Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/hYFp2PLalLwxzZhV7wbRQcfYlV8.roa
File: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (raw, json)
Hash identifier: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=
Subject key identifier: 85:81:69:D8:F2:DA:94:BC:31:CD:98:55:EF:06:D1:41:C7:D8:95:5F
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 019420D5C953161B74D4FF8043DB48735D41
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/hYFp2PLalLwxzZhV7wbRQcfYlV8.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 194.126.228.0/24 maxlen: 24
2001:67c:2310::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c9:53:16:1b:74:d4:ff:80:43:db:48:73:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=858169d8f2da94bc31cd9855ef06d141c7d8955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:89:53:d1:8b:81:6b:9a:84:84:04:54:2a:
21:e9:25:35:77:d9:67:04:bd:f1:5e:ab:d9:9d:8e:
e5:26:08:32:25:3f:f6:19:59:3e:15:59:b4:05:86:
7d:a9:f0:40:d3:66:52:3f:3f:3a:5a:b2:0f:10:a8:
63:13:b5:b9:f1:2d:7e:af:3a:50:08:35:1f:e3:ba:
11:be:c3:7d:64:f5:09:f0:ec:9a:e1:cc:86:a9:71:
f9:71:61:99:93:17:da:fc:38:1f:e8:7f:e1:df:fb:
7b:99:bb:63:2d:ad:78:dd:f8:16:05:c3:1d:18:92:
6d:b5:f4:63:12:92:3f:a5:a5:89:73:ae:15:a0:2c:
24:cf:a7:15:d6:e3:ed:63:ce:48:a7:b5:eb:59:3f:
00:36:f6:04:1b:b0:9e:1a:43:82:ae:d1:60:6f:03:
fe:35:7c:e7:50:48:b2:6c:2b:19:ee:6a:13:27:bb:
40:6b:40:44:65:d4:7e:7f:48:e3:20:c1:5f:56:1c:
77:07:8e:bd:3d:b9:cd:ab:ed:ac:70:64:95:8e:aa:
9f:d2:5d:b6:3e:cf:8e:99:13:9c:b1:ec:fa:f4:be:
6e:5f:ec:b3:b2:23:4c:cc:ca:93:e1:b7:1d:c0:55:
be:ef:27:ad:7e:5e:3b:f7:f8:96:e9:82:83:c1:22:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:81:69:D8:F2:DA:94:BC:31:CD:98:55:EF:06:D1:41:C7:D8:95:5F
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/hYFp2PLalLwxzZhV7wbRQcfYlV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.228.0/24
IPv6:
2001:67c:2310::/48
Signature Algorithm: sha256WithRSAEncryption
64:7b:d9:5b:b8:1a:d5:17:64:e8:8f:8e:6b:06:70:a8:a3:c3:
4a:a4:4c:13:45:cc:87:5a:85:5c:88:56:a8:49:69:55:0b:8c:
a3:a5:c1:ff:91:35:d4:9e:a6:4a:2a:fa:f1:7e:af:ec:13:95:
40:84:28:cd:83:47:18:b1:fa:39:d9:0d:41:16:e2:d9:d8:2c:
2c:c2:a3:9a:7c:fe:94:b5:6b:64:ef:e1:94:60:73:99:47:bc:
63:ff:41:e6:53:15:9f:9b:a1:5d:5a:42:1a:22:61:cb:a9:40:
16:f6:6b:36:5e:60:9c:d6:46:e3:c4:c7:dd:e7:63:36:9b:bd:
fa:03:64:81:9f:05:8a:74:6a:a4:f1:2a:04:85:c0:a2:f0:01:
2d:2e:09:9c:38:77:d8:5d:1b:6c:a1:97:05:f5:df:9e:c0:80:
f5:e0:f3:7f:8d:ee:25:6a:36:4f:4b:ae:fd:00:fd:cc:bf:c0:
5e:3b:a8:cd:8a:d0:de:88:fd:2d:a7:e5:52:b3:ac:cc:a9:85:
00:9f:10:6e:bb:38:0f:9f:ed:aa:39:4b:07:f4:86:29:f1:b6:
58:d3:64:ab:5a:7f:5f:d8:d3:fb:c2:8b:ae:a0:53:c1:28:14:
24:d1:4c:8f:85:c1:38:b7:e7:60:1f:d1:36:97:16:d1:24:69:
40:29:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:59 2025 by rpki-client