Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/HkwKyi5lS_M8OW_0n5IUfpu2FQc.roa
File: HkwKyi5lS_M8OW_0n5IUfpu2FQc.roa (raw, json)
Hash identifier: /x9svZeWnoBRINoxUHD2+gxse/RwxJcstOiIvjRVdjQ=
Subject key identifier: 1E:4C:0A:CA:2E:65:4B:F3:3C:39:6F:F4:9F:92:14:7E:9B:B6:15:07
Certificate issuer: /CN=9c2e943071a38449e97847c316ba6194fc22a495
Certificate serial: 04E45D8E
Authority key identifier: 9C:2E:94:30:71:A3:84:49:E9:78:47:C3:16:BA:61:94:FC:22:A4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nC6UMHGjhEnpeEfDFrphlPwipJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/HkwKyi5lS_M8OW_0n5IUfpu2FQc.roa
Signing time: Sat 01 Jan 2022 06:55:28 +0000
ROA not before: Sat 01 Jan 2022 06:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.35.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82075022 (0x4e45d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2e943071a38449e97847c316ba6194fc22a495
Validity
Not Before: Jan 1 06:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e4c0aca2e654bf33c396ff49f92147e9bb61507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:62:30:24:9d:a2:a2:17:27:e2:73:b9:42:
0c:31:d6:a3:83:ed:e6:5e:43:44:a9:6d:c3:d4:cb:
06:12:6b:00:87:ab:51:2f:36:81:ff:94:8c:67:17:
0f:1c:01:61:47:28:3d:cc:4b:e0:12:a0:75:c1:21:
34:64:54:8a:a4:79:3b:d4:b8:14:9c:02:9b:35:c6:
de:cc:32:1f:26:6b:87:b1:6b:ae:43:39:e9:bd:4e:
47:69:87:f4:5b:56:6a:a1:0a:b4:f9:68:82:a6:f4:
2f:0e:5b:9f:58:72:4a:96:70:43:d6:cc:80:e7:a9:
86:ce:52:a0:4b:52:fa:61:da:28:fd:86:8b:3f:3f:
e1:c1:82:35:5c:59:4b:af:d4:1e:81:c9:b4:19:81:
4a:2e:76:04:bf:b8:a6:37:ee:06:41:9d:fd:42:74:
a5:e2:4e:18:9e:9d:96:ac:e1:5f:fc:9d:6c:a3:10:
f6:0d:c2:d2:e9:bf:42:9c:d0:78:4d:48:1f:0a:25:
fb:bf:09:7b:ba:1d:f2:50:c7:a9:75:b1:8b:52:03:
fb:5f:d1:eb:fc:07:91:e2:df:dc:de:5d:17:7e:a8:
10:da:c4:c3:b3:8b:83:c9:56:ec:35:6b:8f:6a:af:
9d:49:c7:7c:bc:81:84:38:18:49:5a:84:eb:8e:27:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4C:0A:CA:2E:65:4B:F3:3C:39:6F:F4:9F:92:14:7E:9B:B6:15:07
X509v3 Authority Key Identifier:
keyid:9C:2E:94:30:71:A3:84:49:E9:78:47:C3:16:BA:61:94:FC:22:A4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nC6UMHGjhEnpeEfDFrphlPwipJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/HkwKyi5lS_M8OW_0n5IUfpu2FQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/nC6UMHGjhEnpeEfDFrphlPwipJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7d:73:65:ae:ad:05:ce:26:5b:11:4d:0d:c7:4c:48:56:c1:
75:d4:5e:ef:94:c3:cf:58:91:b0:cf:f8:9f:9c:7f:70:f9:a2:
51:d9:27:bf:fd:a0:d9:1a:b7:7c:90:a7:3b:8c:e7:39:f5:e9:
84:a2:42:9a:3f:0c:f6:f8:20:50:90:11:c6:84:7b:d6:13:f0:
d7:e7:ab:ed:0f:9e:57:d2:86:71:9d:f9:c9:c2:e2:40:fd:ad:
05:ff:ca:5e:69:67:a9:4a:16:fe:f3:d7:52:3e:80:03:74:46:
80:93:7b:8f:d9:24:d6:c6:32:5d:1b:7a:b8:80:54:a3:79:cf:
5f:57:96:84:04:ef:bb:6f:c7:af:67:bb:51:47:15:70:3d:73:
3b:11:a8:2d:6d:e9:3b:cc:70:11:37:cf:f5:31:7c:dc:78:2e:
52:67:4c:27:ca:0b:d3:a6:18:88:b7:e0:74:a1:27:10:02:c7:
fb:92:6b:c2:5b:fd:8d:2f:f5:8e:69:71:41:60:a5:e7:8b:74:
29:ee:7f:fc:75:87:f2:95:1f:58:48:65:a4:c6:d3:45:25:ed:
35:dc:d9:25:39:71:24:62:17:27:0b:49:8f:a8:63:3f:af:91:
06:ef:fe:ba:7d:3c:7c:9b:ba:85:44:ee:53:1b:2e:a4:3f:eb:
01:90:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:39 2025 by rpki-client