Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HsbEhxM8QL4gjKDS25_VqJsu3v4.roa
File: HsbEhxM8QL4gjKDS25_VqJsu3v4.roa (raw, json)
Hash identifier: 62CYR63cnCGEzNDNy7KqY4K0tjXbYFT2dUprA64JUYM=
Subject key identifier: 1E:C6:C4:87:13:3C:40:BE:20:8C:A0:D2:DB:9F:D5:A8:9B:2E:DE:FE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824ECA5BD47EF684644634293A6A003
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HsbEhxM8QL4gjKDS25_VqJsu3v4.roa
Signing time: Thu 02 Jan 2025 17:51:36 +0000
ROA not before: Thu 02 Jan 2025 17:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ec:a5:bd:47:ef:68:46:44:63:42:93:a6:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ec6c487133c40be208ca0d2db9fd5a89b2edefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:1e:de:a5:a7:2a:a0:07:96:fa:44:0b:77:
e1:8a:2f:ee:d5:17:b8:cb:d4:73:f6:46:3d:e3:4e:
8e:22:73:d2:44:ff:0f:54:4a:ee:41:85:d3:13:99:
d7:5c:ff:d6:ef:9b:07:2d:d5:d4:dc:dc:77:d1:a2:
42:3f:be:bc:52:55:17:bf:bc:1d:0e:85:90:c6:59:
52:b2:b5:c6:d8:80:c3:e7:01:55:8a:9c:1e:44:cd:
a5:25:09:5a:78:5a:a0:49:4e:19:79:7d:8e:f3:7b:
64:db:b5:a0:06:00:6b:7c:ef:9d:a9:1b:2c:34:bc:
e4:20:45:7c:d8:a9:00:f8:28:de:e4:46:f4:ee:08:
2a:9d:c3:21:85:d3:84:b1:22:83:a9:31:c1:d9:0a:
80:41:2e:ee:96:61:08:21:bc:84:74:cb:40:1c:e3:
d1:b3:42:6c:1c:c5:d0:eb:1f:19:8a:0d:01:a9:34:
54:5d:4d:45:3a:8e:7e:b4:47:6f:55:e1:59:9a:3c:
47:d4:08:e3:68:23:46:9e:6f:7f:77:09:09:a2:df:
e1:ce:df:b2:fa:ed:c7:39:e7:11:53:1b:a2:12:99:
d8:b5:3e:7f:da:03:58:aa:3f:9a:57:46:9b:d7:59:
f4:94:54:56:76:d2:11:30:28:c9:a6:cf:17:e4:9a:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C6:C4:87:13:3C:40:BE:20:8C:A0:D2:DB:9F:D5:A8:9B:2E:DE:FE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HsbEhxM8QL4gjKDS25_VqJsu3v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b8:27:86:cc:54:82:70:aa:2d:7a:b9:c8:54:89:69:5e:42:
6a:57:d6:c8:2c:e6:df:4d:6f:ed:bb:10:0f:5d:ec:09:bc:4f:
09:7e:15:83:62:8d:45:a8:2b:86:02:a4:70:9c:cb:3c:11:fb:
55:bb:41:de:43:97:36:08:bf:e9:64:37:b5:b7:8c:c3:fe:7f:
3a:91:08:79:35:5b:4b:9f:81:ea:d5:0e:8f:ba:8c:7a:f8:2d:
33:61:7e:12:fe:fb:73:93:cf:64:ad:6b:50:16:91:21:b1:54:
67:b5:fb:2f:dd:05:8a:0d:48:7c:84:c6:30:0e:b8:27:2e:76:
ee:ca:01:47:06:40:c0:73:bd:5e:72:34:58:a7:2d:04:41:36:
fe:cd:da:e5:10:b0:cf:92:ff:fc:89:98:24:53:5e:9c:fb:9c:
09:91:a5:0d:5d:54:8f:5a:90:c1:0d:b9:8e:be:bb:49:e3:6a:
f3:31:2b:e4:c3:61:b2:f2:5e:86:e2:9f:61:b1:ef:78:95:c0:
9d:b1:c7:e7:18:72:1c:d8:8d:73:48:1e:1d:6e:9f:a2:8c:f9:
d5:f1:55:c5:e4:54:86:f0:70:47:95:08:34:68:33:6a:f1:aa:
18:55:3b:63:fe:4b:e7:4c:6e:6e:c8:d6:e2:c9:f5:f6:7a:e3:
cf:cd:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:26 2025 by rpki-client