Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/1HQAA-wDBoSO6TUaw2Uw2fcBK50.roa
File: 1HQAA-wDBoSO6TUaw2Uw2fcBK50.roa (raw, json)
Hash identifier: 3htMu2Mi3FI+X0S4i0PJNg5ZmeOK4IsAFbd7/gToRsU=
Subject key identifier: D4:74:00:03:EC:03:06:84:8E:E9:35:1A:C3:65:30:D9:F7:01:2B:9D
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018C96A2C27343A0EF8F3E7F0E878D58C309
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/1HQAA-wDBoSO6TUaw2Uw2fcBK50.roa
Signing time: Sat 23 Dec 2023 12:24:58 +0000
ROA not before: Sat 23 Dec 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:a2:c2:73:43:a0:ef:8f:3e:7f:0e:87:8d:58:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 23 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4740003ec0306848ee9351ac36530d9f7012b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:82:8b:cd:b5:05:ad:9e:ed:2d:0d:7e:5a:
d2:bb:d5:4d:3b:a2:09:30:6a:8c:47:16:85:49:2e:
75:41:87:1f:cd:1c:f8:aa:61:b2:70:66:eb:62:0b:
7b:31:78:d9:2b:12:ae:d6:93:d8:68:fb:8d:82:6b:
0c:b0:c7:31:c1:a9:1a:b7:0c:08:87:91:ef:d4:49:
91:af:ab:4f:b1:de:d0:29:11:dc:eb:bd:65:e1:76:
b8:bd:0b:cc:f5:f0:34:00:b2:c6:e1:e3:52:1e:c5:
e7:d7:e7:f4:bd:9f:b5:16:2e:2d:26:09:04:88:23:
8c:22:0f:ab:f3:86:ac:f0:1c:93:bc:0f:cb:44:9b:
0a:10:85:20:79:56:a9:f0:af:03:66:94:74:5f:89:
33:4f:a1:da:3b:99:eb:69:c5:16:36:41:d7:0a:55:
31:35:51:11:d8:31:c4:ac:1b:37:2f:0d:79:3c:88:
31:32:53:7b:6a:95:d0:66:16:51:20:43:97:6f:64:
20:5f:37:3e:1d:5c:9a:45:14:30:42:71:49:9c:a3:
14:25:90:3b:a0:05:f4:ac:d0:d6:13:1b:d0:a7:d1:
ee:33:6a:89:dd:38:c3:62:85:52:be:85:d6:89:83:
ce:54:55:8a:53:55:4e:46:ce:ad:38:5e:72:a4:a8:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:00:03:EC:03:06:84:8E:E9:35:1A:C3:65:30:D9:F7:01:2B:9D
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/1HQAA-wDBoSO6TUaw2Uw2fcBK50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
Signature Algorithm: sha256WithRSAEncryption
d2:52:06:30:0c:4f:eb:fb:2e:3b:1d:b0:7c:2d:09:7b:83:44:
af:15:2d:f2:86:2e:65:88:7e:23:bf:d8:45:9d:4e:e3:f7:ef:
bf:c4:ae:ef:72:00:67:0f:42:4d:5b:04:3b:a8:d1:7b:fc:0c:
50:ce:37:f3:3c:5a:ce:92:88:f9:63:6b:6a:c0:d5:07:0c:2c:
61:02:3a:79:ae:e8:0c:48:10:b4:b5:de:d7:83:55:4e:33:cd:
9a:10:a5:54:c6:0c:b5:14:cb:d1:94:3c:0c:02:46:9e:db:d1:
ba:bc:08:a9:ba:09:e9:46:4c:63:7a:5e:62:88:19:07:eb:1f:
2d:98:62:e7:5c:21:9b:13:2a:4e:b1:9e:f4:7d:e3:1d:cb:33:
1b:ee:db:c6:c5:e1:d3:13:07:09:66:c0:a1:45:3d:97:98:46:
29:6a:45:74:ce:75:4b:79:d5:06:a9:6a:fe:91:d8:e4:c1:ed:
b9:20:6e:9a:60:89:44:15:72:74:1e:74:c4:3e:4b:7d:d2:3b:
f8:43:f4:ad:42:2b:0d:53:12:3f:4b:81:0a:e2:3b:7a:22:96:
0c:a5:9e:9d:ba:db:fd:5f:fd:a6:83:56:9c:fd:7b:d8:80:a4:
6e:26:67:ca:be:a4:a6:a0:33:26:44:1b:50:9a:1d:bf:8e:d5:
d4:73:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:59 2025 by rpki-client