Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-HHZWIJV2WnG1-4Z7o8XKYpLAo8.roa
File: 1-HHZWIJV2WnG1-4Z7o8XKYpLAo8.roa (raw, json)
Hash identifier: VbmDBQph80bM3JKgSAhsidcABYv+3hZDhkKLPZEd4CA=
Subject key identifier: F8:71:D9:58:82:55:D9:69:C6:D7:EE:19:EE:8F:17:29:8A:4B:02:8F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01856D8ADA78E49E5D25396FED8CDF39DB89
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-HHZWIJV2WnG1-4Z7o8XKYpLAo8.roa
Signing time: Sun 01 Jan 2023 13:34:54 +0000
ROA not before: Sun 01 Jan 2023 13:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 109.111.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:da:78:e4:9e:5d:25:39:6f:ed:8c:df:39:db:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 13:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f871d9588255d969c6d7ee19ee8f17298a4b028f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:a0:dd:e2:29:9a:b3:10:b8:cd:09:f4:51:
de:46:bb:15:dd:54:d0:5f:19:9e:c1:c1:60:65:42:
17:89:43:e8:f6:d7:cf:c6:66:d0:96:e9:a0:f5:c9:
6c:40:4c:48:77:06:38:2a:0c:b4:9e:4b:28:96:cb:
14:58:80:cb:09:a7:29:af:ad:5b:7a:d4:2c:b8:86:
d2:68:eb:b9:c9:be:11:8c:49:cb:27:0a:db:6b:15:
bd:84:f2:da:a9:7c:a4:78:a2:52:f3:d1:6d:f3:4a:
09:e3:7c:df:4d:44:d6:f1:7d:73:e8:da:91:40:f0:
0c:33:6a:04:5d:04:6c:fe:5f:89:ef:d0:68:35:b4:
f5:d9:1d:96:05:b8:13:f2:9e:3d:25:55:1a:b2:25:
c6:8c:ce:f3:e2:e6:a9:53:cf:a2:a5:c5:01:df:33:
59:a0:1e:8f:f1:53:50:f1:8e:ad:c0:a8:e2:9d:7d:
06:00:5c:e3:16:ab:ed:44:32:cf:75:05:9e:84:d0:
71:b2:9a:9d:b7:b3:b9:09:29:15:d3:33:7f:48:37:
1c:31:0a:d7:39:e1:16:06:a5:bb:ce:88:57:48:e7:
05:61:e8:21:e4:78:d2:96:e5:48:9f:2c:98:bf:7a:
c1:2e:6b:30:25:93:89:c5:6c:75:aa:ea:ef:75:63:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:D9:58:82:55:D9:69:C6:D7:EE:19:EE:8F:17:29:8A:4B:02:8F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-HHZWIJV2WnG1-4Z7o8XKYpLAo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/22
Signature Algorithm: sha256WithRSAEncryption
14:c7:85:77:98:36:4e:25:66:1a:15:e1:26:0b:9d:1d:37:57:
68:32:2d:c6:53:19:9e:6d:e7:02:92:f1:62:8f:5b:21:89:f1:
48:09:99:6d:b9:8d:9a:93:f4:51:eb:3a:d0:b0:ba:b3:59:b0:
b2:af:49:cc:42:ad:1d:96:d0:d9:c0:e0:52:a0:31:1d:85:bc:
6f:d7:35:68:aa:5f:21:8c:50:45:ab:de:00:14:30:ef:8d:59:
c5:4e:0f:b5:b2:f3:78:98:60:3d:0d:37:7c:ff:12:bb:ed:2a:
07:07:c6:42:4e:5b:7a:b2:07:28:1d:3e:e1:f8:89:f0:f7:bb:
07:4f:3f:a2:17:30:03:c5:12:9f:35:70:24:f0:fa:ac:a9:8a:
31:fb:6f:db:b6:a1:05:3c:b0:85:59:d1:68:8d:b4:08:19:98:
61:a4:a5:f0:25:f0:58:c1:85:8e:9a:62:93:84:ef:00:6d:84:
15:5f:ab:de:71:42:c9:3c:8b:47:66:45:f9:3d:b6:f4:21:64:
85:4d:7f:5b:07:e4:4c:ca:b4:8a:87:98:d2:92:2b:ae:45:b5:
8e:b5:57:16:9e:3c:43:c4:e5:03:da:5e:88:c8:14:e8:d6:e7:
75:5a:64:8e:9b:ee:3f:b0:b0:b0:81:5f:1d:35:c6:6c:c2:d6:
64:c4:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:16 2025 by rpki-client