Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/Hu-_2GOlILROc28NX6mb0K-CgYk.roa
File: Hu-_2GOlILROc28NX6mb0K-CgYk.roa (raw, json)
Hash identifier: 7p4uIodHoh9m+5JwxyFGxXRJJEswZa3536QvJjMKtBY=
Subject key identifier: 1E:EF:BF:D8:63:A5:20:B4:4E:73:6F:0D:5F:A9:9B:D0:AF:82:81:89
Certificate issuer: /CN=26def4fad3b67370d2d2b3e1a1e299410ae6882b
Certificate serial: 01856E0AF053C9D925CEA41E4AA55C45E155
Authority key identifier: 26:DE:F4:FA:D3:B6:73:70:D2:D2:B3:E1:A1:E2:99:41:0A:E6:88:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jt70-tO2c3DS0rPhoeKZQQrmiCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/Hu-_2GOlILROc28NX6mb0K-CgYk.roa
Signing time: Sun 01 Jan 2023 15:54:48 +0000
ROA not before: Sun 01 Jan 2023 15:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198002
IP address blocks: 149.255.64.0/19 maxlen: 20
2a03:1180::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f0:53:c9:d9:25:ce:a4:1e:4a:a5:5c:45:e1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26def4fad3b67370d2d2b3e1a1e299410ae6882b
Validity
Not Before: Jan 1 15:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eefbfd863a520b44e736f0d5fa99bd0af828189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:10:24:4b:64:c4:83:1a:f4:8f:2d:1e:28:
97:af:ff:20:90:6b:e7:2c:ca:79:96:8a:6a:6d:d5:
ee:38:ec:1e:8a:d4:9b:b7:94:ca:f5:88:b1:89:48:
25:fb:45:ac:d8:b2:8c:13:73:3e:1a:b5:d6:c8:77:
cc:e5:64:eb:f2:32:5d:b0:1e:ab:e8:cd:c1:ea:33:
34:ab:67:19:44:62:b1:98:f2:cf:57:a3:06:de:2e:
74:66:52:8d:9a:72:6f:83:78:a9:6e:00:06:9b:ba:
69:e3:f2:4c:22:35:db:3c:4e:ab:51:e1:49:72:00:
be:08:bd:2e:90:10:cf:c3:45:87:3b:71:3b:bd:08:
fd:54:7a:b6:72:c1:91:14:5e:a8:bb:1f:9c:78:9e:
81:67:1b:2c:c4:76:78:04:98:ab:c2:a8:57:51:6e:
f2:7d:16:d9:86:b5:12:c2:55:0b:95:5a:12:59:6a:
ac:eb:f1:35:96:77:d6:fa:e1:c3:09:2b:be:a0:50:
ef:ea:ce:26:a9:86:8f:58:f2:ba:a6:fd:a0:81:a4:
43:74:97:aa:a5:68:f5:a0:2b:41:da:6d:52:52:5d:
05:76:ad:c2:8a:1e:de:bf:5b:6b:ae:9d:eb:c9:4d:
a8:8d:f6:cb:b6:ab:61:79:c0:22:e8:82:d2:0b:a5:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:BF:D8:63:A5:20:B4:4E:73:6F:0D:5F:A9:9B:D0:AF:82:81:89
X509v3 Authority Key Identifier:
keyid:26:DE:F4:FA:D3:B6:73:70:D2:D2:B3:E1:A1:E2:99:41:0A:E6:88:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt70-tO2c3DS0rPhoeKZQQrmiCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/Hu-_2GOlILROc28NX6mb0K-CgYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/Jt70-tO2c3DS0rPhoeKZQQrmiCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.64.0/19
IPv6:
2a03:1180::/32
