Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hu50rbKmbykhZtOMtWuhmVOHjyc.roa
File: hu50rbKmbykhZtOMtWuhmVOHjyc.roa (raw, json)
Hash identifier: PZAQyQjasduEnWctO8hv8o8nh1FrIOWmOKVn5GmvXuc=
Subject key identifier: 86:EE:74:AD:B2:A6:6F:29:21:66:D3:8C:B5:6B:A1:99:53:87:8F:27
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C1B31A212FB447DE39011F62C71A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hu50rbKmbykhZtOMtWuhmVOHjyc.roa
Signing time: Thu 02 Jan 2025 17:53:36 +0000
ROA not before: Thu 02 Jan 2025 17:53:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 84.32.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c1:b3:1a:21:2f:b4:47:de:39:01:1f:62:c7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86ee74adb2a66f292166d38cb56ba19953878f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:03:bf:03:08:1d:8e:f0:46:3e:36:aa:76:
b2:ec:52:a0:dc:4e:62:56:29:de:cb:35:b4:ac:ee:
1a:51:8d:0f:4a:7c:a0:e9:2a:6f:f7:82:88:de:8f:
09:1f:54:b7:21:75:80:64:07:47:2d:3e:0d:98:03:
78:8d:33:f7:ab:46:a6:16:6e:5f:f8:cd:62:70:39:
a6:3c:b2:86:be:5f:e7:f9:10:82:ce:33:f7:66:ad:
e7:b1:e8:39:b7:f5:b3:f7:d2:d6:81:8e:8a:8a:72:
ac:11:de:2a:3f:5c:23:fa:3d:91:f2:ed:73:d7:b9:
cc:20:92:ea:18:a5:e6:7c:34:19:47:25:ed:07:f2:
a9:c1:5a:5d:61:3b:42:06:b5:35:db:69:91:fb:b7:
00:5a:e9:f6:64:fe:39:f0:65:c0:92:87:ee:a0:d3:
29:8d:af:9e:ab:5b:52:8e:18:69:82:81:79:aa:2f:
e2:bc:2c:da:16:f5:81:b4:4b:64:0a:eb:a7:e4:d6:
84:8b:86:18:56:28:75:25:6c:3f:51:df:88:e0:89:
43:f8:bf:fb:f4:f4:a4:43:27:d6:e9:88:e9:ae:c3:
54:e7:f9:9a:a8:f9:e4:58:19:5f:d5:c5:30:66:be:
75:1c:ee:a4:93:b0:27:c8:c3:c7:f7:b1:9b:82:5c:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EE:74:AD:B2:A6:6F:29:21:66:D3:8C:B5:6B:A1:99:53:87:8F:27
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hu50rbKmbykhZtOMtWuhmVOHjyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.78.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ea:70:cc:70:72:df:2d:f9:ba:9c:12:f1:ed:cb:db:d5:ed:
5d:3e:0a:c8:4f:9f:cb:aa:3d:e6:5b:a2:60:ba:f3:13:c2:ae:
9f:99:f2:59:7d:7b:7f:44:ec:59:5b:1c:b1:21:fe:10:c3:b8:
43:cb:f2:ea:51:85:69:ac:20:f6:13:a9:8d:c6:fb:3f:62:66:
a6:73:83:35:05:f7:b7:a5:c8:47:70:11:b9:15:0b:40:70:7a:
40:1e:81:ad:ee:27:e9:b2:9e:b9:8a:3e:53:0e:dd:28:5b:93:
71:6f:6d:40:81:2c:f5:8e:76:ba:d6:06:84:0d:ae:ca:c3:81:
0b:98:b8:53:f9:93:61:57:1f:99:4f:c2:e6:c0:03:8e:41:8f:
70:7f:01:0b:eb:b3:a1:10:1d:06:c5:48:9a:54:dc:3f:a8:4d:
60:b0:99:ae:c7:eb:a1:bf:98:13:c6:81:73:eb:0d:c8:94:59:
9d:98:4b:72:4d:cc:2d:0a:4d:84:fc:6c:89:eb:57:26:06:4c:
5e:e7:e6:ec:42:4b:a9:1c:b8:96:d0:45:a4:1d:dd:0c:78:89:
18:0a:1d:fe:fb:e1:94:b2:2d:62:6b:c6:85:3b:cb:a9:ed:17:
ac:72:49:ac:26:11:3b:3a:aa:e6:4e:0f:18:57:f0:59:19:17:
cc:57:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:36:29 2025 by rpki-client