Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/HncO7o0Hx6kmO3BNCUVPbF42-m8.roa
File: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (raw, json)
Hash identifier: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=
Subject key identifier: 1E:77:0E:EE:8D:07:C7:A9:26:3B:70:4D:09:45:4F:6C:5E:36:FA:6F
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0194274796F0FC6AF700E6890056E9CB30DC
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/HncO7o0Hx6kmO3BNCUVPbF42-m8.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207050
IP address blocks: 213.162.222.0/24 maxlen: 24
213.162.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:96:f0:fc:6a:f7:00:e6:89:00:56:e9:cb:30:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e770eee8d07c7a9263b704d09454f6c5e36fa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:f9:b0:c2:b7:05:24:e5:7f:78:83:01:11:
d5:f7:58:42:91:5f:3d:ac:19:65:de:94:a5:37:73:
23:a2:59:db:59:a5:4c:f4:8e:e9:57:1d:a7:3c:83:
89:42:00:2c:00:2a:df:8b:fa:87:a1:f1:1d:fd:01:
a8:0f:de:49:29:75:a9:5e:d3:21:e2:0d:c0:1a:7e:
81:36:8e:69:f4:17:84:82:93:ee:6b:41:47:5b:81:
10:95:f0:df:4f:9c:8b:f2:93:b4:c2:66:db:07:06:
59:0d:32:3e:46:cc:e6:39:14:21:8d:35:9c:eb:ed:
31:f7:11:ac:b2:f4:12:f6:70:98:18:a1:55:e8:fc:
13:92:c5:43:e3:50:7f:de:fc:53:ff:42:5d:0a:13:
49:93:ef:f7:cb:51:23:5c:bf:fd:81:12:a6:20:fd:
fd:d9:49:52:91:75:06:ff:62:3d:f9:a3:b8:49:bf:
98:95:28:33:b1:3b:5f:ff:94:cc:0e:8c:37:15:41:
36:51:07:b8:37:30:73:cf:a2:c0:a5:08:82:12:ce:
5d:e1:5f:2f:af:87:88:68:c6:d5:02:f3:d8:1f:b1:
b2:e5:d9:35:79:84:70:ca:21:21:25:6d:bc:b5:e7:
5d:72:59:6f:03:21:79:1c:e5:1d:20:ca:f6:74:7e:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:0E:EE:8D:07:C7:A9:26:3B:70:4D:09:45:4F:6C:5E:36:FA:6F
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/HncO7o0Hx6kmO3BNCUVPbF42-m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.222.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:a0:ed:f7:a7:c0:a5:15:84:6f:c7:76:52:55:f1:99:36:c8:
8f:c1:a4:e2:6c:3c:e8:0e:fc:56:ee:24:0d:28:c2:ca:26:65:
e5:8c:e6:b0:7d:2d:76:66:71:8e:61:93:7b:ee:d0:76:48:59:
6e:a0:57:31:ae:00:ed:97:2e:2b:9d:53:87:9c:c4:95:96:24:
50:77:6d:f8:fc:b0:2a:ee:7f:c9:10:fa:fa:fc:99:2c:4e:48:
31:26:9f:43:27:e9:6a:41:48:fc:cc:ee:f0:f7:7b:a4:3d:95:
15:39:96:f1:fe:aa:08:9d:41:a1:ce:41:6f:46:0b:0f:31:36:
7f:4e:f4:a9:1a:48:f2:27:87:d6:e7:2b:74:9d:36:c9:90:66:
66:eb:92:4f:5f:e3:d4:98:4e:e0:c6:4f:06:03:12:4d:c3:b4:
e7:72:51:64:7a:63:41:e0:b8:40:72:ff:6f:15:7f:46:ab:3c:
ed:fd:af:91:f9:ac:c3:04:97:ee:20:e7:9b:ea:b9:c5:0e:e9:
5e:1b:93:11:69:93:a3:34:ea:2f:1a:ad:02:8d:05:e0:25:77:
46:77:c7:98:fb:96:f6:55:ad:89:d0:3c:de:2c:ec:e7:dd:40:
b1:62:f6:65:47:c4:d3:1b:9b:63:e0:a5:e4:9a:12:c9:5f:e1:
a5:1a:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:11 2025 by rpki-client