Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/HCBoQkVJODUQBMp7V4OFHrY7Jgg.roa
File: HCBoQkVJODUQBMp7V4OFHrY7Jgg.roa (raw, json)
Hash identifier: lh0xwvwpGuY3AlZIKTXLtWtlXfI0w5O41rbjwC8bwWo=
Subject key identifier: 1C:20:68:42:45:49:38:35:10:04:CA:7B:57:83:85:1E:B6:3B:26:08
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 016A6BEE
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/HCBoQkVJODUQBMp7V4OFHrY7Jgg.roa
Signing time: Mon 13 Jun 2022 02:41:02 +0000
ROA not before: Mon 13 Jun 2022 02:41:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136038
IP address blocks: 194.126.202.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23751662 (0x16a6bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Jun 13 02:41:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c206842454938351004ca7b5783851eb63b2608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:af:11:38:b8:3d:9e:36:50:ae:96:0e:b4:
e9:45:1d:22:b4:f5:4f:3d:e4:f2:6e:27:53:23:82:
34:9f:25:c7:ec:bc:84:34:ff:15:36:65:91:86:46:
95:ac:b2:ba:02:8f:74:bc:05:8a:30:27:55:63:1d:
c3:2f:6f:98:2d:0c:6d:e6:f2:3b:3a:e6:0c:3d:00:
ed:74:69:6b:3f:17:23:f5:fc:5e:fa:ce:cc:6e:66:
42:51:e1:cb:76:64:d0:a3:54:21:b0:0f:24:c5:37:
b3:23:41:cd:f7:fd:ef:00:5a:2f:9c:95:22:aa:bf:
44:16:50:b6:d2:03:36:ea:f9:d7:4e:6c:7b:b8:23:
b0:51:27:a8:28:7e:f2:66:8d:93:2d:9e:a2:1b:88:
5d:4d:be:fb:2e:e7:b6:e5:d9:60:43:c0:2d:48:58:
a0:57:f9:04:4f:19:b8:57:22:b9:6c:5f:4f:a9:d2:
33:74:cd:32:cf:7e:e8:fd:fc:31:72:58:7c:eb:8e:
9c:9f:e9:52:bb:9c:d6:00:61:42:dc:8f:5f:e2:1c:
f9:cf:3a:d7:d9:01:df:7c:b7:0f:d3:4e:70:09:d5:
a8:de:5b:ca:45:2d:1c:ab:24:ba:6c:9f:2c:74:d2:
be:1d:f8:89:d7:2d:6a:5c:2f:d3:3f:c5:31:8e:5b:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:68:42:45:49:38:35:10:04:CA:7B:57:83:85:1E:B6:3B:26:08
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/HCBoQkVJODUQBMp7V4OFHrY7Jgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
31:77:0d:d9:bb:25:45:4c:3c:ce:45:c3:b9:73:84:ce:81:fa:
81:53:7e:d7:b7:5b:9a:27:7a:0c:f3:b6:83:c2:9c:7e:d9:c7:
f3:f1:e4:a0:38:0f:e2:ff:0b:26:f7:60:ca:08:ed:a8:ef:d9:
ea:6b:1d:82:6f:bf:21:59:b7:5d:d0:97:52:0c:ac:e4:bd:a3:
7c:65:a7:e0:72:29:de:5d:83:1d:0a:80:9e:26:ac:e1:98:05:
3c:09:01:f1:69:c6:1f:0f:c1:75:ee:57:a7:a4:ac:06:11:4b:
ed:37:d8:ce:14:ff:cd:03:b1:88:29:38:1f:0a:ae:13:e9:e5:
18:c0:13:a6:e3:4c:67:dd:65:bc:81:e0:f2:0b:43:fa:fd:c4:
be:bf:b8:c7:f8:b4:bd:b5:e1:40:7f:1c:93:e7:47:29:dd:69:
93:be:14:c8:81:a9:72:c7:e0:44:e2:6d:58:c1:2b:e4:be:08:
74:fb:c7:dd:d2:cf:06:37:c9:7e:00:3b:86:7a:65:b6:52:47:
f2:db:c8:eb:6c:54:14:52:40:57:32:51:49:bc:86:01:13:63:
c3:b9:44:a0:9f:8d:01:5b:59:a3:18:73:28:3e:05:fd:8d:bd:
e3:e5:8c:37:1d:28:2f:fe:d5:c5:f4:63:c9:b4:e1:68:5c:c2:
2d:7d:29:8a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAWpr7jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OWNiMTY4NzQ4OGNmNDNhNzMzNGY5ZWZhNGQ5Y2RmNjM1NzI0ZTljMB4XDTIyMDYx
MzAyNDEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWMyMDY4NDI0NTQ5
MzgzNTEwMDRjYTdiNTc4Mzg1MWViNjNiMjYwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN3brxE4uD2eNlCulg606UUdIrT1Tz3k8m4nUyOCNJ8lx+y8
hDT/FTZlkYZGlayyugKPdLwFijAnVWMdwy9vmC0MbebyOzrmDD0A7XRpaz8XI/X8
XvrOzG5mQlHhy3Zk0KNUIbAPJMU3syNBzff97wBaL5yVIqq/RBZQttIDNur5105s
e7gjsFEnqCh+8maNky2eohuIXU2++y7ntuXZYEPALUhYoFf5BE8ZuFciuWxfT6nS
M3TNMs9+6P38MXJYfOuOnJ/pUruc1gBhQtyPX+Ic+c8619kB33y3D9NOcAnVqN5b
ykUtHKskumyfLHTSvh34idctalwv0z/FMY5bRC8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQcIGhCRUk4NRAEyntXg4UetjsmCDAfBgNVHSMEGDAWgBTpyxaHSIz0OnM0
+e+k2c32NXJOnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZjc1doMGlNOURwek5QbnZwTm5OOWpWeVRwdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvYzYwZWNlLTU2MWItNGQxOS04YWJmLWMxZmZhN2U1YjA0YS8x
L0hDQm9Ra1ZKT0RVUUJNcDdWNE9GSHJZN0pnZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
YzYwZWNlLTU2MWItNGQxOS04YWJmLWMxZmZhN2U1YjA0YS8xLzZjc1doMGlNOURw
ek5QbnZwTm5OOWpWeVRwdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMJ+ygMEAMJ+1wMEAMJ+2zANBgkq
hkiG9w0BAQsFAAOCAQEAMXcN2bslRUw8zkXDuXOEzoH6gVN+17dbmid6DPO2g8Kc
ftnH8/HkoDgP4v8LJvdgygjtqO/Z6msdgm+/IVm3XdCXUgys5L2jfGWn4HIp3l2D
HQqAnias4ZgFPAkB8WnGHw/Bde5Xp6SsBhFL7TfYzhT/zQOxiCk4HwquE+nlGMAT
puNMZ91lvIHg8gtD+v3Evr+4x/i0vbXhQH8ck+dHKd1pk74UyIGpcsfgROJtWMEr
5L4IdPvH3dLPBjfJfgA7hnpltlJH8tvI62xUFFJAVzJRSbyGARNjw7lEoJ+NAVtZ
oxhzKD4F/Y294+WMNx0oL/7VxfRjybThaFzCLX0pig==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:57 2025 by rpki-client