Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa
File: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (raw, json)
Hash identifier: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=
Subject key identifier: DF:FF:A1:83:0F:A1:10:F6:63:AD:D7:2F:6E:60:4F:7F:26:63:25:7E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019427483795F922F5A8CE1D9885B38CAEB3
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 193.46.232.0/23 maxlen: 23
193.46.250.0/23 maxlen: 23
2a0f:ba80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:37:95:f9:22:f5:a8:ce:1d:98:85:b3:8c:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfffa1830fa110f663add72f6e604f7f2663257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:e6:e8:06:11:5c:25:25:de:f6:40:0d:a5:
a3:88:1b:fd:8b:ce:9c:b6:92:16:f4:2b:4f:bf:d8:
1e:f0:85:e8:ea:d9:01:da:71:da:82:1b:69:cc:f1:
9b:51:c1:d1:91:c1:52:5d:b4:80:81:5a:36:3b:1e:
7e:19:b1:36:ee:e5:21:dc:bd:94:ad:3e:28:e4:40:
46:74:da:03:0c:3d:31:d2:8b:b6:b0:5e:eb:ac:b7:
1a:bf:18:df:16:39:de:30:8a:a1:ff:bc:05:60:7a:
72:07:6b:a3:d6:11:12:07:db:58:b2:ab:05:58:43:
e7:d2:7b:6b:8a:10:36:f6:84:1a:dc:10:97:b5:eb:
8c:77:cd:9c:bb:ff:16:f2:37:db:d3:56:f0:19:39:
4c:b4:1f:c7:0b:93:b3:f4:d5:0f:90:99:a2:fc:dd:
eb:12:d2:e1:b2:4a:d1:7d:29:c6:56:e8:d1:10:6a:
64:0a:66:a9:4c:95:82:15:b7:4a:f8:82:40:af:98:
66:e9:13:3c:60:5b:fe:2e:22:49:e4:b6:1b:9e:0d:
28:8f:d4:c6:0d:b3:e2:6a:d1:81:7c:3d:a9:35:a2:
63:1e:d7:ec:d7:c1:79:20:6d:51:3a:c7:47:45:e0:
3e:2d:6f:0a:b2:61:66:ad:12:e2:d3:5e:b7:75:b7:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:A1:83:0F:A1:10:F6:63:AD:D7:2F:6E:60:4F:7F:26:63:25:7E
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.232.0/23
193.46.250.0/23
IPv6:
2a0f:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
02:44:e7:5f:f6:8b:e1:a2:73:16:b0:02:6f:6d:af:f3:ae:26:
eb:22:e2:83:ab:78:74:c7:94:75:fb:f4:9d:d3:42:16:23:5f:
30:87:db:89:13:a4:c3:1a:3b:ab:b7:67:49:7d:56:2b:d7:45:
f5:83:1d:87:45:39:77:8e:e2:7b:32:87:96:8e:73:d5:26:48:
2a:ad:dc:42:34:3f:38:01:07:b8:13:32:89:4a:51:a0:ad:49:
4d:e4:00:3f:4a:92:6a:4d:94:f5:e2:17:a0:be:20:08:f1:69:
e6:04:28:fb:d0:07:e7:5d:f0:76:47:68:44:a2:b1:41:61:2d:
a5:5e:64:11:40:2b:0a:c7:00:1d:eb:88:4e:e3:ef:59:14:61:
99:a5:ba:79:c1:ac:3d:b5:8e:23:13:c4:02:8e:b4:58:8f:3b:
7e:3b:b7:b5:d7:41:f1:00:40:8c:51:73:c7:db:e1:93:8c:dc:
f7:2e:5c:a2:82:fa:47:e7:a3:d0:b6:8c:0e:6f:90:3b:bc:f1:
f1:02:6d:c0:7e:01:ed:93:94:1a:d5:86:65:05:da:33:dd:2f:
3c:84:97:76:01:bc:60:12:1e:1f:1d:77:5c:61:0f:ed:d8:12:
7b:ee:58:eb:85:c3:b6:52:9d:fc:d0:25:b9:43:14:35:0c:13:
67:0b:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:30:17 2025 by rpki-client