Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/HD-O2jkuswq0DBtkA_qMAtYHpi0.roa
File: HD-O2jkuswq0DBtkA_qMAtYHpi0.roa (raw, json)
Hash identifier: vMxKnkHwvEkLxZMUSLynqgj1bxvvWTA51P3OBUUHA7o=
Subject key identifier: 1C:3F:8E:DA:39:2E:B3:0A:B4:0C:1B:64:03:FA:8C:02:D6:07:A6:2D
Certificate issuer: /CN=770aed77999de7d67e9df33f55591dedeeb626a5
Certificate serial: 019424B39D847C08F2C4B59C7F437A3455F3
Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/HD-O2jkuswq0DBtkA_qMAtYHpi0.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202123
IP address blocks: 185.51.68.0/22 maxlen: 22
193.135.172.0/24 maxlen: 24
193.246.124.0/23 maxlen: 23
193.246.124.0/24 maxlen: 24
193.246.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9d:84:7c:08:f2:c4:b5:9c:7f:43:7a:34:55:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c3f8eda392eb30ab40c1b6403fa8c02d607a62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:a8:1f:46:ff:ba:0a:6f:68:1f:3b:ab:ab:
f1:b0:11:23:13:6d:d7:d6:71:c8:02:58:36:20:fb:
12:8a:bd:b3:3e:50:3c:a9:20:33:74:0a:ae:23:12:
f2:d1:64:60:af:3b:ca:3e:fd:cb:ba:97:bc:5a:68:
fa:40:64:16:17:5c:d9:9b:1c:82:f6:21:1e:fd:0d:
76:b3:3b:e5:1e:cd:e7:b3:31:b8:8b:dc:6e:08:81:
05:fc:b5:9a:a1:a0:35:fc:15:c1:4d:2f:89:27:c4:
12:4d:7b:21:60:24:a7:a6:8b:58:2f:f7:d1:4d:28:
f0:7a:8d:17:35:34:6b:34:fe:05:24:2b:f5:a3:41:
ee:3f:62:99:ab:b6:b9:fc:ca:06:e5:7c:8a:e5:b3:
d3:47:6e:6d:10:74:4c:ac:17:99:3d:5a:4e:af:39:
d0:93:41:d0:eb:60:53:d8:6d:6b:fe:0b:3e:1e:90:
40:84:ab:bc:6d:fb:bb:42:e4:f2:72:74:53:6c:7d:
b5:1b:1f:a5:a0:e3:42:7a:f0:c5:15:09:8f:30:06:
2b:f8:83:87:6e:4e:c8:f6:81:7f:0e:a2:dd:56:17:
b3:58:d9:0e:df:cb:99:15:4d:df:96:64:36:ed:e6:
20:f8:58:a3:f0:09:7e:3d:4b:a8:79:7c:90:c0:f8:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:8E:DA:39:2E:B3:0A:B4:0C:1B:64:03:FA:8C:02:D6:07:A6:2D
X509v3 Authority Key Identifier:
keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/HD-O2jkuswq0DBtkA_qMAtYHpi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.68.0/22
193.135.172.0/24
193.246.124.0/23
Signature Algorithm: sha256WithRSAEncryption
17:9c:36:69:40:fa:bb:31:82:76:11:3c:1e:80:7e:21:ec:41:
e6:18:07:20:2d:f0:0f:cd:bf:77:2c:b4:d7:4d:8c:d8:9b:b8:
d1:da:45:88:13:a7:b0:e1:26:73:9b:f0:94:f9:4a:d4:e0:56:
e9:2c:f6:74:15:7e:5d:c7:98:e3:3e:ff:f2:01:f7:90:6f:f7:
cb:45:3f:41:7c:21:69:4f:36:d8:a9:e6:0f:3e:0d:fc:eb:23:
3a:52:61:fb:33:b7:b4:24:f7:71:6a:3a:99:1a:82:ba:b0:2f:
d0:4b:7b:ea:3a:92:fc:c6:cc:ae:c3:b9:fe:cb:6f:97:77:c8:
52:e7:14:0c:db:63:e7:e4:6e:c8:83:70:32:80:0a:a0:d7:9b:
c5:7e:48:dc:fe:6f:b8:05:b4:25:d4:cb:d4:f4:ae:62:db:68:
d3:06:b1:f3:bc:e2:0a:1c:7e:00:0d:2e:59:f8:c3:2c:70:82:
7a:86:67:51:3d:a1:06:b0:5e:12:6e:3f:de:1a:f1:44:db:63:
66:61:4c:6f:bb:e3:09:75:e2:16:a5:f1:56:41:f3:fa:65:4b:
61:e4:47:ad:cd:fc:b6:52:c7:a5:5a:ed:ba:b7:15:90:38:6d:
5d:d6:47:5a:24:57:d6:7c:43:99:80:75:a9:81:11:0e:e6:bf:
e6:e1:5d:00
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQks52EfAjyxLWcf0N6NFXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MGFlZDc3OTk5ZGU3ZDY3ZTlkZjMzZjU1NTkxZGVkZWVi
NjI2YTUwHhcNMjUwMTAyMDE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzNmOGVkYTM5MmViMzBhYjQwYzFiNjQwM2ZhOGMwMmQ2MDdhNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYuoH0b/ugpvaB87q6vxsBEjE23X
1nHIAlg2IPsSir2zPlA8qSAzdAquIxLy0WRgrzvKPv3Lupe8Wmj6QGQWF1zZmxyC
9iEe/Q12szvlHs3nszG4i9xuCIEF/LWaoaA1/BXBTS+JJ8QSTXshYCSnpotYL/fR
TSjweo0XNTRrNP4FJCv1o0HuP2KZq7a5/MoG5XyK5bPTR25tEHRMrBeZPVpOrznQ
k0HQ62BT2G1r/gs+HpBAhKu8bfu7QuTycnRTbH21Gx+loONCevDFFQmPMAYr+IOH
bk7I9oF/DqLdVhezWNkO38uZFU3flmQ27eYg+Fij8Al+PUuoeXyQwPiVSQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBw/jto5LrMKtAwbZAP6jALWB6YtMB8GA1UdIwQY
MBaAFHcK7XeZnefWfp3zP1VZHe3utialMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmIt
ODQyOWJhNzkzMTlmLzEvSEQtTzJqa3Vzd3EwREJ0a0FfcU1BdFlIcGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmItODQyOWJhNzkzMTlm
LzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuTNEAwQA
wYesAwQBwfZ8MA0GCSqGSIb3DQEBCwUAA4IBAQAXnDZpQPq7MYJ2ETwegH4h7EHm
GAcgLfAPzb93LLTXTYzYm7jR2kWIE6ew4SZzm/CU+UrU4FbpLPZ0FX5dx5jjPv/y
AfeQb/fLRT9BfCFpTzbYqeYPPg386yM6UmH7M7e0JPdxajqZGoK6sC/QS3vqOpL8
xsyuw7n+y2+Xd8hS5xQM22Pn5G7Ig3AygAqg15vFfkjc/m+4BbQl1MvU9K5i22jT
BrHzvOIKHH4ADS5Z+MMscIJ6hmdRPaEGsF4Sbj/eGvFE22NmYUxvu+MJdeIWpfFW
QfP6ZUth5Eetzfy2UselWu26txWQOG1d1kdaJFfWfEOZgHWpgREO5r/m4V0A
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:26 2025 by rpki-client