Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/HK-o-7NfDvPjOf99JzJL3ciySc8.roa
File: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (raw, json)
Hash identifier: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=
Subject key identifier: 1C:AF:A8:FB:B3:5F:0E:F3:E3:39:FF:7D:27:32:4B:DD:C8:B2:49:CF
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019423D6AB8FBDCEF88CD34BE4046B91E143
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/HK-o-7NfDvPjOf99JzJL3ciySc8.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 149.62.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ab:8f:bd:ce:f8:8c:d3:4b:e4:04:6b:91:e1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cafa8fbb35f0ef3e339ff7d27324bddc8b249cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:92:ab:26:55:f6:96:a8:57:50:3c:d9:d6:
c6:6d:1a:1b:90:18:2f:76:00:a2:5a:23:1f:61:92:
74:6d:ae:7c:ec:33:48:f1:a1:00:47:62:65:50:12:
60:a2:55:91:16:2b:e6:99:e9:80:16:c2:d2:b2:30:
26:49:17:8e:46:fe:ae:c4:3e:79:7a:7c:bb:ce:77:
89:74:29:46:31:29:9c:26:35:3f:79:14:f2:59:8c:
3f:81:1b:68:c2:74:83:39:8e:29:97:14:fb:f2:ed:
16:24:9e:f5:27:1c:82:4e:70:1c:c3:60:79:8a:d7:
e1:a4:ed:44:16:62:6c:0d:56:a8:ef:20:d9:a7:b6:
7b:fe:40:18:b3:74:2c:46:08:24:50:27:2c:31:23:
bd:93:3a:60:11:30:b1:5a:c2:e2:fe:4a:8f:c2:bf:
3a:b2:a4:c0:77:af:c0:03:4f:9d:d8:b5:de:70:a0:
33:bd:54:15:a1:72:97:ba:1b:5e:f5:89:d5:30:ea:
66:fb:05:ae:1a:10:71:ad:dc:5e:18:5f:65:05:0c:
c9:d0:5c:26:9a:35:da:10:19:86:bb:74:d6:27:3c:
9e:a1:d0:49:fe:7f:6e:fc:40:0d:a2:c3:91:1c:1e:
d1:fa:80:60:07:8f:fe:19:08:8b:d0:ee:b3:00:a5:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:A8:FB:B3:5F:0E:F3:E3:39:FF:7D:27:32:4B:DD:C8:B2:49:CF
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/HK-o-7NfDvPjOf99JzJL3ciySc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.152.0/21
Signature Algorithm: sha256WithRSAEncryption
18:06:3b:46:63:51:80:55:16:07:6b:05:77:69:ca:fb:7c:d6:
f9:a7:5d:4f:b8:5a:ec:29:f3:43:22:cb:e7:31:33:4a:67:22:
6f:b4:e1:84:64:d6:a8:b8:53:f8:4e:34:e2:77:c9:c3:4e:93:
76:f6:7e:61:22:a6:4b:2c:ae:a1:cb:5b:53:b6:24:87:25:70:
68:58:47:71:be:82:cb:39:01:80:68:5d:60:ac:a1:ee:9b:5e:
8e:1d:46:18:c8:13:cb:f4:c1:26:e8:7e:0f:55:49:7a:66:81:
45:a3:e9:54:ae:72:be:c5:a1:86:41:48:78:a9:d4:51:62:49:
4d:c0:28:6a:b6:46:24:54:dc:a0:22:4d:43:af:ff:c0:93:4c:
36:02:fc:c5:a5:67:15:60:5e:df:e1:5d:26:57:bd:57:4c:bd:
1e:4b:c8:96:5a:d0:b3:73:60:42:83:e5:ea:05:4f:d3:da:e4:
58:df:39:c0:61:5d:14:5e:53:10:e5:e6:f8:28:75:b1:cf:68:
5a:41:a8:6a:8d:6a:ce:55:e6:42:9a:8e:e6:e4:31:28:b1:8f:
48:07:56:10:4a:cd:d2:62:14:e9:53:30:8c:4c:c5:4b:62:88:
bb:76:a7:36:f6:1e:f4:f5:af:5f:02:4b:01:0c:8f:44:45:c9:
d3:80:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:03:52 2025 by rpki-client