Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/HpLa1u7mMT-KBmx1ikN91lOe0yU.roa
File: HpLa1u7mMT-KBmx1ikN91lOe0yU.roa (raw, json)
Hash identifier: pcuCO8X4GIlv1tPV4QF6Srpe7ZO0psq4MncpWi9hYAY=
Subject key identifier: 1E:92:DA:D6:EE:E6:31:3F:8A:06:6C:75:8A:43:7D:D6:53:9E:D3:25
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01866F5269FB49468578D5CBCADC8D1279AA
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/HpLa1u7mMT-KBmx1ikN91lOe0yU.roa
Signing time: Mon 20 Feb 2023 14:55:17 +0000
ROA not before: Mon 20 Feb 2023 14:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 93.177.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:52:69:fb:49:46:85:78:d5:cb:ca:dc:8d:12:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Feb 20 14:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e92dad6eee6313f8a066c758a437dd6539ed325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:75:a3:fe:45:68:08:48:36:bd:be:fb:af:
b2:0c:cc:bc:2b:67:54:8b:a5:1c:76:e7:e4:6c:49:
59:d0:32:07:50:94:97:22:26:83:c8:13:bd:a6:d4:
40:9f:e6:ca:50:d4:84:53:40:76:3a:84:a9:a1:c4:
e2:3f:60:0a:43:ea:90:5a:29:71:ca:bc:a3:ae:d3:
04:84:c5:ad:a3:71:48:f0:63:ba:e8:95:ff:82:f5:
ef:a0:89:71:ee:a5:0a:d8:ae:a2:67:ec:37:6b:d0:
69:a3:58:e6:b2:8b:3a:e9:7a:85:dd:0b:3e:89:3c:
9e:01:56:00:48:ae:69:32:a5:aa:c6:f2:22:fe:28:
00:87:a6:e8:ec:9d:b5:3a:69:f3:ee:bb:c6:52:df:
a7:65:56:51:b0:30:0a:cf:8a:40:92:ba:74:66:09:
f1:cb:af:51:f1:bb:7c:aa:36:fc:98:e9:40:4d:ee:
31:fb:c4:d9:36:6c:ff:82:9e:0a:6b:aa:25:3e:a2:
f0:62:45:9f:4f:f0:c6:79:f9:fb:c5:d7:9a:f9:1b:
29:22:41:66:98:8b:57:34:be:69:d2:3f:40:28:dc:
72:7a:64:9d:2e:6e:ae:dc:02:a3:6f:da:5d:e6:b7:
4b:bb:97:77:d3:e8:f8:82:c6:1f:ba:82:8f:a2:ea:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:DA:D6:EE:E6:31:3F:8A:06:6C:75:8A:43:7D:D6:53:9E:D3:25
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/HpLa1u7mMT-KBmx1ikN91lOe0yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
91:a3:1a:29:13:cf:a1:1b:64:9f:b4:80:95:94:aa:32:a9:96:
19:f9:be:98:7c:8a:bb:c6:af:a9:06:5e:23:d2:41:28:e0:45:
e2:40:3b:a4:f8:68:65:c6:a7:76:00:e9:3d:89:0c:84:d8:4d:
07:83:5e:d7:3a:e3:10:62:73:ab:d0:de:ab:57:98:7d:98:4c:
69:25:28:1d:81:2f:a0:c0:4d:ff:05:3d:78:d5:0a:45:8b:71:
ef:ff:9c:04:da:17:1d:ce:ab:7a:da:fd:3b:ca:03:23:6b:9c:
30:d7:98:38:d7:7b:db:b9:30:2f:eb:4c:7c:0d:49:59:c0:05:
c7:f5:3d:ec:b3:7a:97:0a:9f:02:ac:67:48:ff:3e:f9:ce:0c:
3b:f4:ac:97:b2:9f:f1:30:a4:57:da:cd:f9:1d:22:c4:cb:c4:
de:e9:13:1b:be:b1:e0:26:69:7b:14:78:01:b8:ea:17:1a:f5:
d4:cd:3d:fc:20:68:23:f3:fe:75:3d:fa:21:29:70:fb:0d:a8:
38:d6:7a:64:3a:b5:86:c9:fe:84:0a:80:60:66:eb:01:09:ad:
10:4e:50:93:0d:03:07:95:3d:33:c6:78:0e:ae:00:67:d6:20:
61:b1:88:ba:06:ae:87:c0:4f:5d:9e:a7:c3:f5:d4:0d:70:48:
39:8b:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:28 2025 by rpki-client