Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/HaAOy8zL2tM3kCtCJdke8_2bKvk.roa
File: HaAOy8zL2tM3kCtCJdke8_2bKvk.roa (raw, json)
Hash identifier: WlnxXsV5pSMaP/mmFoGcMaRIrDGoxu1EK3NXRSic81k=
Subject key identifier: 1D:A0:0E:CB:CC:CB:DA:D3:37:90:2B:42:25:D9:1E:F3:FD:9B:2A:F9
Certificate issuer: /CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Certificate serial: 01831F625D371DF8DFC650ACA2FDEE075510
Authority key identifier: 5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/HaAOy8zL2tM3kCtCJdke8_2bKvk.roa
Signing time: Thu 08 Sep 2022 23:14:43 +0000
ROA not before: Thu 08 Sep 2022 23:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203423
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1f:62:5d:37:1d:f8:df:c6:50:ac:a2:fd:ee:07:55:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Validity
Not Before: Sep 8 23:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1da00ecbcccbdad337902b4225d91ef3fd9b2af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:b6:03:82:1e:b0:af:ef:77:e2:15:f5:8f:
b2:1c:3e:04:8a:31:9e:44:8d:cf:02:48:4e:21:e7:
d3:96:87:7d:e4:cd:04:30:12:6c:f0:fa:30:7a:bc:
6e:06:ef:dc:2e:f1:cd:7e:8c:64:1d:4a:97:bb:69:
c4:c6:95:af:42:4c:5a:10:f9:4c:72:36:8d:7c:a7:
48:c3:64:04:35:b7:ba:29:6c:85:3f:e3:f7:e7:cb:
9b:b6:b5:0e:0e:22:8f:a9:76:5f:c5:98:13:28:72:
78:ca:7c:cf:bc:3c:ff:01:e7:98:9c:cd:e8:80:a2:
ba:08:5f:b0:a2:22:e5:8b:42:d6:d6:7a:71:d2:6b:
16:58:41:7f:8e:cf:6c:ad:95:d2:f2:7f:b7:a2:99:
23:f3:43:ec:4e:31:09:df:d9:03:d0:34:f7:02:60:
bd:ad:62:08:14:5b:f0:54:0c:b2:f6:e3:c2:73:ec:
94:e8:ed:11:63:7c:40:b3:64:03:33:7d:1d:ae:f1:
cf:ae:4c:cb:78:56:29:f9:43:da:42:48:9a:ad:3b:
23:ed:d3:1b:e6:20:bf:4b:fa:d1:b6:09:10:fb:3f:
8f:d1:01:a5:f8:bc:86:a1:d4:ee:9d:be:ff:d3:dc:
15:4e:0c:2c:a0:ec:1b:ce:85:a5:ef:c0:67:0a:a3:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A0:0E:CB:CC:CB:DA:D3:37:90:2B:42:25:D9:1E:F3:FD:9B:2A:F9
X509v3 Authority Key Identifier:
keyid:5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/HaAOy8zL2tM3kCtCJdke8_2bKvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6a:ec:d7:20:29:5c:76:65:e2:e2:02:25:99:f6:89:84:0a:
c8:56:33:f8:14:5f:a6:37:82:bf:5a:c9:36:f5:5c:2f:bf:e4:
7f:73:15:a1:e8:30:28:7c:af:d2:aa:39:d7:51:0b:8f:73:c5:
c2:7b:3e:b7:14:2b:03:b1:42:0c:57:e3:7f:19:e9:0b:7d:93:
af:7c:9c:ae:2e:b9:ce:09:79:4a:33:84:0f:59:9e:79:41:45:
fb:b9:ba:ff:06:9b:d6:90:e5:fd:d9:60:0d:88:b8:0a:2b:80:
27:f3:e9:d1:d6:79:fb:ff:c7:37:1a:3c:5d:9b:0b:a0:a6:cf:
d3:31:6a:ce:6a:9b:81:9f:87:f9:1b:e9:ba:d8:9e:c2:91:de:
9b:34:4f:7e:f9:d4:1f:03:9f:53:9c:d8:7b:65:45:6a:f0:4d:
ba:1f:e7:be:65:48:b9:17:71:5e:98:53:63:a4:01:64:77:1a:
55:0e:6b:22:13:70:f8:52:46:bc:da:84:9d:8a:bb:eb:99:5f:
60:90:0d:42:b3:35:29:2b:7e:7a:85:24:e4:fb:e3:1e:07:09:
b6:31:39:b7:a1:f9:25:d1:78:de:a0:eb:9f:0e:fd:41:86:78:
9f:e3:72:71:40:0a:f3:a5:13:78:58:e7:9c:a8:7c:c6:c6:eb:
e4:e5:fb:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMfYl03HfjfxlCsov3uB1UQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzE3NjI3ZjdiMmZjYzU2ZjBkN2JlNDY5YTEzMTcxNjA3
ZDI0MjcwHhcNMjIwOTA4MjMxNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGEwMGVjYmNjY2JkYWQzMzc5MDJiNDIyNWQ5MWVmM2ZkOWIyYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkke2A4IesK/vd+IV9Y+yHD4EijGe
RI3PAkhOIefTlod95M0EMBJs8PowerxuBu/cLvHNfoxkHUqXu2nExpWvQkxaEPlM
cjaNfKdIw2QENbe6KWyFP+P358ubtrUODiKPqXZfxZgTKHJ4ynzPvDz/AeeYnM3o
gKK6CF+woiLli0LW1npx0msWWEF/js9srZXS8n+3opkj80PsTjEJ39kD0DT3AmC9
rWIIFFvwVAyy9uPCc+yU6O0RY3xAs2QDM30drvHPrkzLeFYp+UPaQkiarTsj7dMb
5iC/S/rRtgkQ+z+P0QGl+LyGodTunb7/09wVTgwsoOwbzoWl78BnCqO8AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB2gDsvMy9rTN5ArQiXZHvP9myr5MB8GA1UdIwQY
MBaAFF5xdif3svzFbw175GmhMXFgfSQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5GMkpfZXlfTVZ2RFh2a2FhRXhjV0I5SkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zZDE5NDUtZDYwZS00OGFiLTg4YmMt
OGNmZTRiODE1N2QyLzEvSGFBT3k4ekwydE0za0N0Q0pka2U4XzJiS3ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zZDE5NDUtZDYwZS00OGFiLTg4YmMtOGNmZTRiODE1N2Qy
LzEvWG5GMkpfZXlfTVZ2RFh2a2FhRXhjV0I5SkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/6lMA0G
CSqGSIb3DQEBCwUAA4IBAQCSauzXIClcdmXi4gIlmfaJhArIVjP4FF+mN4K/Wsk2
9Vwvv+R/cxWh6DAofK/SqjnXUQuPc8XCez63FCsDsUIMV+N/GekLfZOvfJyuLrnO
CXlKM4QPWZ55QUX7ubr/BpvWkOX92WANiLgKK4An8+nR1nn7/8c3Gjxdmwugps/T
MWrOapuBn4f5G+m62J7Ckd6bNE9++dQfA59TnNh7ZUVq8E26H+e+ZUi5F3FemFNj
pAFkdxpVDmsiE3D4Uka82oSdirvrmV9gkA1CszUpK356hSTk++MeBwm2MTm3ofkl
0XjeoOufDv1Bhnif43JxQArzpRN4WOecqHzGxuvk5fuE
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:12 2025 by rpki-client