Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/HPJbELllp9WlLwsdsvmR6D89XaQ.roa
File: HPJbELllp9WlLwsdsvmR6D89XaQ.roa (raw, json)
Hash identifier: maAqjdLsz+RiySYN+w7s/Cz87kN447Hufe3saPkhRuA=
Subject key identifier: 1C:F2:5B:10:B9:65:A7:D5:A5:2F:0B:1D:B2:F9:91:E8:3F:3D:5D:A4
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01942823919B0045A969C6E0946E793C3C6A
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/HPJbELllp9WlLwsdsvmR6D89XaQ.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 188.209.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:91:9b:00:45:a9:69:c6:e0:94:6e:79:3c:3c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cf25b10b965a7d5a52f0b1db2f991e83f3d5da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:54:32:56:d9:8a:c0:91:06:ab:16:08:74:af:
cc:76:1a:ba:8f:ac:62:6c:09:ff:89:3e:2f:4e:a1:
4b:ab:f0:13:5a:89:ad:70:5d:16:fc:2c:f2:a0:d4:
5a:33:67:c4:36:99:4f:53:f9:a5:12:81:60:6f:7c:
47:0a:62:ef:aa:62:91:13:e4:65:0c:2f:05:b9:fd:
d2:b8:a3:e6:42:aa:92:83:13:6b:ff:ce:33:16:fd:
25:d8:a0:12:b0:3f:da:d0:2b:01:ce:1c:82:68:3c:
50:70:41:9a:84:8f:09:71:2a:cf:c5:b2:07:a3:ea:
8d:84:ef:0b:47:61:fe:df:04:cf:00:a5:2e:d8:ab:
29:8e:0b:52:51:b9:3f:cc:24:94:14:bf:bd:bd:23:
2c:84:33:92:cb:84:10:b2:60:c4:98:45:c1:70:4d:
67:d2:15:9b:93:08:51:7f:fa:a3:22:87:22:cd:9f:
8a:c2:08:9b:a1:ab:14:d9:da:7c:07:ba:8d:66:34:
d4:1e:86:49:72:46:f3:e2:2d:80:4a:98:5a:36:ab:
03:47:56:f2:3f:05:65:0c:c1:4f:1d:87:cb:9f:26:
69:ab:1b:fa:d8:44:8f:0a:b1:48:94:9d:63:07:19:
82:35:41:3f:e8:70:b6:ca:b0:a2:19:2c:5d:b0:88:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:5B:10:B9:65:A7:D5:A5:2F:0B:1D:B2:F9:91:E8:3F:3D:5D:A4
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/HPJbELllp9WlLwsdsvmR6D89XaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e4:f4:23:a9:3b:8c:97:b6:08:15:7d:e1:45:f5:a2:44:84:
dc:f6:18:16:75:9f:b7:dc:3a:95:26:b2:1d:c9:a3:b9:71:be:
75:04:0e:b7:f5:22:57:6c:d2:ea:ea:40:27:4a:13:04:b4:d5:
19:40:36:d2:27:8f:37:72:82:2e:cf:32:38:53:59:fb:35:8a:
97:34:9b:b9:e6:9f:80:fc:1c:65:9d:ef:d9:f6:7e:76:d8:19:
f9:8f:6f:b1:ba:c1:5d:e5:1c:7d:9e:65:35:32:3b:4c:2a:b2:
ed:0a:a3:0b:d8:9e:03:5f:7d:04:14:9d:8c:17:28:76:bc:b3:
b9:cf:81:4f:c2:ce:e9:81:7a:2b:bf:d7:1a:26:19:e3:bd:28:
b9:6b:fc:98:a0:54:6c:26:ef:32:7d:a6:59:dd:6a:2c:44:d7:
8c:6e:63:7b:55:52:db:96:ad:f2:78:bf:51:d4:82:01:b4:e7:
e5:54:b9:ce:7e:b8:9c:14:75:47:14:4d:1d:8e:36:bf:a1:3c:
75:6f:3a:13:c3:bf:d6:45:5e:8e:d9:0d:85:2c:18:1b:19:fc:
7c:3a:ce:38:5b:b2:7c:82:7e:97:2a:45:9d:9f:bf:52:a0:4e:
97:a7:27:2c:aa:a1:4a:7c:25:89:cd:3c:32:70:e3:86:6c:ba:
2d:3d:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:38 2025 by rpki-client