76:a9:36:59:
b7:bb:21:8e:2a:28:94:af:93:92:97:a8:2d:29:30:e2:5c:40:
c4:a6:07:b1:bd:f8:44:bb:38:6a:a3:72:e3:9d:e0:f5:e5:1e:
56:47:8b:0b:01:87:6b:75:e7:f9:6c:cd:67:20:0a:f7:b9:6f:
92:41:cd:2f:5d:10:09:6f:20:d9:6a:3d:c3:e5:23:8b:5a:24:
29:c1:38:be
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZQf+nbA2n/RmV+2PRnAc2ksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTBiM2U5NjRkZTE3NjM0MWQzZjkwNzAzMDFjNmQzZWI5OTAwNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosXXJP1Re6RUXFBCIIdYKHBfQgpx
DwzZMpk+z0Nrq5J2qCaiMclmyB46fZXeKur2hy2ocFUgKXvIo8/WXQ0vFmvyc9Pr
3gl6KmJIuC7nOYRojjcSN0cYz/EK3pz+TCAp+voTJ8RvcxVTDujkUhXe486a26H3
vw1c6QSyeI0swSoahjvs/lNkjr3WWThra5OEuTCjzpqpj7IkZWSuHL+OjsXHt8RL
oOekLizz4N+7JinL2NDrfIyyVJ4nQ7PicXcV/oWRvieSVmap0JCW283YMZ5OFDHe
zqklFufGu7m97HpvJHHr779oho1bl+0RpsmeFjcTm32/xLSgidUObzahHQIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFB4LPpZN4XY0HT+QcDAcbT65kAZzMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvSGdzLWxrM2hkalFkUDVCd01CeHRQcm1RQm5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwGAQCAAEwEgMEAC2aYQME
AD4DMgMEAcIcYjBgBAIAAjBaMBADBQYqDLZAAwcFKgy2QQAAMBIDBwQqDLZBAFAD
BwQqDLZBAGAwEgMHBCoMtkEFMAMHBCoMtkEFQAMHACoMtkEHDwMHBCoMtkEIIAMF
ACoN7wcDBQAqD4QAMA0GCSqGSIb3DQEBCwUAA4IBAQATnUvE/okGP1cHd0S4h2hX
Xx/toUpN7zOTwV5Eg71gD49K/3NZXpxVClS009+Ou19JUn3CD/Pllgdzd+dtSu8J
waZOxg6HoH0HXDpyoj84JFfSqu3OgpEtWsD+6ALP3K4rzAEV1/8SGVVPPLaz2+Ry
9jinMU67Fa6a2Eubu0z5y7i8vjNht8/oA0h393mHdRH0UtigJNLErXMzJcbhzx4J
oikrn1Y8Mx+YBqbiSMMo3napNlm3uyGOKiiUr5OSl6gtKTDiXEDEpgexvfhEuzhq
o3LjneD15R5WR4sLAYdrdef5bM1nIAr3uW+SQc0vXRAJbyDZaj3D5SOLWiQpwTi+
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:45 2025 by rpki-client