Signature Algorithm: sha256WithRSAEncryption
81:8b:33:88:6a:f2:25:b1:a4:a2:66:4a:62:c5:ba:83:bd:fe:
7e:2d:ad:ed:e7:6e:be:ac:96:4b:34:62:43:7b:a4:21:a8:be:
d8:31:3e:bc:09:63:4b:0d:11:a6:13:ea:9c:7e:ba:a2:2f:0b:
8f:1f:b9:c2:41:80:53:e2:bf:1e:bd:b6:43:21:a4:32:0d:84:
01:ff:3e:73:6b:62:e5:f0:07:63:6f:42:97:80:70:c2:db:93:
4a:9f:df:5a:d2:42:2a:3d:da:0d:fe:5b:46:9e:d1:94:6e:c4:
8c:4f:30:4c:5d:52:91:60:f8:ea:a9:85:db:3b:d2:8a:37:56:
25:8c:8f:7b:8e:46:20:6d:25:48:8c:e5:ed:7b:0b:ab:8b:e0:
0e:62:2d:72:ea:ff:e0:4b:71:56:40:7a:55:b0:1e:a3:c5:a9:
cb:0c:c0:c1:13:43:2a:72:8f:1a:64:a2:ea:c8:3c:ef:85:c5:
84:29:46:22:1f:1f:48:1c:7f:b6:96:ec:9c:eb:ce:44:33:81:
88:61:fb:09:f2:16:44:92:4f:07:9e:7c:d1:98:e8:0a:4e:d4:
03:93:e4:11:24:aa:92:99:1f:07:c6:63:7b:c9:de:9b:47:13:
22:17:1f:d6:57:ec:d8:54:cf:7b:48:06:87:18:a6:e2:88:a4:
e4:06:44:9a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuCvBTydklzqQeSqVcReFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZGVmNGZhZDNiNjczNzBkMmQyYjNlMWExZTI5OTQxMGFl
Njg4MmIwHhcNMjMwMTAxMTU1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWVmYmZkODYzYTUyMGI0NGU3MzZmMGQ1ZmE5OWJkMGFmODI4MTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrUQJEtkxIMa9I8tHiiXr/8gkGvn
LMp5lopqbdXuOOweitSbt5TK9YixiUgl+0Ws2LKME3M+GrXWyHfM5WTr8jJdsB6r
6M3B6jM0q2cZRGKxmPLPV6MG3i50ZlKNmnJvg3ipbgAGm7pp4/JMIjXbPE6rUeFJ
cgC+CL0ukBDPw0WHO3E7vQj9VHq2csGRFF6oux+ceJ6BZxssxHZ4BJirwqhXUW7y
fRbZhrUSwlULlVoSWWqs6/E1lnfW+uHDCSu+oFDv6s4mqYaPWPK6pv2ggaRDdJeq
pWj1oCtB2m1SUl0Fdq3Cih7ev1trrp3ryU2ojfbLtqthecAi6ILSC6WvVQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB7vv9hjpSC0TnNvDV+pm9CvgoGJMB8GA1UdIwQY
MBaAFCbe9PrTtnNw0tKz4aHimUEK5ogrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnQ3MC10TzJjM0RTMHJQaG9lS1pRUXJtaUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8yNGZjMjUtMWI0ZC00YTRhLWFlMzQt
NjUxMGFkMWE1YjBjLzEvSHUtXzJHT2xJTFJPYzI4Tlg2bWIwSy1DZ1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8yNGZjMjUtMWI0ZC00YTRhLWFlMzQtNjUxMGFkMWE1YjBj
LzEvSnQ3MC10TzJjM0RTMHJQaG9lS1pRUXJtaUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFlf9AMA0E
AgACMAcDBQAqAxGAMA0GCSqGSIb3DQEBCwUAA4IBAQCBizOIavIlsaSiZkpixbqD
vf5+La3t526+rJZLNGJDe6QhqL7YMT68CWNLDRGmE+qcfrqiLwuPH7nCQYBT4r8e
vbZDIaQyDYQB/z5za2Ll8Adjb0KXgHDC25NKn99a0kIqPdoN/ltGntGUbsSMTzBM
XVKRYPjqqYXbO9KKN1YljI97jkYgbSVIjOXtewuri+AOYi1y6v/gS3FWQHpVsB6j
xanLDMDBE0Mqco8aZKLqyDzvhcWEKUYiHx9IHH+2luyc685EM4GIYfsJ8hZEkk8H
nnzRmOgKTtQDk+QRJKqSmR8HxmN7yd6bRxMiFx/WV+zYVM97SAaHGKbiiKTkBkSa
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:35 2025 by rpki-client