Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/hzEl50X-HK9H3rATZ6GMdKA4sDQ.roa
File: hzEl50X-HK9H3rATZ6GMdKA4sDQ.roa (raw, json)
Hash identifier: Qsefr5BUiMy2rqo2USmsjdMuNx9/rjIcX4pXPuOto6M=
Subject key identifier: 87:31:25:E7:45:FE:1C:AF:47:DE:B0:13:67:A1:8C:74:A0:38:B0:34
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 019425218A11E3AB24BF61B7EF9E74DD679F
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/hzEl50X-HK9H3rATZ6GMdKA4sDQ.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11342
IP address blocks: 185.156.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8a:11:e3:ab:24:bf:61:b7:ef:9e:74:dd:67:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=873125e745fe1caf47deb01367a18c74a038b034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:d0:93:cd:b6:08:8d:74:c6:5a:e4:54:01:
23:96:31:65:aa:23:ed:0f:52:a1:06:f2:60:3c:e4:
a4:47:d4:93:db:0d:f0:cd:9a:87:f1:84:79:dc:26:
49:43:a4:9a:c0:9c:13:ea:02:50:96:88:e0:0d:8d:
fe:c1:a5:c8:ff:ba:f1:11:74:b7:20:81:91:e2:f8:
d6:b3:b7:ca:aa:d8:79:32:48:bb:cd:03:1b:49:4b:
a5:42:ff:99:0b:d3:b1:01:48:9c:8b:74:b8:de:96:
3a:90:30:eb:1c:9c:e3:3f:d4:22:50:f1:be:9c:dc:
74:5a:a1:4d:25:ff:f7:4b:06:64:8a:f7:fb:46:a8:
a3:12:5a:7b:14:13:bb:12:a1:11:13:08:f8:dc:b1:
87:28:90:b2:3e:c1:5a:40:08:f9:4c:77:2c:0c:2f:
78:09:8e:94:f1:56:81:f7:04:41:1a:f1:fd:9f:f7:
19:22:4c:ae:15:d6:fa:04:34:1c:f5:dd:b8:39:55:
87:ae:de:ff:07:12:77:2c:1d:ee:e1:f4:0b:12:c5:
8a:17:69:d8:fb:1b:9a:64:73:99:fc:11:eb:c3:d5:
97:5e:f7:52:60:af:43:dc:e4:43:b2:ec:81:17:71:
67:12:b7:1c:99:71:31:b0:bb:d2:89:0a:24:06:b4:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:25:E7:45:FE:1C:AF:47:DE:B0:13:67:A1:8C:74:A0:38:B0:34
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/hzEl50X-HK9H3rATZ6GMdKA4sDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
73:33:e9:47:91:c7:15:42:ab:ba:6b:8d:aa:2e:6a:d9:77:ab:
ef:1f:a9:f2:f4:23:51:33:d8:89:60:64:38:b5:f5:2d:53:9b:
c0:6c:42:87:ab:1b:5f:3b:c2:51:c8:d1:b9:38:4c:af:9b:a9:
75:ac:a4:c1:9b:d3:2e:14:03:0a:89:4b:9f:3c:b8:56:12:44:
d3:25:17:e0:b5:d9:b9:cd:ff:99:fd:78:42:06:98:7a:c9:8f:
48:30:86:8e:ae:ac:bb:bf:43:64:1d:f8:10:1a:1a:b9:a9:15:
cd:a7:5b:be:27:30:7b:cb:fc:4f:4d:14:d2:93:e1:5c:28:ec:
af:e8:45:ab:d3:6b:78:82:aa:97:58:c0:38:7b:33:eb:79:8e:
95:4f:7a:3b:b0:86:5e:6e:71:57:b8:65:38:19:ff:c3:ee:d2:
15:30:71:7c:41:69:bb:c6:a9:95:08:d1:5b:28:a3:75:61:f6:
e5:f5:ce:a0:36:d0:d8:b3:83:ed:3b:c8:9c:25:92:6a:ec:b4:
26:2d:38:9e:c7:e5:44:54:52:52:86:cd:b1:37:d4:ee:01:42:
00:7a:58:11:8e:ce:4d:5b:49:90:7a:4f:7f:55:da:df:67:88:
1d:0a:1d:fd:ba:fe:47:7b:dd:b1:45:2d:28:a6:99:91:a7:bb:
30:78:2c:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYoR46skv2G375503WefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx
ZGQ2ZTAwHhcNMjUwMTAyMDM0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzMxMjVlNzQ1ZmUxY2FmNDdkZWIwMTM2N2ExOGM3NGEwMzhiMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6zQk822CI10xlrkVAEjljFlqiPt
D1KhBvJgPOSkR9ST2w3wzZqH8YR53CZJQ6SawJwT6gJQlojgDY3+waXI/7rxEXS3
IIGR4vjWs7fKqth5Mki7zQMbSUulQv+ZC9OxAUici3S43pY6kDDrHJzjP9QiUPG+
nNx0WqFNJf/3SwZkivf7RqijElp7FBO7EqEREwj43LGHKJCyPsFaQAj5THcsDC94
CY6U8VaB9wRBGvH9n/cZIkyuFdb6BDQc9d24OVWHrt7/BxJ3LB3u4fQLEsWKF2nY
+xuaZHOZ/BHrw9WXXvdSYK9D3ORDsuyBF3FnErccmXExsLvSiQokBrQevQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIcxJedF/hyvR96wE2ehjHSgOLA0MB8GA1UdIwQY
MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt
ZDdjNjcwODQxNGZhLzEvaHpFbDUwWC1ISzlIM3JBVFo2R01kS0E0c0RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh
LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZy4MA0G
CSqGSIb3DQEBCwUAA4IBAQBzM+lHkccVQqu6a42qLmrZd6vvH6ny9CNRM9iJYGQ4
tfUtU5vAbEKHqxtfO8JRyNG5OEyvm6l1rKTBm9MuFAMKiUufPLhWEkTTJRfgtdm5
zf+Z/XhCBph6yY9IMIaOrqy7v0NkHfgQGhq5qRXNp1u+JzB7y/xPTRTSk+FcKOyv
6EWr02t4gqqXWMA4ezPreY6VT3o7sIZebnFXuGU4Gf/D7tIVMHF8QWm7xqmVCNFb
KKN1Yfbl9c6gNtDYs4PtO8icJZJq7LQmLTiex+VEVFJShs2xN9TuAUIAelgRjs5N
W0mQek9/VdrfZ4gdCh39uv5He92xRS0oppmRp7sweCwZ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net