Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/hacshKY0tbOUkqvYc39HoDnofn8.roa
File: hacshKY0tbOUkqvYc39HoDnofn8.roa (raw, json)
Hash identifier: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=
Subject key identifier: 85:A7:2C:84:A6:34:B5:B3:94:92:AB:D8:73:7F:47:A0:39:E8:7E:7F
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 01942143E1B8BAE66693AF238C30D9F84576
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/hacshKY0tbOUkqvYc39HoDnofn8.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9087
IP address blocks: 193.46.0.0/24 maxlen: 24
193.46.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e1:b8:ba:e6:66:93:af:23:8c:30:d9:f8:45:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85a72c84a634b5b39492abd8737f47a039e87e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:5b:3b:66:b8:9f:04:be:6a:ed:7e:c3:ce:
6f:10:1f:c4:d4:98:39:b2:db:fc:55:7b:23:84:4f:
d0:a4:16:da:e0:27:3f:d3:9e:22:2b:18:01:28:2f:
fc:de:05:f4:06:12:4a:ca:07:70:02:1c:f0:d6:ad:
14:3d:c9:b4:53:ec:5d:7e:44:d7:96:38:ca:d3:71:
74:82:15:4b:bc:15:cc:0e:bc:86:68:dd:b0:06:1e:
96:30:70:4d:c1:61:0f:9d:60:d5:bc:dc:32:9a:0c:
94:c8:bd:2e:9a:7e:ac:9e:f1:28:6a:95:5d:1d:32:
03:a6:f3:3b:6a:d7:bc:2b:0f:ca:8c:c7:22:6b:93:
14:85:62:48:db:71:db:ed:48:44:86:c4:f0:c9:b2:
ef:fe:8a:d4:4c:c2:99:d9:38:05:14:05:26:0b:b4:
9f:01:d5:9e:0d:5a:53:c1:94:30:43:a6:33:62:27:
86:8b:9e:49:7b:11:11:09:ab:45:f1:21:49:89:5f:
d3:26:ef:b1:91:cf:28:2b:49:4a:22:66:08:b2:b9:
d4:86:93:1a:1f:e2:a8:8e:3d:4b:a3:93:e5:22:80:
ff:a2:a2:7b:f1:fb:01:d1:2c:4b:98:b2:19:92:4c:
cd:6c:19:e0:c4:ee:78:6b:51:f2:0c:40:12:60:f9:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A7:2C:84:A6:34:B5:B3:94:92:AB:D8:73:7F:47:A0:39:E8:7E:7F
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/hacshKY0tbOUkqvYc39HoDnofn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.0.0/24
193.46.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a5:ea:bd:98:99:61:a5:b6:70:c3:e0:8b:55:b5:a8:6d:ac:
45:e9:a1:20:7a:43:ec:c6:d2:1a:e3:03:2f:94:88:63:ad:a8:
69:52:bd:02:69:4e:19:8d:85:77:9b:54:a8:18:da:d6:0d:e8:
dc:c5:03:bf:03:48:bd:d6:d3:ee:11:81:9e:3a:35:4e:ce:96:
83:ce:71:25:0b:ce:a2:7c:c0:de:57:73:8f:e8:28:40:1f:f8:
6f:6f:06:ac:ad:ea:01:7a:35:63:5c:16:4a:f7:c7:39:92:a7:
45:e7:27:c8:d7:fc:00:41:4a:82:46:26:bb:dc:c0:5d:6f:72:
f7:d0:e1:f2:b2:7d:9e:d6:6b:ce:cd:c8:bf:0a:97:71:e5:0b:
d4:f5:b7:cb:ff:28:97:35:28:2f:53:5c:05:21:1a:3e:45:1a:
f3:9e:9f:88:c6:58:a9:ed:b6:3e:03:ef:ae:46:f7:da:a3:52:
08:55:bf:44:02:7a:6f:6e:ec:db:9d:7e:9a:7e:fb:2e:fe:fa:
b1:17:78:a9:50:09:87:43:f1:87:cf:20:b4:ef:ad:e9:2f:ff:
42:c4:01:0b:fd:63:a5:72:54:66:8e:77:c7:e1:94:dc:6b:6c:
fc:65:f0:aa:43:1d:28:32:07:61:aa:ae:92:1f:75:ea:2f:c0:
66:f4:d0:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ+G4uuZmk68jjDDZ+EV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmE2MjU1ZGVkYWExYTFiNmIxN2NiOGVhOTFlMDJkNDEy
Yjg3MTgwHhcNMjUwMTAxMDk0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWE3MmM4NGE2MzRiNWIzOTQ5MmFiZDg3MzdmNDdhMDM5ZTg3ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9lbO2a4nwS+au1+w85vEB/E1Jg5
stv8VXsjhE/QpBba4Cc/054iKxgBKC/83gX0BhJKygdwAhzw1q0UPcm0U+xdfkTX
ljjK03F0ghVLvBXMDryGaN2wBh6WMHBNwWEPnWDVvNwymgyUyL0umn6snvEoapVd
HTIDpvM7ate8Kw/KjMcia5MUhWJI23Hb7UhEhsTwybLv/orUTMKZ2TgFFAUmC7Sf
AdWeDVpTwZQwQ6YzYieGi55JexERCatF8SFJiV/TJu+xkc8oK0lKImYIsrnUhpMa
H+Kojj1Lo5PlIoD/oqJ78fsB0SxLmLIZkkzNbBngxO54a1HyDEASYPkkNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIWnLISmNLWzlJKr2HN/R6A56H5/MB8GA1UdIwQY
MBaAFF+6YlXe2qGhtrF8uOqR4C1BK4cYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEt
NjFlNTEyYmEyNWI3LzEvaGFjc2hLWTB0Yk9Va3F2WWMzOUhvRG5vZm44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEtNjFlNTEyYmEyNWI3
LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS4AAwQA
wS7IMA0GCSqGSIb3DQEBCwUAA4IBAQCspeq9mJlhpbZww+CLVbWobaxF6aEgekPs
xtIa4wMvlIhjrahpUr0CaU4ZjYV3m1SoGNrWDejcxQO/A0i91tPuEYGeOjVOzpaD
znElC86ifMDeV3OP6ChAH/hvbwasreoBejVjXBZK98c5kqdF5yfI1/wAQUqCRia7
3MBdb3L30OHysn2e1mvOzci/Cpdx5QvU9bfL/yiXNSgvU1wFIRo+RRrznp+Ixlip
7bY+A++uRvfao1IIVb9EAnpvbuzbnX6afvsu/vqxF3ipUAmHQ/GHzyC0763pL/9C
xAEL/WOlclRmjnfH4ZTca2z8ZfCqQx0oMgdhqq6SH3XqL8Bm9NAE
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:37:00 2025 by rpki-client