Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HFVDOeCoaewMzhOxBYo_SJ3jBsI.roa
File: HFVDOeCoaewMzhOxBYo_SJ3jBsI.roa (raw, json)
Hash identifier: SM4bUZqUsvej0DlUs/S86NWHuXWoSp9hhq9v4ibHG3w=
Subject key identifier: 1C:55:43:39:E0:A8:69:EC:0C:CE:13:B1:05:8A:3F:48:9D:E3:06:C2
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018AEA50D305CE2DD09695BEAD282911AB1D
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HFVDOeCoaewMzhOxBYo_SJ3jBsI.roa
Signing time: Sun 01 Oct 2023 08:17:59 +0000
ROA not before: Sun 01 Oct 2023 08:17:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 88.135.96.0/20 maxlen: 24
94.26.110.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:50:d3:05:ce:2d:d0:96:95:be:ad:28:29:11:ab:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Oct 1 08:17:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c554339e0a869ec0cce13b1058a3f489de306c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:1a:46:24:79:54:32:d0:41:c2:2e:26:72:
bc:30:5e:f2:53:43:d5:21:95:bb:b5:62:b0:e2:bc:
5f:39:56:28:f4:4e:9b:28:4b:61:f2:37:e6:98:3f:
cf:9e:99:c4:44:66:9d:11:ca:e0:bf:38:51:8e:96:
eb:9a:a0:a3:93:78:6d:99:8f:91:0d:6d:97:4d:28:
ad:33:81:a8:0d:57:dd:3c:1f:4f:8a:c5:85:6f:46:
dd:61:ab:b7:a8:f8:c8:72:aa:d6:87:73:52:cf:97:
40:ea:19:57:da:1b:9c:41:16:d9:07:e1:b4:6c:3a:
46:21:8a:57:b1:c3:1f:d5:6a:1f:81:36:97:7c:34:
89:e0:35:0c:9c:e8:5e:13:b8:ce:8f:4a:34:6d:86:
bd:3c:d3:94:72:b5:71:fd:11:67:95:0a:db:5e:61:
ad:88:a7:33:c9:36:d4:6e:7f:1f:ab:3b:16:b7:3e:
1e:60:1e:4c:df:f7:74:54:49:05:df:82:fd:f0:ef:
58:f3:1f:99:1b:12:ed:55:5c:58:e7:cb:2e:4c:6f:
3f:6d:87:76:da:b2:09:30:68:f1:d0:25:69:7b:37:
e5:13:f4:e8:33:de:7e:4e:e5:1a:21:ac:32:90:05:
61:06:9e:b3:10:28:17:dc:56:38:5e:08:3b:cd:2c:
b9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:43:39:E0:A8:69:EC:0C:CE:13:B1:05:8A:3F:48:9D:E3:06:C2
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HFVDOeCoaewMzhOxBYo_SJ3jBsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
35:95:b9:aa:1a:dc:a5:c7:bd:18:70:73:45:fc:cd:35:f0:da:
d9:19:c4:7a:a8:4a:66:e8:ee:b0:42:4f:1e:5f:c1:35:a8:7e:
d9:d0:45:6d:8b:c6:e5:3d:1d:66:87:3a:65:3a:91:98:23:57:
c4:87:07:3e:6d:72:84:b8:a2:c3:4b:34:92:4f:68:be:fe:56:
af:ea:eb:14:e2:35:19:fa:bf:2b:90:dc:64:fe:4e:96:36:68:
d4:dc:e1:c6:96:73:94:3b:b0:38:ad:43:9c:59:0e:29:3e:21:
f8:54:b3:e3:ac:24:fb:27:b7:5a:6c:bc:77:61:00:6b:dd:11:
82:4c:6c:40:fa:1f:65:1e:98:0d:83:af:61:78:2a:6b:34:a1:
81:8f:d6:8d:7e:0a:e3:c1:54:b7:9b:0e:74:f8:03:20:1b:71:
5f:f9:d8:d5:88:d4:2b:fd:7f:6e:c0:26:64:7d:50:f0:d5:76:
ca:f1:09:ba:ab:d9:cb:43:c2:c7:06:eb:7c:26:b2:29:c3:72:
28:c5:18:99:0c:4b:6c:60:73:c0:7b:db:00:f3:98:36:6a:12:
a5:b9:b3:39:34:24:e2:e4:2c:a3:57:39:f2:1c:0f:5f:f3:f6:
f8:0d:53:80:5e:cd:8b:7b:15:dd:7c:7d:0d:b1:34:e2:0c:98:
1f:36:d4:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYrqUNMFzi3QlpW+rSgpEasdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMxMDAxMDgxNzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzU1NDMzOWUwYTg2OWVjMGNjZTEzYjEwNThhM2Y0ODlkZTMwNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH4aRiR5VDLQQcIuJnK8MF7yU0PV
IZW7tWKw4rxfOVYo9E6bKEth8jfmmD/PnpnERGadEcrgvzhRjpbrmqCjk3htmY+R
DW2XTSitM4GoDVfdPB9PisWFb0bdYau3qPjIcqrWh3NSz5dA6hlX2hucQRbZB+G0
bDpGIYpXscMf1WofgTaXfDSJ4DUMnOheE7jOj0o0bYa9PNOUcrVx/RFnlQrbXmGt
iKczyTbUbn8fqzsWtz4eYB5M3/d0VEkF34L98O9Y8x+ZGxLtVVxY58suTG8/bYd2
2rIJMGjx0CVpezflE/ToM95+TuUaIawykAVhBp6zECgX3FY4Xgg7zSy5JwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBxVQzngqGnsDM4TsQWKP0id4wbCMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvSEZWRE9lQ29hZXdNemhPeEJZb19TSjNqQnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEWIdgAwQB
XhpAAwQBXhpuMA0GCSqGSIb3DQEBCwUAA4IBAQA1lbmqGtylx70YcHNF/M018NrZ
GcR6qEpm6O6wQk8eX8E1qH7Z0EVti8blPR1mhzplOpGYI1fEhwc+bXKEuKLDSzSS
T2i+/lav6usU4jUZ+r8rkNxk/k6WNmjU3OHGlnOUO7A4rUOcWQ4pPiH4VLPjrCT7
J7dabLx3YQBr3RGCTGxA+h9lHpgNg69heCprNKGBj9aNfgrjwVS3mw50+AMgG3Ff
+djViNQr/X9uwCZkfVDw1XbK8Qm6q9nLQ8LHBut8JrIpw3IoxRiZDEtsYHPAe9sA
85g2ahKlubM5NCTi5CyjVznyHA9f8/b4DVOAXs2LexXdfH0NsTTiDJgfNtRN
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:42:01 2025 by rpki-client