Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hp8aca4jV_NgcOQTqE9P9GoFuEQ.roa
File: hp8aca4jV_NgcOQTqE9P9GoFuEQ.roa (raw, json)
Hash identifier: kKnhl4r/zYJkZOYtoRvVvdgiew/iDM7w2/WHcRoECmY=
Subject key identifier: 86:9F:1A:71:AE:23:57:F3:60:70:E4:13:A8:4F:4F:F4:6A:05:B8:44
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01943CEEA08BCAAD292E4AB101AE1EF6F6E4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hp8aca4jV_NgcOQTqE9P9GoFuEQ.roa
Signing time: Mon 06 Jan 2025 18:44:19 +0000
ROA not before: Mon 06 Jan 2025 18:44:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31142
IP address blocks: 5.231.254.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:ee:a0:8b:ca:ad:29:2e:4a:b1:01:ae:1e:f6:f6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 6 18:44:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=869f1a71ae2357f36070e413a84f4ff46a05b844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:dc:d1:5f:db:f5:ef:a6:4b:04:49:7b:3d:
fe:98:3e:cc:c2:75:d9:5c:bf:29:78:65:26:38:da:
b8:6b:20:8e:c7:e8:df:76:aa:f8:78:7a:5f:a3:20:
5f:50:fc:05:29:e4:7a:93:c5:16:ff:2a:f1:39:88:
90:46:f9:2d:f4:6c:98:e7:56:6d:05:3c:7e:18:28:
76:ea:10:11:e5:a9:08:b1:96:f3:14:f4:d0:bf:ba:
c5:64:80:c0:4f:f7:9e:92:55:73:93:27:58:14:f5:
9f:7d:50:b8:2f:0c:7d:96:42:16:fc:e0:1f:0f:85:
f1:cc:51:0f:68:dc:a9:ca:54:d9:a2:27:ea:97:74:
31:1d:0a:6f:3c:4d:17:b6:8a:ea:97:bf:a4:1c:96:
24:52:34:1f:ac:80:85:b9:48:b5:41:16:dc:63:58:
d8:ef:b1:84:cc:bd:d4:2a:16:88:97:8b:f3:8b:6d:
96:a4:1a:ff:32:8a:cd:eb:3c:63:91:9c:90:44:a4:
85:02:fb:b1:fc:84:2f:7b:9a:e9:7a:2c:19:5d:4d:
e4:a8:8c:2e:df:80:b0:ae:52:8b:0b:65:2c:f0:15:
1a:ec:e1:88:bf:5d:85:00:cf:d8:55:05:8b:5b:60:
36:ac:ed:75:cb:6c:b0:7c:c1:47:f9:25:fc:b7:72:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:1A:71:AE:23:57:F3:60:70:E4:13:A8:4F:4F:F4:6A:05:B8:44
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hp8aca4jV_NgcOQTqE9P9GoFuEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.254.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:d7:91:5b:7c:c4:15:f5:a7:4b:01:43:a4:50:4a:a1:53:4e:
1f:3d:89:f6:94:12:c2:6a:55:aa:ab:36:fd:9a:21:fa:80:07:
95:34:4c:a8:03:59:2e:4e:19:52:54:85:f0:84:b3:51:46:92:
a0:1f:ae:39:ca:ae:37:6b:90:66:db:3e:fe:88:93:43:55:44:
79:b8:58:0a:d6:7d:a9:ba:69:4c:10:ab:1e:f9:c1:7c:53:c0:
6a:61:38:db:18:26:71:10:15:f6:e5:ed:87:40:0f:c0:08:74:
be:00:d7:1b:4c:70:22:c3:88:8a:c4:91:13:7d:85:af:fc:2e:
b8:ed:0f:ec:6b:fb:3f:92:94:fe:8f:89:6a:68:c5:d7:2b:54:
44:25:70:16:77:d4:dd:50:40:b2:e2:a1:af:8d:e5:e9:e6:4f:
a4:c7:fe:72:5e:c8:d0:d3:ae:aa:69:99:33:be:86:f7:8b:fa:
63:b0:98:5e:4a:77:39:a5:07:6f:3b:8e:ac:1d:51:12:ec:dd:
9c:49:70:6c:c2:bc:6d:d0:75:5d:df:55:af:7d:c6:b6:37:b5:
13:3c:98:22:9a:39:65:e7:f2:7f:e8:4f:e8:c0:4e:e3:23:a6:
19:69:5b:0c:80:eb:7d:82:d3:ff:3e:3a:9e:e5:86:36:74:42:
99:d2:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:10 2025 by rpki-client