Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa
File: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (raw, json)
Hash identifier: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=
Subject key identifier: 1C:02:56:87:72:EB:0D:61:61:42:63:64:69:93:F2:EC:F9:01:17:C6
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0194206862C0B9004F36FC5448A47850CD7E
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 786
IP address blocks: 137.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:62:c0:b9:00:4f:36:fc:54:48:a4:78:50:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c02568772eb0d61614263646993f2ecf90117c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:15:9d:a4:d7:dc:2d:dc:6a:a5:9c:a4:d2:
c0:59:f1:c8:a8:84:17:22:bb:a3:3c:f7:a9:4c:15:
c0:ca:f9:c5:33:37:4c:dc:b7:45:d6:fe:b1:09:e6:
6b:20:b1:c8:04:e2:62:6a:cd:8b:fc:a1:58:4f:b5:
d6:29:4f:d9:6c:d8:6c:0a:01:9e:e7:55:7c:86:02:
d1:e0:3e:65:fd:42:a8:e1:c5:d0:d8:1a:7d:7d:80:
e6:76:61:68:fc:50:cd:22:4e:25:1f:43:75:94:f3:
f2:73:cd:de:9b:a2:96:90:44:da:07:09:31:57:e7:
46:ba:2f:98:7b:40:25:48:fa:8f:33:3c:85:12:f5:
d2:23:cb:1a:15:f2:7f:e3:3c:1d:ea:f2:d7:08:71:
3f:24:1e:de:dd:25:3c:3d:80:25:85:3b:bc:cb:b7:
ab:c8:d7:03:44:02:19:98:db:6c:d7:87:fa:9a:df:
cb:69:52:41:ba:20:9b:f6:d4:d8:8d:0b:fd:ca:ff:
38:50:26:df:f1:05:43:7e:d0:66:15:a6:f3:a0:a6:
1b:2e:af:de:ac:5b:e1:d7:9f:79:57:84:f2:7f:06:
16:9b:a9:b1:5b:46:2e:e0:6d:ab:d6:f9:9b:c6:97:
eb:4d:e3:8b:0a:f2:fa:40:15:9b:55:84:15:a3:5c:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:56:87:72:EB:0D:61:61:42:63:64:69:93:F2:EC:F9:01:17:C6
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:4a:48:49:d7:96:7c:c0:68:f3:b9:2e:b1:5a:e4:7a:6a:0f:
07:88:b4:19:74:de:9f:b8:37:4f:e2:79:06:05:e1:54:e8:5c:
ed:bc:1b:18:bf:45:dd:fa:4c:d8:64:a1:7d:c8:34:a5:9c:7f:
36:7a:53:97:94:cc:1b:cf:15:09:9d:d5:b5:5b:af:70:6c:b1:
9a:77:5e:41:0e:2e:f5:61:b0:08:85:ef:de:c1:bd:c7:03:bc:
bc:43:f7:1a:d4:2b:08:41:dd:df:c6:ae:d5:2d:1e:9e:4a:54:
e4:a1:50:28:2c:a9:74:d0:55:3d:47:ec:d0:97:5d:f3:79:ac:
94:06:d7:84:d7:f2:e3:88:bd:da:1b:5a:69:af:da:b1:0e:38:
f7:a2:27:9e:d6:88:e1:9f:87:a3:70:b4:36:d4:51:dd:56:5f:
eb:a7:ab:74:42:4c:5a:7b:6d:fb:af:56:76:d4:8b:65:81:aa:
37:4e:47:b7:f8:89:a4:0e:d3:71:c6:66:b0:17:5b:be:51:6f:
1b:7b:f1:2c:e0:f0:01:88:ed:3c:c9:ec:64:82:c4:1b:df:61:
3f:bf:56:c9:e9:04:97:29:8a:a7:dd:d9:cb:d4:1b:9a:ca:79:
ac:2a:0c:06:df:4e:13:8c:19:ae:3f:5a:77:27:f0:6b:20:ce:
9e:93:8a:56
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQgaGLAuQBPNvxUSKR4UM1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzAyNTY4NzcyZWIwZDYxNjE0MjYzNjQ2OTkzZjJlY2Y5MDExN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6wVnaTX3C3caqWcpNLAWfHIqIQX
IrujPPepTBXAyvnFMzdM3LdF1v6xCeZrILHIBOJias2L/KFYT7XWKU/ZbNhsCgGe
51V8hgLR4D5l/UKo4cXQ2Bp9fYDmdmFo/FDNIk4lH0N1lPPyc83em6KWkETaBwkx
V+dGui+Ye0AlSPqPMzyFEvXSI8saFfJ/4zwd6vLXCHE/JB7e3SU8PYAlhTu8y7er
yNcDRAIZmNts14f6mt/LaVJBuiCb9tTYjQv9yv84UCbf8QVDftBmFabzoKYbLq/e
rFvh1595V4TyfwYWm6mxW0Yu4G2r1vmbxpfrTeOLCvL6QBWbVYQVo1yxYQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFBwCVody6w1hYUJjZGmT8uz5ARfGMB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvSEFKV2gzTHJEV0ZoUW1Oa2FaUHk3UGtCRjhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiSswDQYJ
KoZIhvcNAQELBQADggEBAMpKSEnXlnzAaPO5LrFa5HpqDweItBl03p+4N0/ieQYF
4VToXO28Gxi/Rd36TNhkoX3INKWcfzZ6U5eUzBvPFQmd1bVbr3BssZp3XkEOLvVh
sAiF797BvccDvLxD9xrUKwhB3d/GrtUtHp5KVOShUCgsqXTQVT1H7NCXXfN5rJQG
14TX8uOIvdobWmmv2rEOOPeiJ57WiOGfh6NwtDbUUd1WX+unq3RCTFp7bfuvVnbU
i2WBqjdOR7f4iaQO03HGZrAXW75Rbxt78Szg8AGI7TzJ7GSCxBvfYT+/VsnpBJcp
iqfd2cvUG5rKeawqDAbfThOMGa4/Wncn8Gsgzp6TilY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:11:45 2025 by rpki-client