Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/HP2XU4ErP340JMFJBkwhXt7RSkM.roa
File: HP2XU4ErP340JMFJBkwhXt7RSkM.roa (raw, json)
Hash identifier: jqU/k+IA4J2nUGc2ePon/4S6+Kq7gFeDjcwyWdzFAK4=
Subject key identifier: 1C:FD:97:53:81:2B:3F:7E:34:24:C1:49:06:4C:21:5E:DE:D1:4A:43
Certificate issuer: /CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Certificate serial: 019421440B2A02A42A1F3EEBDB925BEB4367
Authority key identifier: D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/HP2XU4ErP340JMFJBkwhXt7RSkM.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 176.105.236.0/24 maxlen: 24
176.105.237.0/24 maxlen: 24
176.105.238.0/24 maxlen: 24
176.105.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0b:2a:02:a4:2a:1f:3e:eb:db:92:5b:eb:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cfd9753812b3f7e3424c149064c215eded14a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:e0:09:14:70:cc:c1:49:2e:13:aa:69:72:
2d:00:8c:c0:30:c7:c9:48:02:e3:fc:cf:65:f4:18:
4c:c1:f6:c3:b0:8a:9d:3d:92:0c:11:2c:0e:06:a6:
23:08:e1:7a:17:d5:7a:f2:25:92:fd:e5:5f:d5:c1:
96:62:a7:9d:dd:3d:e0:03:d7:bc:ce:68:73:cf:85:
17:c7:a1:4d:fe:11:80:03:a2:27:7c:16:c9:1a:3c:
09:85:a0:b3:33:8a:e2:36:8f:54:b3:7c:f1:df:8f:
b8:8b:14:79:a7:f3:24:90:13:37:d6:38:de:22:47:
d8:df:6f:76:cd:ec:e2:66:b3:fb:26:82:db:51:7c:
84:aa:0e:ad:3a:1c:68:b1:4e:81:70:f3:75:59:6d:
c1:48:a2:40:f3:55:b1:b8:7b:a2:ce:c5:70:e6:d1:
b5:10:83:7b:38:48:bc:3b:18:66:cc:f8:bd:cb:d2:
49:ed:b6:40:37:e0:04:a0:f9:5c:da:13:37:55:41:
e5:c4:af:56:4d:4c:b7:cb:27:4c:e1:48:88:7e:d0:
e0:fa:db:05:46:65:cf:98:de:cb:98:8a:9e:d4:34:
dc:b8:ea:0d:4b:1c:e7:53:88:b1:0e:c1:f1:59:1f:
74:77:22:b9:37:30:a7:3e:e4:f6:b0:5c:3b:e6:56:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:97:53:81:2B:3F:7E:34:24:C1:49:06:4C:21:5E:DE:D1:4A:43
X509v3 Authority Key Identifier:
keyid:D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/HP2XU4ErP340JMFJBkwhXt7RSkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:ac:80:26:e3:4c:bc:2a:ec:3a:a2:1c:dd:58:d7:31:57:29:
23:c0:f8:24:f2:d0:58:7c:16:b2:be:0a:43:f5:f3:a6:ff:59:
b4:23:e8:eb:48:b8:ec:b9:6b:1f:32:0e:65:bc:ed:93:9a:16:
6e:0c:c6:ae:de:99:2e:ab:e6:0f:e9:9b:36:c7:34:4c:3e:36:
17:5b:54:07:39:80:65:67:be:11:96:5a:3c:9c:a6:3c:2d:68:
04:05:24:86:d5:8d:22:ea:e1:64:1d:76:82:2a:0c:23:a7:14:
44:f6:41:db:40:a7:13:1b:c8:3b:42:be:12:6c:42:77:1d:3c:
08:70:4b:9c:61:59:fd:8f:b7:27:ce:9a:8f:87:46:b3:d0:a5:
76:20:fc:12:84:9d:dc:58:e6:bc:7a:c5:b0:2b:81:1e:7b:b5:
a1:95:b3:cf:35:03:55:b4:9d:4d:61:ba:75:c1:4b:cb:bc:34:
8e:66:cb:68:88:5e:9f:10:cf:4f:83:f3:18:14:ca:46:a6:b2:
84:83:5b:3e:f2:62:63:c1:10:1e:28:22:06:d8:ad:48:ac:98:
9c:61:79:26:4a:d0:3d:46:fb:c3:a4:5e:92:42:7c:46:3d:ea:
3d:ad:80:ba:89:a8:ca:55:a3:3e:96:7e:2a:53:76:ec:c2:d6:
6d:b3:12:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRAsqAqQqHz7r25Jb60NnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTg1ODQ3Y2M0NGI4NjEwMjI3MGJiZDc2OGU0YzNjZWJh
MWM5ODgwHhcNMjUwMTAxMDk0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2ZkOTc1MzgxMmIzZjdlMzQyNGMxNDkwNjRjMjE1ZWRlZDE0YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXfgCRRwzMFJLhOqaXItAIzAMMfJ
SALj/M9l9BhMwfbDsIqdPZIMESwOBqYjCOF6F9V68iWS/eVf1cGWYqed3T3gA9e8
zmhzz4UXx6FN/hGAA6InfBbJGjwJhaCzM4riNo9Us3zx34+4ixR5p/MkkBM31jje
IkfY3292zeziZrP7JoLbUXyEqg6tOhxosU6BcPN1WW3BSKJA81WxuHuizsVw5tG1
EIN7OEi8OxhmzPi9y9JJ7bZAN+AEoPlc2hM3VUHlxK9WTUy3yydM4UiIftDg+tsF
RmXPmN7LmIqe1DTcuOoNSxznU4ixDsHxWR90dyK5NzCnPuT2sFw75laUTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBz9l1OBKz9+NCTBSQZMIV7e0UpDMB8GA1UdIwQY
MBaAFNXoWEfMRLhhAicLvXaOTDzrocmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVoWVI4eEV1R0VDSnd1OWRvNU1QT3VoeVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84M2Y5NTYtZTE4ZC00NzM4LWJkNmEt
NzI5YzBmNDM0MTRkLzEvSFAyWFU0RXJQMzQwSk1GSkJrd2hYdDdSU2tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84M2Y5NTYtZTE4ZC00NzM4LWJkNmEtNzI5YzBmNDM0MTRk
LzEvMWVoWVI4eEV1R0VDSnd1OWRvNU1QT3VoeVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsGnsMA0G
CSqGSIb3DQEBCwUAA4IBAQBNrIAm40y8Kuw6ohzdWNcxVykjwPgk8tBYfBayvgpD
9fOm/1m0I+jrSLjsuWsfMg5lvO2TmhZuDMau3pkuq+YP6Zs2xzRMPjYXW1QHOYBl
Z74Rllo8nKY8LWgEBSSG1Y0i6uFkHXaCKgwjpxRE9kHbQKcTG8g7Qr4SbEJ3HTwI
cEucYVn9j7cnzpqPh0az0KV2IPwShJ3cWOa8esWwK4Eee7WhlbPPNQNVtJ1NYbp1
wUvLvDSOZstoiF6fEM9Pg/MYFMpGprKEg1s+8mJjwRAeKCIG2K1IrJicYXkmStA9
RvvDpF6SQnxGPeo9rYC6iajKVaM+ln4qU3bswtZtsxIk
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:02 2025 by rpki-client