Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/HP8pQTjK9Vs_fa1uvItnk_61Rog.roa
File: HP8pQTjK9Vs_fa1uvItnk_61Rog.roa (raw, json)
Hash identifier: Ee6qDITOpMTTKUacvbTdKZWxIjyA0No9yR3F1gKLkGw=
Subject key identifier: 1C:FF:29:41:38:CA:F5:5B:3F:7D:AD:6E:BC:8B:67:93:FE:B5:46:88
Certificate issuer: /CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Certificate serial: 018572BA7034FB0CC7F98A95236DD892DED7
Authority key identifier: 64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/HP8pQTjK9Vs_fa1uvItnk_61Rog.roa
Signing time: Mon 02 Jan 2023 13:44:59 +0000
ROA not before: Mon 02 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.64.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:70:34:fb:0c:c7:f9:8a:95:23:6d:d8:92:de:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Validity
Not Before: Jan 2 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cff294138caf55b3f7dad6ebc8b6793feb54688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:49:61:44:a5:6f:08:08:b4:94:48:d4:50:
99:8c:a6:8f:22:b6:30:2c:e0:cf:67:39:79:36:70:
e9:ae:ea:3e:5f:46:50:59:cb:aa:e6:2d:04:46:b9:
d9:77:31:39:d9:13:6c:3a:92:14:37:5e:12:7e:22:
c4:9e:10:5f:d2:b3:78:49:07:93:8a:17:d4:99:5d:
be:7e:ef:ca:86:ed:42:7c:d8:c0:f5:ef:55:7b:a8:
7e:91:3b:a1:e5:95:b8:4b:07:a8:5c:60:47:1a:ec:
8f:17:07:b0:05:cf:12:93:31:48:02:a9:85:31:e9:
30:b8:d9:89:97:80:21:50:8c:bb:bf:c9:94:3a:83:
db:0b:70:52:4d:0e:5e:34:9b:39:8b:c4:0d:99:cf:
91:08:c0:69:d2:b6:54:a1:2d:69:ca:76:81:04:4c:
68:66:24:e2:1d:a2:51:0d:a0:a4:8c:32:13:37:51:
0d:d7:82:7b:8b:54:3a:bb:1d:b5:f0:9d:cc:31:29:
55:2c:0e:7f:c8:4e:30:11:75:94:1d:c9:e0:67:82:
67:b3:df:08:19:74:3e:d1:90:61:99:b9:df:49:88:
8d:c9:df:6f:0a:ac:f6:83:6f:9d:0d:be:32:47:11:
da:b1:4c:89:93:10:bb:f9:7b:88:16:5c:de:f2:58:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FF:29:41:38:CA:F5:5B:3F:7D:AD:6E:BC:8B:67:93:FE:B5:46:88
X509v3 Authority Key Identifier:
keyid:64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/HP8pQTjK9Vs_fa1uvItnk_61Rog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/ZHwJNkh-xdgD5NWppRAMRlH0VDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.78.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b9:01:70:69:ea:9a:61:62:e6:a4:be:a1:a5:9f:3f:22:fc:
99:7e:36:08:d6:c4:78:91:6c:9c:80:40:55:4d:cd:67:ea:37:
28:c2:c6:68:d6:ff:c0:cd:e3:81:e7:03:ef:94:f1:cb:c2:ea:
b4:10:c7:f6:37:5b:db:2c:37:8a:e0:1d:31:4a:80:06:ec:cd:
38:78:4c:70:c7:c9:60:fb:f3:40:9e:1f:1b:e2:f4:c0:2d:32:
51:31:66:10:91:0a:57:3d:44:2d:10:4f:10:7f:e3:93:78:69:
df:9c:1b:7b:41:09:51:93:9b:db:cb:66:3f:5e:23:78:ea:2a:
ae:8f:22:b2:9d:6b:d4:df:f5:7c:60:c1:94:db:57:60:45:4f:
4d:92:b3:9c:05:87:89:95:86:25:02:a5:d7:ad:41:f6:38:0e:
8f:3d:f2:93:b8:af:9c:2d:9b:ba:b7:63:56:a6:0f:41:cb:af:
c0:0c:79:05:3d:ee:95:20:0d:86:21:09:7d:17:5d:e1:1b:1c:
ca:73:f5:a8:71:c3:b4:0a:69:b9:68:09:11:94:31:68:29:bc:
ec:f7:a3:83:a6:ff:cf:30:0f:bd:2f:1e:87:c6:f7:2e:b4:3e:
61:70:5d:9f:90:5b:06:d2:4f:dd:a4:37:86:27:c4:f6:25:a9:
ab:dc:a5:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyunA0+wzH+YqVI23Ykt7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0N2MwOTM2NDg3ZWM1ZDgwM2U0ZDVhOWE1MTAwYzQ2NTFm
NDU0MzcwHhcNMjMwMTAyMTM0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2ZmMjk0MTM4Y2FmNTViM2Y3ZGFkNmViYzhiNjc5M2ZlYjU0Njg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTFJYUSlbwgItJRI1FCZjKaPIrYw
LODPZzl5NnDpruo+X0ZQWcuq5i0ERrnZdzE52RNsOpIUN14SfiLEnhBf0rN4SQeT
ihfUmV2+fu/Khu1CfNjA9e9Ve6h+kTuh5ZW4SweoXGBHGuyPFwewBc8SkzFIAqmF
MekwuNmJl4AhUIy7v8mUOoPbC3BSTQ5eNJs5i8QNmc+RCMBp0rZUoS1pynaBBExo
ZiTiHaJRDaCkjDITN1EN14J7i1Q6ux218J3MMSlVLA5/yE4wEXWUHcngZ4Jns98I
GXQ+0ZBhmbnfSYiNyd9vCqz2g2+dDb4yRxHasUyJkxC7+XuIFlze8lhZIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBz/KUE4yvVbP32tbryLZ5P+tUaIMB8GA1UdIwQY
MBaAFGR8CTZIfsXYA+TVqaUQDEZR9FQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkh3Sk5raC14ZGdENU5XcHBSQU1SbEgwVkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ODQ2MDItNGE5MC00NTUxLWJmNDkt
MmVkYmRmYWZmNDdlLzEvSFA4cFFUaks5VnNfZmExdXZJdG5rXzYxUm9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ODQ2MDItNGE5MC00NTUxLWJmNDktMmVkYmRmYWZmNDdl
LzEvWkh3Sk5raC14ZGdENU5XcHBSQU1SbEgwVkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUBOMA0G
CSqGSIb3DQEBCwUAA4IBAQAiuQFwaeqaYWLmpL6hpZ8/IvyZfjYI1sR4kWycgEBV
Tc1n6jcowsZo1v/AzeOB5wPvlPHLwuq0EMf2N1vbLDeK4B0xSoAG7M04eExwx8lg
+/NAnh8b4vTALTJRMWYQkQpXPUQtEE8Qf+OTeGnfnBt7QQlRk5vby2Y/XiN46iqu
jyKynWvU3/V8YMGU21dgRU9NkrOcBYeJlYYlAqXXrUH2OA6PPfKTuK+cLZu6t2NW
pg9By6/ADHkFPe6VIA2GIQl9F13hGxzKc/WoccO0Cmm5aAkRlDFoKbzs96ODpv/P
MA+9Lx6HxvcutD5hcF2fkFsG0k/dpDeGJ8T2Jamr3KWh
-----END CERTIFICATE-----
Generated at Mon Apr 14 06:32:28 2025 by rpki-client