Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/Hp-aUMiKFduSFShKvppXI42_Uj8.roa
File: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (raw, json)
Hash identifier: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=
Subject key identifier: 1E:9F:9A:50:C8:8A:15:DB:92:15:28:4A:BE:9A:57:23:8D:BF:52:3F
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 019420D61683500759093BBCBA7391D6C3CB
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/Hp-aUMiKFduSFShKvppXI42_Uj8.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211291
IP address blocks: 87.249.61.0/24 maxlen: 24
87.249.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:83:50:07:59:09:3b:bc:ba:73:91:d6:c3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e9f9a50c88a15db9215284abe9a57238dbf523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:d7:47:7f:94:10:16:0b:4e:36:1e:68:20:
99:e8:43:a0:3b:05:aa:fc:e5:30:f0:14:2e:e5:41:
ff:0c:69:a4:d0:1b:11:a3:8d:98:2f:14:cf:07:8c:
41:ef:4c:2c:e6:f1:68:f4:e7:c4:df:6d:c3:35:db:
70:bb:a2:56:4e:87:4a:49:35:d8:77:29:52:8f:fc:
7e:28:4b:47:09:94:41:a1:bb:a6:76:89:93:da:62:
00:15:93:dc:2a:56:c4:57:93:79:e2:f5:99:5e:f9:
02:f0:e0:39:b4:f8:52:db:90:80:dd:1a:f3:fa:b1:
e3:3e:dd:b5:c3:8d:02:0f:39:b4:34:9b:d6:99:45:
18:10:f7:7d:69:6e:8c:c9:e1:e8:99:90:a5:03:bc:
bd:a9:98:56:41:5b:2c:22:2f:66:44:76:4e:bd:e7:
e0:05:3d:c4:93:a1:cb:ec:bb:08:1f:5b:55:59:bf:
6e:e4:bd:9b:c9:2c:17:c3:f2:f4:ca:06:0f:5e:5c:
94:01:93:15:d0:6c:2a:e7:c5:7b:cd:a9:3a:da:68:
3e:18:36:cc:7d:a3:3c:75:d2:8f:50:75:fe:26:c9:
83:4a:78:11:4c:f4:41:82:d6:54:cc:e3:03:27:3e:
29:b2:f9:13:19:bf:93:e4:01:18:af:31:05:f9:79:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9F:9A:50:C8:8A:15:DB:92:15:28:4A:BE:9A:57:23:8D:BF:52:3F
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/Hp-aUMiKFduSFShKvppXI42_Uj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.249.61.0-87.249.63.255
Signature Algorithm: sha256WithRSAEncryption
4a:94:2a:f5:7f:42:65:43:c5:0f:c9:8e:de:c9:d9:22:0a:16:
8a:21:d1:0a:c9:ff:54:f2:28:d2:66:4d:d3:55:8d:79:df:7e:
05:7e:a4:c9:b2:fd:e8:77:19:16:9a:bb:e4:6e:c0:fc:37:c9:
d6:13:9d:50:39:d6:2c:4e:ae:12:87:57:6f:01:07:4a:2e:d5:
e0:01:62:6c:89:78:39:74:fd:b7:12:f9:42:5a:36:eb:f8:84:
79:0a:8f:51:8e:81:81:63:1f:ff:0b:89:16:7f:fb:21:85:51:
71:13:e8:6a:ca:b1:ad:c4:7c:60:19:9e:d2:97:37:97:36:02:
93:e9:4c:fc:66:26:15:9a:31:23:16:fd:b7:07:fb:6d:56:bf:
0a:69:60:8c:1c:54:9f:47:89:62:20:cc:2f:bb:e1:fb:95:a5:
17:89:c1:0a:a7:fc:87:e2:10:73:25:2b:a3:9c:17:f1:ab:9b:
96:e6:a0:5a:d4:2d:8a:28:dd:a1:43:ba:ff:4c:a4:fa:2b:dc:
25:d6:be:e6:c6:6a:c0:22:a9:d1:fe:16:a5:3b:f4:c6:cb:56:
b4:6b:6a:ad:1d:fd:2e:99:5c:c7:43:cc:11:4a:e9:ab:e6:69:
35:70:2b:ef:d3:76:22:7e:39:75:31:b9:21:b5:93:11:77:94:
35:ea:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:53 2025 by rpki-client