Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/HmxI9ACgnkwm0pr4zdqYwVPgJP4.roa
File: HmxI9ACgnkwm0pr4zdqYwVPgJP4.roa (raw, json)
Hash identifier: U1HZN1qXs18p5B0I5ChZo+CuPui9O6GQtg+Yk5SToD8=
Subject key identifier: 1E:6C:48:F4:00:A0:9E:4C:26:D2:9A:F8:CD:DA:98:C1:53:E0:24:FE
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01876AB42153C448AFC816FEFD1A35EA5762
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/HmxI9ACgnkwm0pr4zdqYwVPgJP4.roa
Signing time: Mon 10 Apr 2023 10:26:42 +0000
ROA not before: Mon 10 Apr 2023 10:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140096
IP address blocks: 85.8.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:b4:21:53:c4:48:af:c8:16:fe:fd:1a:35:ea:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Apr 10 10:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e6c48f400a09e4c26d29af8cdda98c153e024fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:9d:eb:42:22:82:44:63:d0:9e:30:35:6e:
07:f4:d4:89:a0:26:99:ab:dd:44:48:86:7d:a6:5a:
66:51:e3:19:2e:cc:d9:28:46:d9:f6:67:f3:1e:17:
7e:ce:b9:5d:27:10:73:62:87:37:62:17:29:ce:fe:
95:32:cc:1b:2f:0c:58:6e:01:29:22:b7:13:86:42:
f0:4d:6e:18:89:f8:7b:fb:ca:d7:30:c3:4d:2d:0d:
68:a9:ab:4d:a7:7a:b2:68:b0:c5:6c:af:ca:f1:a0:
6a:49:ea:f4:ab:6f:9b:3d:9b:d8:1e:c8:d6:35:c5:
73:6c:21:db:ae:6a:a6:bc:e2:c3:70:79:5c:4c:18:
e3:b8:3c:97:95:5a:0c:61:23:c0:dd:01:48:73:28:
7a:88:6a:ef:46:82:4e:f7:3a:3d:94:fe:8b:de:9a:
99:b5:af:49:09:13:e6:b0:3a:e5:09:73:ee:59:82:
3c:46:cc:de:ec:d5:4d:c3:8c:f2:a2:27:20:c9:06:
6f:9f:52:7c:f9:33:71:0b:fe:38:de:f9:52:b2:34:
f2:c9:e0:2c:c9:be:cf:bd:3b:b1:f8:06:27:48:15:
76:e6:cf:c7:74:d0:23:60:20:0a:7e:1c:17:58:46:
a5:6a:fd:1f:d1:75:9a:2b:7a:de:15:29:c4:86:de:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6C:48:F4:00:A0:9E:4C:26:D2:9A:F8:CD:DA:98:C1:53:E0:24:FE
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/HmxI9ACgnkwm0pr4zdqYwVPgJP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.180.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ab:54:d3:1b:01:2f:7a:a1:11:b5:46:f9:d7:18:05:1b:b7:
63:49:7a:94:c7:69:18:25:0a:2d:20:1c:ea:e4:5a:cf:eb:4b:
d3:4b:3b:59:a5:4d:df:0c:b8:7d:f2:cf:c9:58:d5:bb:70:18:
05:71:3f:df:4e:37:f4:42:90:11:da:6e:38:0b:44:55:62:90:
f4:65:7f:c7:69:20:b9:5a:b0:2b:47:ac:05:eb:44:d2:00:2e:
53:70:8b:30:bd:aa:e0:6a:b3:7a:09:98:13:89:fa:06:33:93:
6f:d6:07:2e:a1:85:f2:a3:08:5b:9d:3f:96:9b:9f:07:ce:e0:
46:db:82:49:84:fe:e7:06:5f:1e:7f:df:e8:32:8e:cc:1f:cd:
76:b0:5b:4c:2c:29:52:40:c1:13:e4:6d:83:f6:7c:64:fb:1e:
6a:44:e3:ad:25:91:3a:f6:5b:6e:ee:d3:af:39:4d:2e:3e:11:
db:9c:36:2e:35:fa:01:94:b6:a8:d9:f2:38:78:6f:ff:9c:0d:
78:12:d0:1a:34:e5:cc:aa:45:ca:5e:50:76:6d:31:be:38:3b:
ed:fd:27:34:d2:78:91:be:32:8e:4b:67:cc:62:2b:9d:94:f0:
10:41:58:e4:d0:b7:fb:38:7c:4a:64:65:0a:d3:56:11:ef:ac:
46:c3:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:37 2025 by rpki-client