Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/HK8tZZEnH3XebSxA7uU7eXL76hY.roa
File: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (raw, json)
Hash identifier: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=
Subject key identifier: 1C:AF:2D:65:91:27:1F:75:DE:6D:2C:40:EE:E5:3B:79:72:FB:EA:16
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 019421437AC4C807ED64E6E33CE1AFB74E40
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/HK8tZZEnH3XebSxA7uU7eXL76hY.roa
Signing time: Wed 01 Jan 2025 09:47:38 +0000
ROA not before: Wed 01 Jan 2025 09:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203797
IP address blocks: 185.123.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:7a:c4:c8:07:ed:64:e6:e3:3c:e1:af:b7:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jan 1 09:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1caf2d6591271f75de6d2c40eee53b7972fbea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:49:44:be:e4:e7:05:01:11:11:33:c1:57:
7c:80:e2:cc:32:ad:0e:7f:5c:0f:6f:42:d8:38:7b:
bb:79:28:b5:9e:a6:05:ea:86:4b:77:3f:b8:ab:ee:
6f:a9:6f:31:3b:00:86:ba:22:70:c1:ba:03:63:1e:
56:e0:47:a1:77:ea:4b:78:d0:22:61:42:f4:f1:61:
13:f0:b4:09:d5:52:c3:93:3a:eb:c8:3f:46:d6:82:
97:b9:a0:12:b9:a1:26:ba:51:4e:f3:71:c3:e2:fa:
23:ea:58:27:fb:a7:03:88:b8:c9:1b:63:74:c0:46:
3f:a4:53:7a:4a:31:68:c3:cc:2b:cb:85:eb:ce:05:
f2:85:8d:83:3b:66:1d:54:95:ec:89:10:2d:8c:e6:
9f:fb:ea:a8:eb:c1:a5:54:44:0c:2a:72:42:40:6e:
8b:34:a8:77:e7:90:24:05:4b:f4:71:37:e6:bc:f7:
63:97:65:94:3d:30:4c:92:7c:1d:f7:77:59:b2:d8:
51:f7:8a:f1:59:66:ed:d6:dc:64:d3:dd:ad:e9:5b:
60:f1:a4:6e:c9:fa:0a:b8:40:9e:64:b4:b6:3d:a9:
69:be:f9:80:9c:85:90:34:59:44:fb:58:99:eb:9a:
d9:d0:ee:a6:34:cf:f0:4d:0a:79:eb:d4:a4:8e:4e:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:2D:65:91:27:1F:75:DE:6D:2C:40:EE:E5:3B:79:72:FB:EA:16
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/HK8tZZEnH3XebSxA7uU7eXL76hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.72.0/22
Signature Algorithm: sha256WithRSAEncryption
27:98:36:79:be:c9:99:e2:fc:b1:50:35:a2:3c:4a:b9:cf:a8:
74:e5:3b:5b:ba:47:3c:3e:ca:7b:ef:65:71:c1:83:9f:a0:5e:
b5:d8:ed:e3:9c:d4:72:8d:03:7b:02:14:bc:fe:05:44:bb:b7:
23:e6:d0:32:08:ef:fa:5a:33:cf:9b:31:4b:8f:71:22:2f:4c:
64:35:3d:f7:1c:67:9e:8f:6e:a9:1e:65:b8:3c:dd:f1:bb:76:
00:ca:30:b8:1a:de:ba:7c:db:b0:8d:c3:7c:d8:41:14:9a:0e:
26:b7:9a:4e:7d:57:3c:0c:58:77:0d:98:4a:aa:77:2a:ac:b8:
10:29:40:bd:67:30:bb:e0:c9:30:3b:c0:aa:cb:5e:68:63:0e:
30:fa:a7:b5:64:c0:ff:4e:e8:db:9e:2e:4c:b2:9e:fb:80:4e:
d5:bb:da:1c:12:a3:95:a9:02:a8:07:f0:1f:04:a0:75:d3:94:
b3:04:97:47:ae:9d:c1:fa:dc:75:5c:09:5b:06:af:1b:02:8a:
74:05:9d:28:da:3e:de:6a:5d:48:c7:ed:b1:06:05:9e:99:61:
89:48:a2:e5:f6:7f:af:55:75:35:a3:7d:4a:7d:a7:13:6b:c6:
1a:1d:2e:fd:84:0b:4a:ce:f1:66:ec:a3:97:60:1f:e6:5b:a5:
88:90:42:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ3rEyAftZObjPOGvt05AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzJhNmU1N2VjODFjYzVjYjQzYmI1MDM3NDliMzYwZjJi
MDVjM2IwHhcNMjUwMTAxMDk0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2FmMmQ2NTkxMjcxZjc1ZGU2ZDJjNDBlZWU1M2I3OTcyZmJlYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ZJRL7k5wUBEREzwVd8gOLMMq0O
f1wPb0LYOHu7eSi1nqYF6oZLdz+4q+5vqW8xOwCGuiJwwboDYx5W4Eehd+pLeNAi
YUL08WET8LQJ1VLDkzrryD9G1oKXuaASuaEmulFO83HD4voj6lgn+6cDiLjJG2N0
wEY/pFN6SjFow8wry4XrzgXyhY2DO2YdVJXsiRAtjOaf++qo68GlVEQMKnJCQG6L
NKh355AkBUv0cTfmvPdjl2WUPTBMknwd93dZsthR94rxWWbt1txk092t6Vtg8aRu
yfoKuECeZLS2PalpvvmAnIWQNFlE+1iZ65rZ0O6mNM/wTQp569Skjk5OQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFByvLWWRJx913m0sQO7lO3ly++oWMB8GA1UdIwQY
MBaAFIwypuV+yBzFy0O7UDdJs2DysFw7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2Et
Yzc0M2Q3YzBiYjIyLzEvSEs4dFpaRW5IM1hlYlN4QTd1VTdlWEw3NmhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2EtYzc0M2Q3YzBiYjIy
LzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXtIMA0G
CSqGSIb3DQEBCwUAA4IBAQAnmDZ5vsmZ4vyxUDWiPEq5z6h05Ttbukc8Psp772Vx
wYOfoF612O3jnNRyjQN7AhS8/gVEu7cj5tAyCO/6WjPPmzFLj3EiL0xkNT33HGee
j26pHmW4PN3xu3YAyjC4Gt66fNuwjcN82EEUmg4mt5pOfVc8DFh3DZhKqncqrLgQ
KUC9ZzC74MkwO8Cqy15oYw4w+qe1ZMD/Tujbni5Msp77gE7Vu9ocEqOVqQKoB/Af
BKB105SzBJdHrp3B+tx1XAlbBq8bAop0BZ0o2j7eal1Ix+2xBgWemWGJSKLl9n+v
VXU1o31KfacTa8YaHS79hAtKzvFm7KOXYB/mW6WIkELq
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net