Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/HWJyqOYgKmYyzjid7IInVzpFlwA.roa
File: HWJyqOYgKmYyzjid7IInVzpFlwA.roa (raw, json)
Hash identifier: 3+ag2Dw5tuJ29n6cQ1euqcvO0rPVdHqsSUSY7z8He/0=
Subject key identifier: 1D:62:72:A8:E6:20:2A:66:32:CE:38:9D:EC:82:27:57:3A:45:97:00
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 01941FFA4E89CBEBFDF883C731BC0AAEC532
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/HWJyqOYgKmYyzjid7IInVzpFlwA.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35684
IP address blocks: 193.239.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:89:cb:eb:fd:f8:83:c7:31:bc:0a:ae:c5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d6272a8e6202a6632ce389dec8227573a459700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:24:ba:70:ac:67:bf:03:f1:2f:c4:a6:3f:
4e:42:4a:86:a9:76:81:d4:d3:c7:bd:5f:73:80:79:
47:ab:22:9a:f8:45:94:a6:40:4c:2c:65:ec:0d:b1:
8f:15:02:77:38:40:85:11:1b:23:f3:88:38:6e:11:
ea:30:ae:31:9c:ff:2a:dd:19:10:49:62:e2:8a:58:
26:1a:48:be:06:07:6b:44:a5:05:8e:a8:5c:8f:3a:
10:01:2b:c3:d7:d1:8a:05:de:96:c2:f2:fd:aa:f0:
31:30:a2:86:a6:33:ad:bd:5a:f8:d1:eb:65:34:c7:
f2:92:e1:fb:bb:f8:60:37:b7:65:30:00:70:07:c4:
0f:d3:be:2e:64:47:fc:76:fb:2c:86:ae:4b:58:2a:
3d:1f:b4:df:12:f8:cd:e9:18:19:61:10:af:58:1b:
c6:c3:3c:ff:cb:73:9f:b7:7e:7e:69:b2:1e:cd:8a:
61:57:b8:8c:79:46:ac:7e:a4:8e:76:97:7a:09:ff:
79:6d:e8:6e:4b:23:79:3c:03:6b:08:dd:c7:96:8f:
77:71:f5:31:17:5f:cc:67:31:23:55:72:7d:bc:32:
e8:7c:83:77:a3:df:b2:bb:3b:9f:e1:49:67:65:16:
33:a2:0d:a9:72:19:de:50:20:1d:2f:42:4c:f6:e9:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:62:72:A8:E6:20:2A:66:32:CE:38:9D:EC:82:27:57:3A:45:97:00
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/HWJyqOYgKmYyzjid7IInVzpFlwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:2e:07:39:e1:2c:d3:d2:2d:fa:84:fc:d5:b2:82:5b:2e:f8:
7d:a5:05:a5:aa:37:77:26:e8:f8:52:0b:62:bb:fe:df:57:6f:
4d:1a:37:fd:29:b8:e9:9b:7c:80:6d:a9:d8:47:61:06:12:60:
79:d3:26:b3:9d:a9:7b:9a:02:bb:84:df:f5:67:92:24:b1:bb:
d2:73:37:06:de:0e:4e:83:44:02:a2:c8:2c:b1:0c:ec:ae:90:
7d:67:2f:93:3d:d2:ea:5a:f0:2c:9e:38:c1:dd:7a:7d:0e:e3:
1d:ba:ee:4a:b2:7c:44:32:95:80:b3:a2:65:0b:de:40:92:48:
97:6c:03:a8:69:00:39:9b:71:6b:eb:c6:cb:3f:be:d8:54:27:
0c:12:52:d4:0d:9e:df:99:ff:78:48:9b:bc:3d:59:e1:11:c3:
66:83:c3:20:f1:20:00:b6:83:81:7d:a9:47:22:b4:85:6b:fd:
1b:39:c3:c8:43:8c:66:24:2f:c5:62:9f:73:dd:ec:bb:c5:57:
93:25:d6:90:74:98:ff:93:0a:ce:6e:f2:67:de:a1:e2:14:3d:
54:a4:14:79:2c:fb:bf:6a:d7:67:70:b8:e9:04:1a:82:2e:e6:
23:50:c5:42:20:07:46:50:15:9d:f5:21:a8:44:da:55:d2:05:
4e:6a:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:50 2025 by rpki-client