Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hualzTbxx8x6EIDH69up_KLOrKQ.roa
File: hualzTbxx8x6EIDH69up_KLOrKQ.roa (raw, json)
Hash identifier: P43Ugig4texhXMn4uLxYgImRzZeuDC7fG0DddonyWLI=
Subject key identifier: 86:E6:A5:CD:36:F1:C7:CC:7A:10:80:C7:EB:DB:A9:FC:A2:CE:AC:A4
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B199B0F40F9E3E25EB01BFA218F12
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hualzTbxx8x6EIDH69up_KLOrKQ.roa
Signing time: Sun 01 Jan 2023 13:35:10 +0000
ROA not before: Sun 01 Jan 2023 13:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208836
IP address blocks: 217.192.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:19:9b:0f:40:f9:e3:e2:5e:b0:1b:fa:21:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86e6a5cd36f1c7cc7a1080c7ebdba9fca2ceaca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:c5:62:2a:1a:96:ef:bb:5b:d9:b0:44:a6:
8c:f8:48:87:94:2f:25:5e:7a:05:a9:06:76:da:cc:
c2:8c:9f:16:cf:cf:f0:59:78:c2:84:35:22:54:d6:
db:be:86:d1:13:14:be:79:28:86:8d:a1:73:9f:a6:
f3:52:5b:db:e4:7d:63:97:d8:9c:b0:9d:65:ca:ee:
25:2f:a6:ed:cf:09:8a:f4:e4:2d:62:68:a7:c0:5c:
4d:76:f9:7a:ed:49:c4:9c:6c:e9:18:2c:66:f9:b1:
b9:6b:2c:3c:c1:38:14:4d:27:97:ab:2a:28:fd:4b:
e8:9d:f1:1d:1d:c8:0b:a8:58:cb:3f:f2:67:62:ee:
7d:76:2d:d6:fb:a4:e9:2f:83:3a:95:28:c2:bf:15:
e9:33:04:2d:51:7e:f8:9e:b5:fa:47:69:77:08:19:
2c:b7:11:9f:6b:f5:10:67:f7:a9:b8:e7:b2:f3:fd:
b3:7c:d2:c7:d3:cd:23:4c:e2:77:f5:f5:cb:8b:f1:
60:04:e5:fb:d6:f3:c1:da:e2:69:9a:bc:bd:e0:36:
4f:0e:97:dd:b4:20:16:54:03:54:f1:a8:9f:1e:75:
90:32:79:b7:ae:d9:0c:da:dc:66:8b:81:7a:1b:f8:
bd:72:5a:98:4e:26:3e:eb:e0:64:56:27:a1:7c:33:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E6:A5:CD:36:F1:C7:CC:7A:10:80:C7:EB:DB:A9:FC:A2:CE:AC:A4
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hualzTbxx8x6EIDH69up_KLOrKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.192.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:45:9b:4a:af:5c:06:91:03:b3:1a:ba:45:56:04:04:2b:38:
22:4e:0c:26:6f:8c:6a:5b:e2:e7:44:39:7c:9f:11:8a:75:53:
38:2f:42:66:a9:f1:ed:06:81:18:45:13:f0:39:6a:4d:76:e4:
18:09:ce:24:10:12:90:41:d6:d9:77:6c:30:ff:ea:f9:19:cf:
f3:06:e4:f6:20:12:e7:0f:21:71:1f:48:c2:3a:a0:26:c3:c2:
3b:61:fc:15:95:5f:0f:8f:c6:dd:9c:be:5b:66:cb:00:be:65:
c3:eb:27:1c:c3:f8:ee:0d:29:92:d9:94:b4:8b:f8:c6:be:db:
b8:82:da:d5:5a:3f:1f:0b:da:66:fb:74:95:08:cc:19:a8:9a:
82:7c:fd:1c:20:a6:89:54:2a:de:14:5f:82:35:82:c6:bd:8e:
6d:47:5b:11:a1:7a:cf:d0:5b:cf:2d:fe:6b:05:e5:a9:d7:1a:
e3:a1:71:78:b8:00:62:41:9b:66:af:d0:0f:4e:3c:20:39:e2:
68:61:7a:22:1c:4e:55:95:8b:84:ef:82:05:79:99:1a:d9:38:
91:30:a6:60:ba:d1:7b:d9:53:ae:af:ac:84:3d:d2:c0:fb:a8:
7d:ca:2f:5e:e4:ac:b1:c8:01:0e:48:44:0d:c1:b9:93:d4:c5:
90:b4:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:20 2025 by rpki-client