Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Hs2TvjBAbChswFTm05pNrXJsCJA.roa
File: Hs2TvjBAbChswFTm05pNrXJsCJA.roa (raw, json)
Hash identifier: xtJBUOZoNvBaKTOo18EAAqIaZQ4IjdLX9G/viT94FJA=
Subject key identifier: 1E:CD:93:BE:30:40:6C:28:6C:C0:54:E6:D3:9A:4D:AD:72:6C:08:90
Certificate issuer: /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial: 01942747A759C76D11E5B93D90E92E73470F
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Hs2TvjBAbChswFTm05pNrXJsCJA.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56366
IP address blocks: 93.92.240.0/21 maxlen: 21
2a03:d200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a7:59:c7:6d:11:e5:b9:3d:90:e9:2e:73:47:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ecd93be30406c286cc054e6d39a4dad726c0890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:b6:01:60:4f:77:e3:7d:09:b4:de:b7:49:
31:99:5f:c3:9c:ba:f5:0a:2e:77:93:29:d7:7e:a3:
bb:46:fd:25:07:1f:fe:b0:73:46:7d:c3:bd:f7:40:
65:92:c2:17:a4:81:a4:cf:05:6d:3e:83:37:34:e8:
c9:26:67:21:77:ae:73:df:88:38:e9:2e:be:01:ea:
07:2d:f8:f4:49:4b:23:60:54:e0:05:90:e4:f1:9a:
aa:f1:27:53:61:55:62:71:f2:8b:b5:18:36:1c:a0:
fc:23:f8:df:db:1b:d8:bd:89:82:56:11:12:0e:de:
54:6e:63:9b:d9:be:e0:42:74:81:8c:57:d5:85:73:
d1:75:42:85:1d:b0:95:3e:74:fe:d6:31:e1:70:69:
1c:b9:ed:1a:01:fc:26:fe:44:d5:39:96:cc:49:ee:
3a:d4:e9:f2:44:fd:e0:4b:67:b2:f0:8c:8b:96:2b:
64:17:50:9c:be:e7:3b:9d:ec:06:6b:95:de:4d:af:
06:f3:98:6b:4b:de:21:33:e0:71:a0:5d:e4:f2:f8:
dc:7f:72:11:4c:47:32:f9:ba:1c:6b:23:25:3e:41:
d5:88:cf:ad:88:79:e7:de:7b:44:f7:26:91:14:78:
e8:cd:51:eb:be:ef:ef:45:a9:62:13:cf:44:74:b2:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:93:BE:30:40:6C:28:6C:C0:54:E6:D3:9A:4D:AD:72:6C:08:90
X509v3 Authority Key Identifier:
keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Hs2TvjBAbChswFTm05pNrXJsCJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.240.0/21
IPv6:
2a03:d200::/32
Signature Algorithm: sha256WithRSAEncryption
68:d1:68:0e:77:52:c7:a4:5b:46:f1:51:ea:d1:f7:67:cd:54:
a7:fd:b0:f8:55:a9:6b:1e:a2:a8:6f:38:7d:d5:92:10:b2:32:
a5:0f:6a:c8:a7:b2:79:3b:14:10:d2:36:5c:a1:cd:86:75:fe:
4b:79:e8:ef:fb:a9:c7:96:41:c7:c5:48:1a:6c:72:33:14:26:
1e:8b:39:78:41:70:b4:00:cf:4f:4e:95:3e:a9:c1:c8:63:db:
17:e0:b7:61:69:97:fb:a0:fd:a7:f6:6a:8e:34:1f:75:78:3d:
91:55:61:b2:e8:39:e3:ef:af:8d:69:45:37:4d:1b:81:d1:0d:
81:13:6e:02:df:cd:6a:28:cd:76:9b:51:b3:f0:83:e9:84:a3:
a8:9f:5f:99:4b:4a:02:91:22:0a:09:72:b1:76:e4:ea:36:53:
34:61:55:07:04:1f:e3:ef:b5:36:18:7e:5b:66:0c:fb:26:50:
b0:bf:88:ed:31:c4:d5:a4:e3:6b:ed:1e:93:87:ba:27:34:4b:
a5:72:55:a6:4b:97:80:d8:56:9c:83:b6:3b:65:49:cc:85:20:
2d:1c:e7:cb:0a:d6:81:76:05:52:cb:19:df:8b:cf:8c:23:63:
d1:73:76:63:19:51:e0:2a:80:e1:de:32:2d:ee:0d:25:f8:36:
87:2d:a6:15
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnR6dZx20R5bk9kOkuc0cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTMwOTgwMzA1MzQ1ZmQ1MzY1YjM1MTVlMzU2OGY5Y2Vl
NTg1NDEwHhcNMjUwMTAyMTM0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWNkOTNiZTMwNDA2YzI4NmNjMDU0ZTZkMzlhNGRhZDcyNmMwODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXS2AWBPd+N9CbTet0kxmV/DnLr1
Ci53kynXfqO7Rv0lBx/+sHNGfcO990BlksIXpIGkzwVtPoM3NOjJJmchd65z34g4
6S6+AeoHLfj0SUsjYFTgBZDk8Zqq8SdTYVVicfKLtRg2HKD8I/jf2xvYvYmCVhES
Dt5UbmOb2b7gQnSBjFfVhXPRdUKFHbCVPnT+1jHhcGkcue0aAfwm/kTVOZbMSe46
1OnyRP3gS2ey8IyLlitkF1Ccvuc7newGa5XeTa8G85hrS94hM+BxoF3k8vjcf3IR
TEcy+bocayMlPkHViM+tiHnn3ntE9yaRFHjozVHrvu/vRaliE89EdLI17QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB7Nk74wQGwobMBU5tOaTa1ybAiQMB8GA1UdIwQY
MBaAFGPjCYAwU0X9U2WzUV41aPnO5YVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjU3ODctYzJjOC00MjliLTgxMzct
Y2JmNmMxODQ5YzQ0LzEvSHMyVHZqQkFiQ2hzd0ZUbTA1cE5yWEpzQ0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjU3ODctYzJjOC00MjliLTgxMzctY2JmNmMxODQ5YzQ0
LzEvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXVzwMA0E
AgACMAcDBQAqA9IAMA0GCSqGSIb3DQEBCwUAA4IBAQBo0WgOd1LHpFtG8VHq0fdn
zVSn/bD4ValrHqKobzh91ZIQsjKlD2rIp7J5OxQQ0jZcoc2Gdf5Leejv+6nHlkHH
xUgabHIzFCYeizl4QXC0AM9PTpU+qcHIY9sX4LdhaZf7oP2n9mqONB91eD2RVWGy
6Dnj76+NaUU3TRuB0Q2BE24C381qKM12m1Gz8IPphKOon1+ZS0oCkSIKCXKxduTq
NlM0YVUHBB/j77U2GH5bZgz7JlCwv4jtMcTVpONr7R6Th7onNEulclWmS5eA2Fac
g7Y7ZUnMhSAtHOfLCtaBdgVSyxnfi8+MI2PRc3ZjGVHgKoDh3jIt7g0l+DaHLaYV
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:29:26 2025 by rpki-client