Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/HQMtz4B5CutgL-N5xfaUf94QUuU.roa
File: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (raw, json)
Hash identifier: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=
Subject key identifier: 1D:03:2D:CF:80:79:0A:EB:60:2F:E3:79:C5:F6:94:7F:DE:10:52:E5
Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial: 019426D94795645E413B6AE526D6439577A2
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/HQMtz4B5CutgL-N5xfaUf94QUuU.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209920
IP address blocks: 185.244.16.0/24 maxlen: 24
185.244.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:47:95:64:5e:41:3b:6a:e5:26:d6:43:95:77:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d032dcf80790aeb602fe379c5f6947fde1052e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:3d:17:a5:89:e2:ba:89:46:45:69:27:2b:
2b:60:67:34:4c:42:02:32:cf:3d:5e:fe:ac:3f:5b:
3a:33:0c:96:ed:1c:f9:ce:5e:f2:bd:21:ba:d4:55:
94:eb:d9:0f:c6:3a:b9:16:47:b7:f5:b0:32:ac:12:
f0:55:ed:ce:d0:42:55:f3:6f:c3:fd:a5:ff:35:b6:
93:74:ec:d3:d9:1b:52:05:cc:c2:e9:e7:ea:c9:9f:
db:be:be:17:60:b2:d0:59:29:b2:31:a9:24:3f:08:
79:45:79:1d:e1:e3:9c:0e:6f:0a:72:c5:db:d8:d5:
88:21:49:a2:c6:8f:4d:5d:7f:4e:d9:11:96:28:42:
69:f3:ff:95:0e:1d:48:d6:27:6b:e6:d6:ab:d9:40:
83:85:bd:80:14:35:16:21:63:2c:f3:2b:5b:b3:9d:
3c:ec:29:d6:81:5f:e9:01:b5:3f:6a:9c:32:89:5a:
84:95:3d:98:eb:65:21:cc:d3:2c:7a:97:4d:2a:89:
aa:10:d4:b7:13:8e:c3:3c:94:6f:4b:44:04:db:31:
ec:25:13:ea:14:ca:12:d3:ac:d9:b0:8e:e5:14:9b:
08:87:dd:f6:c3:41:c5:ef:61:0b:3e:1b:97:86:e4:
b7:80:ec:0b:cf:b7:c6:50:a8:ef:04:c7:2e:66:3a:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:2D:CF:80:79:0A:EB:60:2F:E3:79:C5:F6:94:7F:DE:10:52:E5
X509v3 Authority Key Identifier:
keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/HQMtz4B5CutgL-N5xfaUf94QUuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.16.0/23
Signature Algorithm: sha256WithRSAEncryption
78:39:65:b5:d2:69:a8:20:92:6a:33:e4:84:2d:03:25:f9:cf:
0c:41:03:7d:6d:ff:5b:55:8a:4c:b9:53:6e:ba:db:a6:85:11:
12:df:af:21:66:28:f7:01:04:62:f4:8a:09:a5:d5:9a:77:4f:
bc:15:aa:bf:51:ce:e9:53:64:e1:10:4b:07:15:cc:15:3d:ef:
f0:01:da:51:b0:85:0a:0f:be:61:64:ea:34:87:fd:b1:ca:dd:
04:55:fd:43:a4:19:3b:7c:11:4c:cb:b5:d7:15:d9:ef:56:4e:
7e:a3:1a:fe:96:7e:de:8a:be:4a:61:ce:ab:53:30:04:71:6b:
d1:7e:3f:80:5b:95:88:41:a9:fa:23:d9:9a:1b:7b:c9:7f:b3:
a0:91:1e:ef:90:8c:fd:33:f2:9d:7c:75:d2:0a:70:38:3d:7e:
96:4b:79:c2:23:40:64:22:50:69:bc:36:bc:52:4f:9a:1e:0a:
c8:f4:4a:1a:06:42:dd:78:16:5e:6a:57:81:1d:37:49:a7:ed:
a3:32:94:e8:ba:28:91:3d:d7:97:8e:19:2c:e4:32:92:54:98:
2f:42:9d:5d:48:3b:54:e5:16:0f:3d:fa:00:7e:ec:27:cd:75:
80:9a:68:62:a3:d6:eb:64:2a:6b:2b:68:36:d1:b1:51:68:ec:
d0:1f:f3:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2UeVZF5BO2rlJtZDlXeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5
MGMxNTcwHhcNMjUwMTAyMTE0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDAzMmRjZjgwNzkwYWViNjAyZmUzNzljNWY2OTQ3ZmRlMTA1MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjE9F6WJ4rqJRkVpJysrYGc0TEIC
Ms89Xv6sP1s6MwyW7Rz5zl7yvSG61FWU69kPxjq5Fke39bAyrBLwVe3O0EJV82/D
/aX/NbaTdOzT2RtSBczC6efqyZ/bvr4XYLLQWSmyMakkPwh5RXkd4eOcDm8KcsXb
2NWIIUmixo9NXX9O2RGWKEJp8/+VDh1I1idr5tar2UCDhb2AFDUWIWMs8ytbs508
7CnWgV/pAbU/apwyiVqElT2Y62UhzNMsepdNKomqENS3E47DPJRvS0QE2zHsJRPq
FMoS06zZsI7lFJsIh932w0HF72ELPhuXhuS3gOwLz7fGUKjvBMcuZjp+bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0DLc+AeQrrYC/jecX2lH/eEFLlMB8GA1UdIwQY
MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt
ZTAzNGY2NWU3ZjYwLzEvSFFNdHo0QjVDdXRnTC1ONXhmYVVmOTRRVXVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw
LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufQQMA0G
CSqGSIb3DQEBCwUAA4IBAQB4OWW10mmoIJJqM+SELQMl+c8MQQN9bf9bVYpMuVNu
utumhRES368hZij3AQRi9IoJpdWad0+8Faq/Uc7pU2ThEEsHFcwVPe/wAdpRsIUK
D75hZOo0h/2xyt0EVf1DpBk7fBFMy7XXFdnvVk5+oxr+ln7eir5KYc6rUzAEcWvR
fj+AW5WIQan6I9maG3vJf7OgkR7vkIz9M/KdfHXSCnA4PX6WS3nCI0BkIlBpvDa8
Uk+aHgrI9EoaBkLdeBZealeBHTdJp+2jMpTouiiRPdeXjhks5DKSVJgvQp1dSDtU
5RYPPfoAfuwnzXWAmmhio9brZCprK2g20bFRaOzQH/O6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net