Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hd3mMu1NWfPGyokMEiqAq_AI2Xw.roa
File: hd3mMu1NWfPGyokMEiqAq_AI2Xw.roa (raw, json)
Hash identifier: EekXQILFzcWVlQ8h920Ai4Dh/VSYu/zsBQyFhyGRa4E=
Subject key identifier: 85:DD:E6:32:ED:4D:59:F3:C6:CA:89:0C:12:2A:80:AB:F0:08:D9:7C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487C1505EE243557E5F48791B2C894
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hd3mMu1NWfPGyokMEiqAq_AI2Xw.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208760
IP address blocks: 192.165.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7c:15:05:ee:24:35:57:e5:f4:87:91:b2:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85dde632ed4d59f3c6ca890c122a80abf008d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:2a:cc:0d:87:08:bb:30:d7:47:c7:2a:21:
fc:38:b5:82:2f:5d:58:30:9d:97:fc:3c:43:bd:5b:
36:7e:cd:d7:10:74:3e:96:43:34:4c:da:6e:a9:a7:
6e:91:2c:a0:13:d1:3c:22:0e:65:31:b4:f4:72:27:
0a:e6:9b:aa:e9:5d:9a:87:07:b0:25:67:2d:06:ea:
82:99:18:9d:83:de:35:31:0a:6b:48:aa:e6:59:fc:
99:8e:ce:75:bc:c8:e0:f7:22:54:09:e3:37:8a:e5:
22:9e:a5:56:84:8c:38:ae:a1:cb:0a:15:73:f9:00:
ff:1c:71:37:21:dc:37:d0:38:8b:8f:55:36:39:99:
72:1c:3d:eb:b9:00:47:7d:af:08:65:f1:18:b0:71:
63:c6:55:1e:d4:f4:42:28:d8:0e:17:5d:ea:3d:4c:
c3:de:5c:2b:46:49:ce:2d:e3:4f:6e:17:2b:26:c0:
b5:47:f5:42:c5:85:59:da:fc:e6:34:d1:a3:ac:d1:
06:ae:93:1d:ea:85:63:a1:3d:ec:6f:3d:58:93:99:
f6:22:44:df:54:f4:fb:67:ba:dd:98:27:02:d6:f2:
5e:c3:5c:0c:a1:93:a7:b3:97:11:7e:87:f2:53:43:
ea:a3:aa:69:9e:51:46:9e:cf:95:19:f1:d0:32:d3:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:E6:32:ED:4D:59:F3:C6:CA:89:0C:12:2A:80:AB:F0:08:D9:7C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hd3mMu1NWfPGyokMEiqAq_AI2Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:26:94:96:16:10:e8:f0:82:7a:7c:d6:d2:18:87:be:da:a2:
f5:2c:c0:9f:1b:9b:58:a5:28:a7:b8:f1:62:8d:65:41:82:7a:
d9:1a:e0:60:9b:d2:a1:56:1c:d7:d0:97:26:42:3c:b6:7f:2d:
2d:1b:53:04:af:00:91:3b:86:97:af:64:10:3b:66:84:57:ad:
03:23:27:c7:79:d4:b5:37:91:35:e1:69:6a:3d:67:48:38:94:
66:9c:35:50:fe:bd:a4:32:b5:f9:04:b6:4c:2f:04:43:de:09:
fd:40:b6:ae:a3:12:36:8c:d4:89:09:c3:38:53:39:99:db:a6:
6c:f4:b2:f2:7d:e1:00:90:92:4e:e3:9c:5e:73:5c:cc:66:89:
df:95:1d:31:2d:f0:69:68:f2:66:5c:6e:6a:6d:33:8d:ce:25:
27:c2:b6:22:16:4b:c8:4e:f3:5c:f6:44:0f:d1:fe:78:d9:a4:
ad:ac:ca:e6:94:5b:21:35:d2:52:fc:27:c1:e0:d9:a7:cd:bc:
55:3e:d7:e5:d4:32:01:ff:8e:a6:65:da:a2:9e:40:51:49:68:
47:7f:89:7b:a5:87:02:65:4a:a8:7b:0c:1e:1b:6b:40:4d:57:
8c:95:34:fe:68:35:c0:9e:db:35:38:05:d8:e2:12:32:40:ad:
b8:0d:e0:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSHwVBe4kNVfl9IeRssiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWRkZTYzMmVkNGQ1OWYzYzZjYTg5MGMxMjJhODBhYmYwMDhkOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO8qzA2HCLsw10fHKiH8OLWCL11Y
MJ2X/DxDvVs2fs3XEHQ+lkM0TNpuqadukSygE9E8Ig5lMbT0cicK5puq6V2ahwew
JWctBuqCmRidg941MQprSKrmWfyZjs51vMjg9yJUCeM3iuUinqVWhIw4rqHLChVz
+QD/HHE3Idw30DiLj1U2OZlyHD3ruQBHfa8IZfEYsHFjxlUe1PRCKNgOF13qPUzD
3lwrRknOLeNPbhcrJsC1R/VCxYVZ2vzmNNGjrNEGrpMd6oVjoT3sbz1Yk5n2IkTf
VPT7Z7rdmCcC1vJew1wMoZOns5cRfofyU0Pqo6ppnlFGns+VGfHQMtMjmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIXd5jLtTVnzxsqJDBIqgKvwCNl8MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvaGQzbU11MU5XZlBHeW9rTUVpcUFxX0FJMlh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKUKMA0G
CSqGSIb3DQEBCwUAA4IBAQDCJpSWFhDo8IJ6fNbSGIe+2qL1LMCfG5tYpSinuPFi
jWVBgnrZGuBgm9KhVhzX0JcmQjy2fy0tG1MErwCRO4aXr2QQO2aEV60DIyfHedS1
N5E14WlqPWdIOJRmnDVQ/r2kMrX5BLZMLwRD3gn9QLauoxI2jNSJCcM4UzmZ26Zs
9LLyfeEAkJJO45xec1zMZonflR0xLfBpaPJmXG5qbTONziUnwrYiFkvITvNc9kQP
0f542aStrMrmlFshNdJS/CfB4NmnzbxVPtfl1DIB/46mZdqinkBRSWhHf4l7pYcC
ZUqoewweG2tATVeMlTT+aDXAnts1OAXY4hIyQK24DeC8
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:46 2025 by rpki-client