Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa
File: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (raw, json)
Hash identifier: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=
Subject key identifier: 85:A8:DB:2A:5D:7A:0B:2E:13:76:AF:F0:80:89:3B:ED:5C:53:FF:A4
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019504B4A6DAB07548E2275F7C540BF4D52C
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa
Signing time: Fri 14 Feb 2025 13:45:02 +0000
ROA not before: Fri 14 Feb 2025 13:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44056
IP address blocks: 195.244.24.0/23 maxlen: 23
195.244.24.0/24 maxlen: 24
195.244.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:b4:a6:da:b0:75:48:e2:27:5f:7c:54:0b:f4:d5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Feb 14 13:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85a8db2a5d7a0b2e1376aff080893bed5c53ffa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:90:09:d4:c4:d9:df:b1:24:ea:b8:3e:88:
74:8c:57:49:be:04:15:e3:ef:74:8d:e3:59:10:9e:
07:9c:61:79:c1:99:f9:51:df:a0:6c:fe:00:af:0c:
15:93:69:ae:27:aa:a8:f1:e2:de:7b:ad:a4:42:a5:
c2:b2:46:42:fb:08:ab:c7:bf:80:36:c2:3c:9f:97:
1e:18:e9:67:d2:ba:e1:57:38:0d:89:b4:67:fb:dc:
fd:05:2f:ae:10:bf:cc:86:66:4c:3d:6e:3f:69:29:
9a:af:f7:06:68:3d:c2:81:49:54:82:e2:bf:28:c6:
c5:0a:e1:91:cf:ac:e0:c9:77:11:aa:79:ea:28:0d:
60:be:97:67:41:e1:5e:fd:c6:d7:c0:89:d1:0c:d7:
23:0c:49:48:9b:ac:54:2f:df:cb:e8:ca:b3:c1:f8:
7c:e9:0a:31:10:ab:6d:61:13:33:f0:ca:93:73:99:
0e:df:62:06:d1:a0:17:db:98:1c:42:60:92:30:74:
c3:1b:2c:7f:d4:6d:fb:4b:82:aa:1a:52:6a:28:5d:
35:d4:9c:2b:fe:55:ba:8a:94:80:17:8b:31:5e:89:
de:cb:31:61:27:58:fc:6e:03:5a:39:f2:8c:02:51:
7c:5c:fc:9b:bd:08:cb:ec:11:ea:b8:c4:76:d4:b4:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:DB:2A:5D:7A:0B:2E:13:76:AF:F0:80:89:3B:ED:5C:53:FF:A4
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.24.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:31:27:35:ed:9e:f7:cc:18:ff:01:ad:9e:14:0f:dc:20:88:
33:63:5c:8b:04:ae:48:d4:f3:c1:b1:7a:54:4d:72:58:d0:70:
db:33:68:ba:54:61:a5:72:c2:7d:fd:22:95:f4:63:c8:a8:9f:
53:f1:79:99:af:e3:a3:6e:57:83:61:80:be:b9:6e:82:5e:54:
3e:a0:63:12:50:b5:56:c2:93:f3:29:32:51:8a:fe:7e:46:12:
80:86:09:c3:e2:9b:47:cb:d0:ce:e3:50:44:bf:f5:35:f9:2e:
9e:fe:f5:c9:c1:50:30:ea:c4:62:4c:a8:e3:2a:38:8b:dc:bb:
70:80:6a:18:f1:80:cb:6f:81:74:ef:d1:8d:57:a8:70:f5:c0:
2f:56:0b:c1:c3:d2:b9:7d:5b:67:b5:3c:71:1b:9b:2f:d2:fb:
37:de:76:29:54:42:fe:09:31:2e:8a:97:89:f6:91:70:20:0e:
85:02:05:6c:10:c3:9a:35:20:1f:01:73:c7:09:40:5b:63:25:
25:5e:9e:9e:a7:24:3b:75:33:59:99:fd:40:f7:5b:d0:5b:d0:
72:ad:13:ee:bd:fd:e3:42:bf:fa:43:e0:4f:a4:68:3f:af:87:
ae:55:ff:0f:36:d5:4e:4b:4b:71:f7:9e:27:4c:af:9b:de:0d:
73:8d:a8:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUEtKbasHVI4idffFQL9NUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw
ZTJhNjcwHhcNMjUwMjE0MTM0NTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWE4ZGIyYTVkN2EwYjJlMTM3NmFmZjA4MDg5M2JlZDVjNTNmZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm+QCdTE2d+xJOq4Poh0jFdJvgQV
4+90jeNZEJ4HnGF5wZn5Ud+gbP4ArwwVk2muJ6qo8eLee62kQqXCskZC+wirx7+A
NsI8n5ceGOln0rrhVzgNibRn+9z9BS+uEL/MhmZMPW4/aSmar/cGaD3CgUlUguK/
KMbFCuGRz6zgyXcRqnnqKA1gvpdnQeFe/cbXwInRDNcjDElIm6xUL9/L6Mqzwfh8
6QoxEKttYRMz8MqTc5kO32IG0aAX25gcQmCSMHTDGyx/1G37S4KqGlJqKF011Jwr
/lW6ipSAF4sxXoneyzFhJ1j8bgNaOfKMAlF8XPybvQjL7BHquMR21LTnLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWo2ypdegsuE3av8ICJO+1cU/+kMB8GA1UdIwQY
MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct
MjgyOGM0OGUzNTk5LzEvaGFqYktsMTZDeTRUZHFfd2dJazc3VnhUXzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5
LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QYMA0G
CSqGSIb3DQEBCwUAA4IBAQC1MSc17Z73zBj/Aa2eFA/cIIgzY1yLBK5I1PPBsXpU
TXJY0HDbM2i6VGGlcsJ9/SKV9GPIqJ9T8XmZr+OjbleDYYC+uW6CXlQ+oGMSULVW
wpPzKTJRiv5+RhKAhgnD4ptHy9DO41BEv/U1+S6e/vXJwVAw6sRiTKjjKjiL3Ltw
gGoY8YDLb4F079GNV6hw9cAvVgvBw9K5fVtntTxxG5sv0vs33nYpVEL+CTEuipeJ
9pFwIA6FAgVsEMOaNSAfAXPHCUBbYyUlXp6epyQ7dTNZmf1A91vQW9ByrRPuvf3j
Qr/6Q+BPpGg/r4euVf8PNtVOS0tx954nTK+b3g1zjah4
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:40 2025 by rpki-client