Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/hkzhZS7HeE-rgMUTaezaUHzB_JU.roa
File: hkzhZS7HeE-rgMUTaezaUHzB_JU.roa (raw, json)
Hash identifier: YF5BJcw6pemXfCa2fKfDhdB8P+l9UQ5KDmfmyi9KrFk=
Subject key identifier: 86:4C:E1:65:2E:C7:78:4F:AB:80:C5:13:69:EC:DA:50:7C:C1:FC:95
Certificate issuer: /CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Certificate serial: 018CC424726627EACE024C47B94D45E23279
Authority key identifier: 72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/hkzhZS7HeE-rgMUTaezaUHzB_JU.roa
Signing time: Mon 01 Jan 2024 08:29:32 +0000
ROA not before: Mon 01 Jan 2024 08:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 193.108.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:72:66:27:ea:ce:02:4c:47:b9:4d:45:e2:32:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=864ce1652ec7784fab80c51369ecda507cc1fc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:79:2c:1f:bf:85:7d:5c:44:41:74:24:72:
7f:30:0a:f7:5b:9c:e2:f9:b1:53:77:90:8d:b9:7b:
5b:45:d6:0b:74:fe:95:83:08:34:59:b5:f9:c6:3b:
f2:e5:fd:18:07:6b:84:27:94:65:53:c8:4b:0a:e4:
1d:f3:d8:0e:a1:93:75:a8:bc:a7:9a:72:dc:8f:48:
9c:d9:ed:11:d5:8c:2d:3a:13:a9:7e:54:28:60:6e:
19:06:6a:7a:15:88:01:7f:c6:06:cb:ee:90:1f:52:
fa:04:69:5c:c8:97:60:aa:96:57:89:1b:d8:2e:fc:
07:12:fa:55:6b:12:28:3f:64:c7:b9:24:2e:df:2c:
bb:a4:96:5d:d7:4e:68:ca:c3:9c:93:89:35:61:2c:
30:27:ad:2e:a5:c0:e6:82:58:33:bd:c0:21:fc:f4:
b9:1d:13:c8:22:6e:b2:e8:69:3e:d3:ab:e5:d9:01:
a3:74:43:08:59:99:39:80:17:ce:ad:32:8a:cc:3d:
ae:1c:b5:00:c1:b4:62:d5:c6:97:6a:19:50:5f:de:
dc:ea:78:b1:31:df:83:86:8f:77:4a:7d:32:d0:f6:
90:10:39:52:2a:0b:b3:8a:28:30:6a:82:9d:74:68:
43:47:03:01:db:10:ae:15:ac:7d:a4:97:ff:c1:9c:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4C:E1:65:2E:C7:78:4F:AB:80:C5:13:69:EC:DA:50:7C:C1:FC:95
X509v3 Authority Key Identifier:
keyid:72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/hkzhZS7HeE-rgMUTaezaUHzB_JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8c:8a:a6:7e:90:f4:e7:61:ec:2b:3c:51:4b:34:58:6a:ca:
c3:9e:73:19:b7:70:58:69:85:f8:9b:b5:cc:84:68:62:d8:71:
aa:ac:13:7c:6f:22:70:e3:48:a1:18:18:47:69:50:bf:70:31:
ea:24:18:9e:38:45:da:75:5a:49:cf:52:d2:bb:30:91:60:cd:
87:ec:0e:07:ae:4c:66:8b:df:e7:b5:fb:21:89:66:ef:4f:0d:
2e:f4:55:4a:3b:0b:9f:ea:7b:53:35:e8:8c:10:cd:32:a5:61:
c7:f8:71:4a:09:6b:48:ab:89:32:86:b6:3f:38:22:83:78:f3:
64:1e:5f:1b:56:c6:cb:d0:71:b9:11:2d:5d:35:b0:63:4b:71:
f7:c5:94:0b:fe:75:71:23:00:60:b5:0c:ce:51:b2:93:04:b4:
69:b5:f0:12:08:7d:80:4d:3e:89:af:52:a1:83:0a:4e:d1:7f:
ef:04:cf:93:b3:2b:a7:4b:92:7a:76:37:42:de:b1:c5:25:70:
49:af:0d:0f:17:36:8d:b7:1a:0e:95:73:18:13:4f:77:3b:d6:
36:66:e4:21:80:0f:d8:36:7d:46:3c:2b:f4:10:ec:b1:17:e7:
f0:00:12:d6:35:7e:6d:a6:ec:ab:a6:c4:40:d4:66:3b:d3:a9:
48:35:a2:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJHJmJ+rOAkxHuU1F4jJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjMzM2FjYTA2NDk3NTFmZmM1YzEzNDY0MjhhYzIxY2Jj
ZGY1MDEwHhcNMjQwMTAxMDgyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjRjZTE2NTJlYzc3ODRmYWI4MGM1MTM2OWVjZGE1MDdjYzFmYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf55LB+/hX1cREF0JHJ/MAr3W5zi
+bFTd5CNuXtbRdYLdP6Vgwg0WbX5xjvy5f0YB2uEJ5RlU8hLCuQd89gOoZN1qLyn
mnLcj0ic2e0R1YwtOhOpflQoYG4ZBmp6FYgBf8YGy+6QH1L6BGlcyJdgqpZXiRvY
LvwHEvpVaxIoP2THuSQu3yy7pJZd105oysOck4k1YSwwJ60upcDmglgzvcAh/PS5
HRPIIm6y6Gk+06vl2QGjdEMIWZk5gBfOrTKKzD2uHLUAwbRi1caXahlQX97c6nix
Md+Dho93Sn0y0PaQEDlSKguziigwaoKddGhDRwMB2xCuFax9pJf/wZy2AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZM4WUux3hPq4DFE2ns2lB8wfyVMB8GA1UdIwQY
MBaAFHLzM6ygZJdR/8XBNGQorCHLzfUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZNenJLQmtsMUhfeGNFMFpDaXNJY3ZOOVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YzkyZWYtMTQxZi00YzdmLTk1NTYt
NzU3YzE4MjI5MWZiLzEvaGt6aFpTN0hlRS1yZ01VVGFlemFVSHpCX0pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81YzkyZWYtMTQxZi00YzdmLTk1NTYtNzU3YzE4MjI5MWZi
LzEvY3ZNenJLQmtsMUhfeGNFMFpDaXNJY3ZOOVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWyDMA0G
CSqGSIb3DQEBCwUAA4IBAQAQjIqmfpD052HsKzxRSzRYasrDnnMZt3BYaYX4m7XM
hGhi2HGqrBN8byJw40ihGBhHaVC/cDHqJBieOEXadVpJz1LSuzCRYM2H7A4Hrkxm
i9/ntfshiWbvTw0u9FVKOwuf6ntTNeiMEM0ypWHH+HFKCWtIq4kyhrY/OCKDePNk
Hl8bVsbL0HG5ES1dNbBjS3H3xZQL/nVxIwBgtQzOUbKTBLRptfASCH2ATT6Jr1Kh
gwpO0X/vBM+TsyunS5J6djdC3rHFJXBJrw0PFzaNtxoOlXMYE093O9Y2ZuQhgA/Y
Nn1GPCv0EOyxF+fwABLWNX5tpuyrpsRA1GY706lINaKk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org