Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/a5vhXTFxFnmVktk1fpfvlo_HM2M.roa
File: a5vhXTFxFnmVktk1fpfvlo_HM2M.roa (raw, json)
Hash identifier: jBANqiVsO0TchdCr8Pw27uhxGmAd9aIES2vzyb+GsNU=
Subject key identifier: 6B:9B:E1:5D:31:71:16:79:95:92:D9:35:7E:97:EF:96:8F:C7:33:63
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01942445691D082D772A5B648415ED81E825
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/a5vhXTFxFnmVktk1fpfvlo_HM2M.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204993
IP address blocks: 194.224.72.0/24 maxlen: 24
194.224.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:69:1d:08:2d:77:2a:5b:64:84:15:ed:81:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b9be15d317116799592d9357e97ef968fc73363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:cb:bc:ad:7d:4b:7a:63:01:cf:cc:95:a5:
69:4e:13:ae:44:9b:ef:0d:27:4b:36:c4:5b:cc:fb:
ae:24:ec:62:b5:3d:56:7b:28:8d:16:86:c4:aa:03:
41:a8:2d:30:96:50:b5:35:df:56:a6:8d:3e:b4:1b:
f4:90:6e:6b:78:6b:c2:21:69:a6:7c:92:1f:43:5a:
fb:da:52:9b:ea:ed:9e:f6:43:90:e9:5a:67:9b:00:
fd:b9:2c:74:88:9b:bc:c9:20:4a:ab:d1:6d:74:cd:
90:89:cf:fa:23:50:b3:4f:fe:0d:54:3b:88:52:13:
59:31:b3:02:44:08:e9:63:d8:41:d9:04:90:a4:7a:
87:9c:a8:c3:43:13:97:1c:17:38:46:60:1b:65:26:
a7:24:7d:66:c8:8f:65:e0:79:b3:41:6c:21:b0:49:
77:30:f9:b3:8c:d7:e2:81:75:84:73:a3:79:5e:be:
18:f5:70:b9:d4:17:8b:07:3f:7f:b7:91:07:91:73:
1b:0f:91:b0:8e:4f:d6:92:18:bb:75:a2:df:e7:67:
28:cf:a7:4c:35:f0:f2:c8:5f:14:d9:33:c6:4c:36:
26:af:cb:34:d0:45:08:17:34:b8:e6:a0:4d:88:b9:
f3:0d:3f:0e:22:6c:6c:30:8f:ca:44:88:57:aa:58:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9B:E1:5D:31:71:16:79:95:92:D9:35:7E:97:EF:96:8F:C7:33:63
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/a5vhXTFxFnmVktk1fpfvlo_HM2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.224.72.0/24
194.224.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:03:28:44:f1:1a:90:a6:e8:b0:71:b5:3d:59:1d:db:06:99:
8e:4e:5d:17:af:fb:f2:2c:e1:0a:8b:b5:fb:bc:db:ad:a1:3b:
43:da:95:26:e2:68:f4:bd:b4:36:16:ff:7c:89:dd:f6:2f:af:
5b:bd:58:36:47:56:19:3a:99:20:5d:de:9f:fa:00:a9:ea:84:
d6:04:56:71:52:97:7d:54:14:85:ac:11:3a:fb:56:21:64:62:
bf:a4:22:1a:ff:e5:f4:92:ca:8b:28:41:63:e6:5e:ac:39:59:
95:a7:50:07:99:9f:cc:ff:fe:13:2c:8e:79:ea:f7:02:e2:e7:
77:92:a8:1b:95:51:50:b2:f3:53:e5:94:9c:80:c3:7d:cb:54:
b0:0c:89:2b:63:30:cf:4d:5d:25:68:d2:72:fe:95:8f:d1:e6:
b8:f5:fc:4c:e4:05:af:ce:d0:e3:d2:ed:bd:57:86:1c:a9:6b:
f1:74:38:7a:ae:5a:24:57:38:fd:75:1d:ef:0c:db:a1:6c:57:
b7:ba:f7:24:d0:93:39:63:eb:59:08:9e:97:97:fa:53:d3:f0:
0c:eb:2f:c1:13:af:2b:af:9b:09:42:a8:00:cd:b4:d6:b0:26:
d6:dd:f2:1a:16:28:29:1b:2d:a1:aa:4a:90:cd:4a:a6:f4:86:
5d:18:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:57:05 2025 by rpki-client