Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/htjbCi_8qWneZo93vjbuIGh7N8U.roa
File: htjbCi_8qWneZo93vjbuIGh7N8U.roa (raw, json)
Hash identifier: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=
Subject key identifier: 86:D8:DB:0A:2F:FC:A9:69:DE:66:8F:77:BE:36:EE:20:68:7B:37:C5
Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial: 0194228D2F3D24488FA52DBC06488DAC453D
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/htjbCi_8qWneZo93vjbuIGh7N8U.roa
Signing time: Wed 01 Jan 2025 15:47:45 +0000
ROA not before: Wed 01 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216162
IP address blocks: 69.7.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2f:3d:24:48:8f:a5:2d:bc:06:48:8d:ac:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86d8db0a2ffca969de668f77be36ee20687b37c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:4c:ed:6b:18:49:36:16:00:86:46:92:9d:
51:73:b9:db:45:4d:f5:f3:c5:45:23:81:58:5c:2f:
ff:bd:ab:83:4c:8b:51:45:a2:28:98:1e:c3:f4:57:
f5:5b:46:4f:54:75:64:f5:c9:31:c8:75:0c:b9:91:
08:e1:2a:c2:0c:0c:38:4e:3d:7e:38:c3:dd:c9:22:
5e:c5:be:9c:a3:e1:f1:ba:b5:2c:de:db:73:6a:46:
15:94:7a:69:ff:ae:19:12:fd:e9:a0:9e:23:b1:df:
0f:ce:b4:fd:3a:60:01:89:6a:02:d8:01:e6:7d:b2:
e5:2d:0d:a7:66:b3:54:55:7e:8e:c0:4c:31:81:2b:
88:d7:c8:b7:c4:b8:ce:fc:0d:0b:46:8b:99:a0:c6:
39:50:77:28:01:ae:c4:98:7b:45:84:72:08:f6:e7:
8c:7c:0d:db:d7:ea:c5:cf:af:71:4c:95:8e:bd:5b:
c6:d3:37:7c:cc:a6:88:93:65:b0:65:91:c7:4e:cf:
79:09:4a:31:c6:c1:c5:bf:c3:f7:8e:70:97:cb:b8:
47:cf:21:57:64:66:5e:ad:91:b6:dc:02:d1:ae:09:
90:ef:0d:0e:a5:46:05:ad:1f:55:0a:b3:ce:d8:e0:
e7:c5:57:d3:70:53:43:d4:1e:cc:62:2c:6f:74:86:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:DB:0A:2F:FC:A9:69:DE:66:8F:77:BE:36:EE:20:68:7B:37:C5
X509v3 Authority Key Identifier:
keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/htjbCi_8qWneZo93vjbuIGh7N8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.7.78.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0a:31:71:de:fc:91:40:19:c6:0e:50:52:c7:b0:04:54:f7:
86:63:46:8c:18:2b:ef:c6:1b:4f:9d:a9:73:1a:23:94:08:cb:
b4:04:88:6e:9e:9a:7d:cd:dc:91:fc:8a:df:16:dc:07:aa:ae:
12:5f:93:ba:bf:1d:2d:3d:f6:69:6d:7a:4f:41:10:78:26:5c:
03:57:d8:ad:ec:0e:f9:67:58:74:71:1e:57:09:3f:18:93:6e:
cd:a7:48:fb:9d:f3:dd:e2:eb:70:13:ef:bf:4d:ee:9d:cf:0b:
f4:6c:7b:52:cf:13:97:80:ba:1d:a1:cd:1c:e5:a6:55:bc:a9:
52:b4:0d:5d:5c:b8:2a:dc:c3:6d:b6:28:53:48:02:cc:ff:b6:
65:0b:8d:df:3a:57:88:be:80:42:59:18:24:44:a9:1a:53:bd:
bf:2d:fa:2d:d5:5f:ae:d5:b5:f4:a6:58:1e:df:7c:93:95:ab:
11:93:33:70:0c:10:c0:54:69:99:01:70:56:c5:c3:1d:66:79:
f0:eb:70:82:c5:94:d0:89:bc:22:53:af:82:34:09:3e:5b:e9:
05:66:d8:f5:9e:0a:28:b2:97:08:0d:e0:04:85:d9:37:f0:26:
cb:0e:30:40:97:54:a8:b1:77:52:61:08:e7:53:7e:30:00:27:
aa:b2:60:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijS89JEiPpS28BkiNrEU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2QxNWU0MzQ3MGVmMGExZGM3MDEwNzQzOTNmZTcwZjJk
ZjhkMDYwHhcNMjUwMTAxMTU0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmQ4ZGIwYTJmZmNhOTY5ZGU2NjhmNzdiZTM2ZWUyMDY4N2IzN2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvRM7WsYSTYWAIZGkp1Rc7nbRU31
88VFI4FYXC//vauDTItRRaIomB7D9Ff1W0ZPVHVk9ckxyHUMuZEI4SrCDAw4Tj1+
OMPdySJexb6co+HxurUs3ttzakYVlHpp/64ZEv3poJ4jsd8PzrT9OmABiWoC2AHm
fbLlLQ2nZrNUVX6OwEwxgSuI18i3xLjO/A0LRouZoMY5UHcoAa7EmHtFhHII9ueM
fA3b1+rFz69xTJWOvVvG0zd8zKaIk2WwZZHHTs95CUoxxsHFv8P3jnCXy7hHzyFX
ZGZerZG23ALRrgmQ7w0OpUYFrR9VCrPO2ODnxVfTcFND1B7MYixvdIaYuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIbY2wov/Klp3maPd7427iBoezfFMB8GA1UdIwQY
MBaAFLN9FeQ0cO8KHccBB0OT/nDy340GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQt
ZGFmNjY5ZmFiZjgwLzEvaHRqYkNpXzhxV25lWm85M3ZqYnVJR2g3TjhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQtZGFmNjY5ZmFiZjgw
LzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQdOMA0G
CSqGSIb3DQEBCwUAA4IBAQCJCjFx3vyRQBnGDlBSx7AEVPeGY0aMGCvvxhtPnalz
GiOUCMu0BIhunpp9zdyR/IrfFtwHqq4SX5O6vx0tPfZpbXpPQRB4JlwDV9it7A75
Z1h0cR5XCT8Yk27Np0j7nfPd4utwE++/Te6dzwv0bHtSzxOXgLodoc0c5aZVvKlS
tA1dXLgq3MNttihTSALM/7ZlC43fOleIvoBCWRgkRKkaU72/Lfot1V+u1bX0plge
33yTlasRkzNwDBDAVGmZAXBWxcMdZnnw63CCxZTQibwiU6+CNAk+W+kFZtj1ngoo
spcIDeAEhdk38CbLDjBAl1SosXdSYQjnU34wACeqsmAs
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:09 2025 by rpki-client