Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/ho-t7JjyWr_zMWacH3uHYTqBdLA.roa
File: ho-t7JjyWr_zMWacH3uHYTqBdLA.roa (raw, json)
Hash identifier: 8COSDmKe8nYPeLWXmSoI4RIlESYSif0k2xHY4OG8x2U=
Subject key identifier: 86:8F:AD:EC:98:F2:5A:BF:F3:31:66:9C:1F:7B:87:61:3A:81:74:B0
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 15CB02F4
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/ho-t7JjyWr_zMWacH3uHYTqBdLA.roa
Signing time: Fri 04 Feb 2022 07:46:07 +0000
ROA not before: Fri 04 Feb 2022 07:46:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49515
IP address blocks: 104.160.13.0/24 maxlen: 24
5.157.31.0/24 maxlen: 24
104.160.12.0/24 maxlen: 24
5.157.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365626100 (0x15cb02f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Feb 4 07:46:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=868fadec98f25abff331669c1f7b87613a8174b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:2b:c5:b5:ef:16:42:16:60:28:32:4f:76:
05:a6:52:46:3a:f5:6b:9b:53:71:94:13:9d:31:7f:
37:36:e5:53:1d:65:99:42:b0:fb:2e:5c:93:2d:eb:
10:22:b2:be:80:bb:33:09:08:f0:59:10:c6:a1:a9:
bb:2a:7f:1a:cf:6d:1d:53:3e:3c:db:5d:49:b7:0f:
69:25:fa:d4:7c:9a:34:3c:36:20:be:f7:90:f5:0d:
4e:62:5d:e1:62:8f:2c:c4:8d:b4:18:d6:ae:11:97:
0e:4a:67:35:c8:d8:55:4b:7c:de:ef:4f:b1:f1:98:
ac:9a:9a:3c:d8:a6:5f:6f:62:0f:7c:d3:8a:35:f8:
79:a9:3b:3f:c5:73:0c:36:7b:43:36:5e:04:c8:ce:
55:9f:39:c7:96:83:d3:dd:68:cc:a7:50:fd:43:31:
6b:19:7f:26:d6:12:4c:46:df:5c:b8:bf:87:ba:15:
e8:16:fe:63:15:86:96:83:9d:01:a5:29:92:b1:da:
01:9a:66:00:6c:e4:4a:c5:91:03:ec:14:30:51:b5:
d8:50:a9:a7:18:ef:e2:eb:78:1e:10:91:96:50:e7:
ff:38:63:df:16:f5:1a:9d:f9:a1:98:e4:82:70:a0:
35:86:bb:aa:91:73:dc:20:e3:48:28:d2:60:43:af:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:AD:EC:98:F2:5A:BF:F3:31:66:9C:1F:7B:87:61:3A:81:74:B0
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/ho-t7JjyWr_zMWacH3uHYTqBdLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.30.0/23
104.160.12.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:28:5c:62:eb:1e:57:e1:f8:5e:46:96:1a:c9:4c:1a:86:12:
c6:df:00:3d:f0:76:0d:09:19:d6:57:7b:9f:19:d4:fd:34:ac:
f7:35:a6:54:c1:40:df:e5:ee:1a:21:52:73:8f:77:fc:11:3b:
e1:c4:e3:a0:05:1c:14:c7:2b:ff:44:cc:10:63:47:66:e9:c1:
c0:c1:54:2c:d4:6b:71:2c:6a:45:9f:36:bb:5f:cd:2d:2f:34:
ce:8a:d8:51:8c:4b:d3:f5:14:54:a1:21:f3:2a:00:c5:54:78:
bc:47:1d:85:e7:07:56:e6:33:63:35:69:a8:0a:17:c1:97:51:
45:95:55:a6:96:84:28:f7:5a:31:75:8b:10:7d:7e:24:0e:90:
58:5c:70:c5:e2:cd:b7:fa:00:b3:8d:e8:0e:c3:20:3d:6c:08:
db:6e:39:60:22:14:69:1f:9e:68:bc:05:c8:2e:28:89:2b:5d:
40:2e:22:a7:66:58:7c:9d:ac:dd:54:83:0b:ea:5d:58:78:61:
4b:1b:0e:00:3f:15:b4:53:2c:65:01:2f:a1:7b:49:5b:a0:aa:
e7:26:32:7d:6a:e1:52:76:38:42:64:dd:97:d8:fa:9d:e3:32:
15:12:41:2d:fa:e1:77:71:4b:fe:7b:cf:49:24:4e:f0:ec:50:
64:a9:93:db
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFcsC9DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGYzNzZkZjVmOWVmNDg3YzgyYjMxYTg3NWM2YTQ5NmQ3OWNhMGQ3MB4XDTIyMDIw
NDA3NDYwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODY4ZmFkZWM5OGYy
NWFiZmYzMzE2NjljMWY3Yjg3NjEzYTgxNzRiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5YK8W17xZCFmAoMk92BaZSRjr1a5tTcZQTnTF/NzblUx1l
mUKw+y5cky3rECKyvoC7MwkI8FkQxqGpuyp/Gs9tHVM+PNtdSbcPaSX61HyaNDw2
IL73kPUNTmJd4WKPLMSNtBjWrhGXDkpnNcjYVUt83u9PsfGYrJqaPNimX29iD3zT
ijX4eak7P8VzDDZ7QzZeBMjOVZ85x5aD091ozKdQ/UMxaxl/JtYSTEbfXLi/h7oV
6Bb+YxWGloOdAaUpkrHaAZpmAGzkSsWRA+wUMFG12FCppxjv4ut4HhCRllDn/zhj
3xb1Gp35oZjkgnCgNYa7qpFz3CDjSCjSYEOvuukCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSGj63smPJav/MxZpwfe4dhOoF0sDAfBgNVHSMEGDAWgBSA83bfX570h8gr
Mah1xqSW15yg1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dQTjIzMS1lOUlmSUt6R29kY2FrbHRlY29OYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvNzk1ZGVkLWZjZGYtNDdjZi1hZjgzLWE0YmMyODE2NjQzYS8x
L2hvLXQ3Smp5V3Jfek1XYWNIM3VIWVRxQmRMQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
Nzk1ZGVkLWZjZGYtNDdjZi1hZjgzLWE0YmMyODE2NjQzYS8xL2dQTjIzMS1lOUlm
SUt6R29kY2FrbHRlY29OYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAQWdHgMEAWigDDANBgkqhkiG9w0B
AQsFAAOCAQEALyhcYuseV+H4XkaWGslMGoYSxt8APfB2DQkZ1ld7nxnU/TSs9zWm
VMFA3+XuGiFSc493/BE74cTjoAUcFMcr/0TMEGNHZunBwMFULNRrcSxqRZ82u1/N
LS80zorYUYxL0/UUVKEh8yoAxVR4vEcdhecHVuYzYzVpqAoXwZdRRZVVppaEKPda
MXWLEH1+JA6QWFxwxeLNt/oAs43oDsMgPWwI2245YCIUaR+eaLwFyC4oiStdQC4i
p2ZYfJ2s3VSDC+pdWHhhSxsOAD8VtFMsZQEvoXtJW6Cq5yYyfWrhUnY4QmTdl9j6
neMyFRJBLfrhd3FL/nvPSSRO8OxQZKmT2w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:10:46 2025 by rpki-client