Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/HziVAEIw68ibB_wbPB3eplus7u8.roa
File: HziVAEIw68ibB_wbPB3eplus7u8.roa (raw, json)
Hash identifier: DOq8l8d115PKOc3VdXzeV//hSr5Cz89VVw4sIgj9ACA=
Subject key identifier: 1F:38:95:00:42:30:EB:C8:9B:07:FC:1B:3C:1D:DE:A6:5B:AC:EE:EF
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018C3463BF774FBDCD30CF1A4D514819D753
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/HziVAEIw68ibB_wbPB3eplus7u8.roa
Signing time: Mon 04 Dec 2023 10:33:21 +0000
ROA not before: Mon 04 Dec 2023 10:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4785
IP address blocks: 45.12.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:63:bf:77:4f:bd:cd:30:cf:1a:4d:51:48:19:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Dec 4 10:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f3895004230ebc89b07fc1b3c1ddea65baceeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:81:e9:42:51:cb:05:31:55:97:a3:74:a6:
e9:0c:9e:d2:72:20:22:c8:c2:55:6e:a0:27:00:c4:
d2:10:22:3e:7b:fc:e7:19:0c:7b:35:ad:67:bb:31:
f7:59:b4:6a:69:d5:9a:77:ee:17:77:f4:bf:ef:7a:
2a:f3:82:7b:51:30:1c:a7:3c:fa:ec:2c:2e:2a:08:
83:64:32:9a:79:0a:c5:4f:ac:7b:72:a6:67:be:f0:
df:d6:23:78:00:0e:a5:d4:a2:5d:4e:22:48:73:c9:
00:a4:0b:7e:72:8b:48:25:13:3d:94:da:9d:6d:be:
53:0e:e3:d9:3e:9b:7e:8c:2b:d7:43:3c:b9:00:dc:
b9:e0:94:62:29:50:57:3b:27:56:fe:67:b8:2c:b0:
bf:5b:32:5b:58:6e:92:89:0a:45:0b:8a:c8:ad:f2:
13:4e:56:b0:2e:02:69:c9:86:c6:b1:f0:9e:a7:9f:
c9:de:19:3c:16:ae:53:4e:2e:bc:25:c7:e8:1b:4e:
6e:ae:1f:80:fe:44:1e:c3:d0:c4:01:7d:61:b3:84:
a0:6f:f9:d1:2d:2e:d3:93:f0:58:3e:3f:30:9a:e0:
db:70:22:e3:b0:0b:76:a3:f4:27:8c:df:63:cd:25:
8a:be:d6:da:a8:ff:f3:32:55:d5:ed:6a:4e:1b:7d:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:95:00:42:30:EB:C8:9B:07:FC:1B:3C:1D:DE:A6:5B:AC:EE:EF
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/HziVAEIw68ibB_wbPB3eplus7u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.89.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b2:0b:10:a6:14:27:34:4b:74:67:ed:26:f5:3b:9f:0f:3d:
45:f4:58:0b:cd:0c:e7:cc:3d:fa:bf:e0:f3:93:92:b4:45:5b:
8c:89:02:14:3a:77:d2:37:12:a0:11:5e:b6:34:76:ea:41:29:
2b:6b:cd:5e:f8:52:4d:91:ff:e4:b1:33:41:bb:81:8f:ed:c0:
11:b2:42:7f:ca:04:88:f6:8e:5d:49:ae:55:99:fd:af:6e:ea:
1a:fd:c5:46:6c:e8:05:30:d2:96:fd:29:a3:c4:ba:4b:3f:64:
52:65:f2:d8:3f:b9:04:17:6f:5c:72:6c:6e:f6:08:02:23:01:
1f:69:09:57:83:8a:b8:9f:fd:37:6e:08:37:cd:f1:87:1b:ea:
cb:22:c1:7a:83:9a:a0:9f:f3:a8:48:3b:0c:65:40:43:f0:a5:
f6:c9:55:e8:c9:04:5e:da:34:c3:ad:49:27:0a:2e:ab:5b:83:
b3:e7:f4:dd:13:27:64:67:0d:0f:c1:9a:af:d2:1e:e3:fc:0e:
82:68:d3:e2:d7:66:04:c1:b8:43:37:45:4a:23:0b:26:3a:46:
ba:ff:c5:32:b9:ab:c3:d6:50:c9:f0:9e:a6:19:90:18:d7:00:
58:94:3b:c5:dc:63:37:ac:38:9a:ef:77:e6:12:4e:3d:42:47:
30:5c:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:20:30 2025 by rpki-client