Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HIumX43oGnzkGuWt4G_NLwulwg0.roa
File: HIumX43oGnzkGuWt4G_NLwulwg0.roa (raw, json)
Hash identifier: 8gh4iUsZLyO8zHF+TsBNknxsLW0v498tkaP0csONxSo=
Subject key identifier: 1C:8B:A6:5F:8D:E8:1A:7C:E4:1A:E5:AD:E0:6F:CD:2F:0B:A5:C2:0D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC818BA71C0048CC067AA809A1EB40
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HIumX43oGnzkGuWt4G_NLwulwg0.roa
Signing time: Thu 02 Jan 2025 07:48:12 +0000
ROA not before: Thu 02 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 159.255.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:81:8b:a7:1c:00:48:cc:06:7a:a8:09:a1:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c8ba65f8de81a7ce41ae5ade06fcd2f0ba5c20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:53:eb:89:dd:78:18:77:e7:a5:70:f9:c9:
95:d2:9a:09:aa:ad:b0:c0:da:52:13:f3:67:e5:16:
dd:cf:9e:19:9f:c7:d5:c1:10:c5:83:0c:5a:d7:d7:
a2:2a:45:55:32:14:c7:a3:1e:06:4c:fe:b9:d2:64:
47:91:27:ce:6d:3c:a1:c7:0b:91:8c:a7:58:4c:a1:
05:b4:fa:09:b6:23:4a:02:69:f1:a9:5f:07:98:f2:
ec:5f:80:63:ff:e6:ff:4c:70:d2:37:df:fb:b8:3c:
a6:92:e3:d5:e5:e3:e1:9c:53:b9:f9:e4:20:46:f6:
35:90:1e:ce:85:74:60:50:8e:32:72:f2:34:35:87:
42:52:d7:22:8a:5c:38:2e:d0:f0:cb:12:53:03:fa:
1f:3d:a3:8d:32:58:af:8a:fe:47:2d:52:e4:43:7f:
41:2c:fe:ca:d0:3c:f5:5c:62:ad:4a:b8:3b:de:f6:
5c:b5:b6:06:c2:6e:b1:f5:20:ab:06:ca:58:b4:1c:
97:42:86:d6:0d:42:30:60:89:56:34:06:50:7b:f4:
bc:a5:71:82:da:65:25:b3:6f:e5:8b:b0:e9:26:1e:
ed:b4:e4:50:dd:2f:b7:d6:22:09:13:64:52:39:23:
26:32:d3:a0:be:e7:d1:ec:14:15:24:b8:eb:07:c8:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8B:A6:5F:8D:E8:1A:7C:E4:1A:E5:AD:E0:6F:CD:2F:0B:A5:C2:0D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HIumX43oGnzkGuWt4G_NLwulwg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.32.0/23
Signature Algorithm: sha256WithRSAEncryption
78:15:81:d5:b6:4d:e5:56:e6:1b:bd:69:96:e4:e2:2a:07:db:
50:f0:dc:0c:f3:44:46:38:fe:26:4e:08:ce:9c:21:1e:64:ca:
64:ff:f1:18:40:94:7d:74:b4:74:97:81:d6:9f:43:64:ed:57:
73:25:a7:e8:43:a1:9c:95:e4:16:db:51:e6:a7:34:e0:6e:6c:
09:88:87:5b:1f:6d:86:0a:24:5f:df:ae:b5:1e:9b:03:f9:fe:
c5:0f:d7:65:0a:95:fd:f9:64:f6:a2:05:76:dc:63:18:c2:a0:
65:12:c4:17:96:18:1a:38:f5:48:c6:9d:72:d2:4e:c4:4c:32:
2a:dc:ed:5c:f9:8f:54:43:16:13:8b:b6:fb:7a:5f:ef:d8:fb:
28:6a:36:12:53:62:5d:8e:8e:f8:c1:cf:27:5e:ea:40:5e:f8:
0d:d8:9a:3f:d0:da:88:42:91:f2:e5:e4:c9:b6:ff:f3:79:7b:
60:6c:9c:2d:9a:6e:1b:43:da:b3:40:dc:cb:6d:74:e0:df:4d:
a8:5a:0d:e4:9a:01:56:4a:fa:0f:61:11:79:8f:2f:00:ad:9f:
1a:eb:e8:43:0c:8f:0c:e2:04:60:d9:56:54:5b:60:4f:49:ce:
08:ad:62:60:71:33:88:92:52:83:2d:ee:b6:e5:85:56:fd:ac:
a4:a0:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:18:10 2025 by rpki-client