Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/HASJFQJ0dhUBOsyjobgHrPemYuk.roa
File: HASJFQJ0dhUBOsyjobgHrPemYuk.roa (raw, json)
Hash identifier: t2cor/choG8bzkBioIX6Z6t5j6GZXqfW3BgdsKtvgZE=
Subject key identifier: 1C:04:89:15:02:74:76:15:01:3A:CC:A3:A1:B8:07:AC:F7:A6:62:E9
Certificate issuer: /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial: 01941F8C2F3EDE9C41C36D4E8A0FBD36381F
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/HASJFQJ0dhUBOsyjobgHrPemYuk.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.56.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2f:3e:de:9c:41:c3:6d:4e:8a:0f:bd:36:38:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c04891502747615013acca3a1b807acf7a662e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:83:db:fa:ae:ce:42:e5:32:46:47:0e:1b:
7b:21:e7:b0:56:73:fd:68:d2:04:25:6d:d3:23:32:
d9:8f:3d:ae:32:85:1e:06:d7:dc:d8:52:a4:df:4f:
4f:48:c7:98:fe:e6:6d:2a:aa:71:be:1b:7b:61:2f:
43:6c:5f:95:8b:c6:83:f0:85:07:a9:03:6b:63:c9:
5d:29:1c:39:c5:36:59:e9:4d:25:b9:c0:8b:d7:54:
c7:b2:ff:21:fd:54:7b:73:89:de:04:da:5d:75:2b:
dc:68:c2:80:23:8f:ea:54:65:e8:4e:d7:13:9a:32:
da:1d:f1:2a:97:71:95:35:aa:da:c7:0d:b1:a6:22:
3a:44:ea:94:b9:b2:cc:cb:99:f6:84:62:b1:a2:e6:
02:33:82:33:c7:7c:a3:7c:b8:18:c6:d7:d1:16:6d:
77:c5:21:22:08:f2:7b:6e:15:9b:55:f9:5e:80:5b:
23:71:84:a6:6c:90:68:ef:53:83:88:9d:21:93:14:
5e:aa:0f:5b:eb:7f:9e:1f:59:06:24:08:a4:32:02:
c5:6f:d2:51:76:6f:e1:29:53:01:e4:6a:9c:2d:75:
a3:9a:2f:6f:de:37:77:ae:8f:1b:03:69:b7:e0:9e:
9f:63:73:a6:9e:d9:0a:27:76:d5:a2:82:76:5d:8c:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:89:15:02:74:76:15:01:3A:CC:A3:A1:B8:07:AC:F7:A6:62:E9
X509v3 Authority Key Identifier:
keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/HASJFQJ0dhUBOsyjobgHrPemYuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
24:c6:ae:88:40:77:3c:b2:d9:5a:8d:d8:86:df:c0:97:a7:c7:
f9:50:e8:b6:22:3a:bf:a4:1c:5a:77:7d:aa:b1:e4:1d:24:66:
c9:f9:2c:56:82:ea:e7:cf:7b:64:fb:97:8f:24:d5:62:d0:fb:
82:09:7b:85:2b:3c:8f:f4:a6:e3:ae:0d:87:cb:97:c5:1e:3b:
f7:43:83:8a:2c:08:6e:05:89:83:44:ea:7b:a6:91:2b:95:54:
ce:7f:5b:01:11:34:2b:6b:49:74:d7:a5:f2:23:84:58:a6:69:
fe:b0:2d:74:a0:ca:28:c2:4c:8c:68:4c:d5:0c:28:51:2e:18:
f7:6c:9b:56:72:05:ce:98:e3:a2:f4:fa:59:75:57:7d:f1:c0:
6b:77:10:28:a4:48:be:04:b5:7d:c1:a1:38:19:57:1b:d4:c0:
44:e9:ac:49:71:6e:48:8f:4c:9a:a1:58:58:62:ad:46:ec:45:
83:00:19:5b:6c:e3:9f:7e:bd:f1:27:79:44:57:71:02:b7:a9:
da:8e:20:3f:27:c7:2f:02:89:46:d9:ca:1c:66:da:f5:71:66:
4f:42:75:17:2a:33:b0:02:2f:02:9e:b1:3a:3e:04:f2:07:b0:
65:14:76:31:ee:7f:57:21:b7:74:b2:a9:2a:07:94:0b:d4:94:
48:85:9b:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjC8+3pxBw21Oig+9NjgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjkxNWFlM2UyMjE2YmUzMzhmNjMzNDUzMmY5MzgwY2Zk
MmY0MGEwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzA0ODkxNTAyNzQ3NjE1MDEzYWNjYTNhMWI4MDdhY2Y3YTY2MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnWD2/quzkLlMkZHDht7IeewVnP9
aNIEJW3TIzLZjz2uMoUeBtfc2FKk309PSMeY/uZtKqpxvht7YS9DbF+Vi8aD8IUH
qQNrY8ldKRw5xTZZ6U0lucCL11THsv8h/VR7c4neBNpddSvcaMKAI4/qVGXoTtcT
mjLaHfEql3GVNaraxw2xpiI6ROqUubLMy5n2hGKxouYCM4Izx3yjfLgYxtfRFm13
xSEiCPJ7bhWbVflegFsjcYSmbJBo71ODiJ0hkxReqg9b63+eH1kGJAikMgLFb9JR
dm/hKVMB5GqcLXWjmi9v3jd3ro8bA2m34J6fY3OmntkKJ3bVooJ2XYz0yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwEiRUCdHYVATrMo6G4B6z3pmLpMB8GA1UdIwQY
MBaAFFn5Fa4+Iha+M49jNFMvk4DP0vQKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZrVnJqNGlGcjR6ajJNMFV5LVRnTV9TOUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hYTIzMTEtYjFjZC00ZDE4LWFlYmIt
YTNmMjMyNGY2ZDhjLzEvSEFTSkZRSjBkaFVCT3N5am9iZ0hyUGVtWXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hYTIzMTEtYjFjZC00ZDE4LWFlYmItYTNmMjMyNGY2ZDhj
LzEvV2ZrVnJqNGlGcjR6ajJNMFV5LVRnTV9TOUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjhsMA0G
CSqGSIb3DQEBCwUAA4IBAQAkxq6IQHc8stlajdiG38CXp8f5UOi2Ijq/pBxad32q
seQdJGbJ+SxWgurnz3tk+5ePJNVi0PuCCXuFKzyP9Kbjrg2Hy5fFHjv3Q4OKLAhu
BYmDROp7ppErlVTOf1sBETQra0l016XyI4RYpmn+sC10oMoowkyMaEzVDChRLhj3
bJtWcgXOmOOi9PpZdVd98cBrdxAopEi+BLV9waE4GVcb1MBE6axJcW5Ij0yaoVhY
Yq1G7EWDABlbbOOffr3xJ3lEV3ECt6najiA/J8cvAolG2cocZtr1cWZPQnUXKjOw
Ai8CnrE6PgTyB7BlFHYx7n9XIbd0sqkqB5QL1JRIhZsy
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:23 2025 by rpki-client