Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/HZJZK1LDGniWHSTreLFu2CqFoKw.roa
File: HZJZK1LDGniWHSTreLFu2CqFoKw.roa (raw, json)
Hash identifier: 40ZMLNytGhjN7rMLqzH8llTGFye5F6mDvh5SBtZYngo=
Subject key identifier: 1D:92:59:2B:52:C3:1A:78:96:1D:24:EB:78:B1:6E:D8:2A:85:A0:AC
Certificate issuer: /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial: 0194266AD227251369D47FC333B4D9E955E7
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/HZJZK1LDGniWHSTreLFu2CqFoKw.roa
Signing time: Thu 02 Jan 2025 09:48:42 +0000
ROA not before: Thu 02 Jan 2025 09:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50585
IP address blocks: 185.53.84.0/22 maxlen: 22
193.105.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:d2:27:25:13:69:d4:7f:c3:33:b4:d9:e9:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Validity
Not Before: Jan 2 09:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d92592b52c31a78961d24eb78b16ed82a85a0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:90:4b:28:ac:18:cc:f7:98:e6:c6:a4:05:c6:
4c:2a:75:67:73:d9:6d:a8:1f:3f:9c:b9:c3:cc:5e:
1f:4a:16:9c:02:f8:a8:2f:aa:18:17:00:a4:12:2c:
2a:86:fd:d7:ef:10:1e:2b:1e:91:5c:14:98:d3:f3:
3d:5c:ed:e1:d3:3c:87:f9:b8:49:23:85:8e:62:84:
c3:a3:f9:a0:32:5b:89:fe:ef:13:06:c8:85:dd:6e:
68:8f:20:ee:d3:4e:6e:49:0c:87:c1:10:c9:72:c9:
3e:29:5d:58:7c:56:a8:be:86:5d:62:9b:5e:49:68:
1e:17:00:c9:83:a4:bb:1f:4b:1c:09:84:71:ae:57:
93:f5:cd:52:01:e8:f7:39:f5:e4:de:f0:c5:fc:92:
4a:09:d8:d2:91:66:e6:d3:ed:b4:01:fd:16:ae:3e:
d0:a5:96:73:f5:3a:54:06:fe:59:c3:4f:fc:51:78:
56:44:55:9c:78:b7:7a:16:b6:68:27:df:c6:b3:7f:
91:19:4b:1b:e7:19:65:25:10:29:a5:0d:94:19:e9:
df:3f:23:d7:a3:76:46:8e:e6:27:95:c8:7b:d9:91:
f6:1e:58:76:79:ef:9a:16:70:14:fa:0f:3d:71:e7:
7c:8a:f5:75:39:a8:40:6d:02:d8:f3:98:05:e2:d4:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:59:2B:52:C3:1A:78:96:1D:24:EB:78:B1:6E:D8:2A:85:A0:AC
X509v3 Authority Key Identifier:
keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/HZJZK1LDGniWHSTreLFu2CqFoKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.84.0/22
193.105.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9f:01:36:3e:af:66:62:32:27:1d:a2:71:e5:b3:1c:ba:76:
04:70:b9:a1:59:aa:3d:42:1e:39:ac:d8:18:46:a0:7f:f4:9b:
09:d3:54:4d:c7:96:54:49:75:71:21:62:c4:af:01:f2:77:71:
37:93:b4:f3:f1:e6:9e:f0:25:6f:5e:d5:4f:ba:e4:9f:cb:5f:
e5:49:30:79:e0:26:a9:b3:22:8d:73:9d:6b:58:c8:f3:1e:2e:
d9:32:e6:38:91:9e:ef:2b:92:af:32:08:7e:70:0c:51:94:4b:
6a:61:c2:9e:47:26:c2:ca:5b:90:be:e1:de:5a:c9:d2:a7:93:
95:39:16:2c:d5:31:c2:52:44:69:6f:cb:42:81:09:b5:2a:98:
55:ab:aa:b9:98:42:ee:e4:e9:f7:d7:af:c3:8c:d4:2f:14:c2:
95:28:e4:58:9c:6e:ef:9a:40:55:6a:67:da:15:f2:ec:4c:ad:
84:aa:4e:bd:f2:c0:14:ff:bc:24:54:7b:d5:5f:59:76:2a:58:
a8:a2:f3:83:1f:01:12:e3:0f:69:87:f3:d1:b7:3b:63:15:90:
61:46:e7:72:d8:b5:31:3b:70:04:3c:a9:4d:ec:3b:56:75:d5:
7b:d3:1b:75:34:5c:76:0f:b3:c1:48:e0:b9:27:8c:d3:e3:5d:
6f:10:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:47:13 2025 by rpki-client