Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/HuL3gMV6_zC2v4RtUtbhqokAt3o.roa
File: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (raw, json)
Hash identifier: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=
Subject key identifier: 1E:E2:F7:80:C5:7A:FF:30:B6:BF:84:6D:52:D6:E1:AA:89:00:B7:7A
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D65770FC7EACA2CE9637A0DF55A9E1
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/HuL3gMV6_zC2v4RtUtbhqokAt3o.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211239
IP address blocks: 213.169.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:70:fc:7e:ac:a2:ce:96:37:a0:df:55:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee2f780c57aff30b6bf846d52d6e1aa8900b77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:53:bd:bd:d5:0d:9a:40:d1:eb:42:ce:1a:
13:ec:54:65:5b:be:e9:1c:99:39:4b:48:06:b4:38:
9d:92:bf:4b:09:f9:1f:11:c5:ef:83:b4:40:5b:89:
44:0c:57:7c:3c:76:36:cf:0b:a8:26:d6:b0:27:6c:
05:10:75:a0:3f:8d:f8:dc:d8:7b:fb:53:a2:23:ac:
b2:e7:78:61:26:23:2b:c6:e7:fc:72:bc:8d:a6:00:
9a:a9:43:e3:65:cc:6d:4b:1e:6f:53:40:fa:14:7c:
08:2d:23:7a:64:ce:a6:3f:7e:0c:ad:3c:dc:29:3a:
4e:48:bb:a0:9e:01:99:39:65:53:43:bc:d2:fe:d0:
b3:ad:03:9d:9f:18:1b:bd:ef:2f:fd:b7:ec:df:f5:
0d:86:2b:32:a0:5f:76:3a:57:a2:f4:8e:95:35:c2:
e4:3e:07:34:af:57:9c:6a:2e:86:ec:0a:fe:49:e6:
5e:d0:18:6d:fc:55:be:ab:e7:5d:f4:be:1a:b6:c4:
ce:26:24:15:78:93:8e:cb:c9:5e:0e:33:40:ec:97:
24:31:fc:1e:63:5d:c8:5f:7e:86:8f:c6:03:38:62:
fc:de:51:09:8e:ea:68:da:16:30:da:13:a3:0b:48:
0d:6a:81:1e:bf:18:cd:43:9f:b6:fd:36:14:c3:79:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:F7:80:C5:7A:FF:30:B6:BF:84:6D:52:D6:E1:AA:89:00:B7:7A
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/HuL3gMV6_zC2v4RtUtbhqokAt3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.156.0/24
Signature Algorithm: sha256WithRSAEncryption
50:88:47:cf:48:64:fd:1b:58:cb:00:d5:fa:15:32:65:50:6a:
66:de:14:e1:4b:20:69:b2:8a:77:12:dd:11:5d:47:79:2a:75:
17:57:83:5e:a5:ee:de:07:57:e4:03:5d:13:8f:5f:c4:06:29:
bf:ed:9a:47:1f:b7:13:d8:e9:4b:36:30:65:57:38:a6:06:65:
48:5c:4d:b9:87:18:43:f9:f1:02:94:9d:16:17:de:a5:ff:a5:
dd:18:57:3b:29:1e:7d:b4:7b:d0:fa:8d:44:1a:b7:75:bc:ce:
44:ea:e7:1c:0d:75:5f:62:55:f9:da:86:15:51:02:99:48:1e:
d6:38:85:1d:44:04:26:63:a6:9b:a6:58:c7:19:63:fc:d7:67:
0a:34:b3:40:a6:a5:a9:70:5a:fc:59:9b:cd:90:3e:ec:79:02:
60:b8:dd:c0:e5:49:54:45:f5:50:3a:d5:b5:2b:c5:14:74:2b:
33:f6:29:e8:c0:e5:9a:40:2b:e6:37:f9:6a:a4:74:50:95:d8:
2c:f4:79:57:7f:e6:04:f7:09:d9:34:fd:d9:bc:7c:e3:8f:26:
e0:a8:40:b6:01:c5:1c:3b:6c:cf:1c:f4:24:e4:c5:1d:c0:d1:
ea:87:76:8f:c5:59:d0:b7:84:c0:c2:5f:82:0c:94:c3:ca:4f:
14:00:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:21 2025 by rpki-client