Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HHY-lDwWDceOrqBQARGIXyylQGs.roa
File: HHY-lDwWDceOrqBQARGIXyylQGs.roa (raw, json)
Hash identifier: S1W5zidI2JvrU/TFYjU3aOkoI6RNmO0D2hvyJLtEnQs=
Subject key identifier: 1C:76:3E:94:3C:16:0D:C7:8E:AE:A0:50:01:11:88:5F:2C:A5:40:6B
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA91991F60C018495773DA32655E17
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HHY-lDwWDceOrqBQARGIXyylQGs.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212860
IP address blocks: 176.221.24.0/23 maxlen: 24
176.221.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:91:99:1f:60:c0:18:49:57:73:da:32:65:5e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c763e943c160dc78eaea0500111885f2ca5406b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:2b:ff:0c:ad:56:33:65:b0:f5:c7:c6:f5:
e2:dd:31:af:ed:9b:73:bc:fb:50:c7:07:11:6f:7d:
ae:e3:6f:b4:40:56:07:2d:b8:0a:4a:82:b6:27:0e:
b9:0e:f0:c2:a2:38:54:80:af:26:bb:ef:48:81:4a:
e4:38:69:39:d2:88:bb:00:73:33:49:a2:79:c7:50:
b8:1c:06:75:83:4d:46:b7:16:63:58:11:dc:d3:da:
bd:77:5c:2d:2b:4e:39:2b:65:76:fe:ac:34:78:30:
c3:b9:6a:f5:57:08:e5:54:94:4f:5f:c6:fd:31:89:
6b:16:fe:11:25:82:f8:9c:1b:8a:1a:8c:a6:7f:c4:
e3:0d:cd:86:8f:e5:1d:93:07:bb:06:f1:10:bc:23:
02:a1:8d:64:6b:3b:ea:81:6f:ce:71:48:f5:85:96:
fd:46:cf:31:c6:e7:34:ae:13:a0:53:d0:42:59:c2:
16:ce:54:53:2c:13:5d:18:dc:6d:ed:bc:91:13:9d:
13:49:b4:5d:09:48:9c:a9:cc:ff:75:f3:5f:27:97:
81:b0:27:3c:93:77:e0:d8:fc:94:9c:40:b6:e8:f4:
d0:4f:cf:3a:dc:2a:b1:94:37:ef:2b:68:f8:bd:b8:
35:8e:16:70:be:72:6a:c9:1a:8d:46:94:47:06:60:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:3E:94:3C:16:0D:C7:8E:AE:A0:50:01:11:88:5F:2C:A5:40:6B
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HHY-lDwWDceOrqBQARGIXyylQGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.24.0/23
176.221.28.0/23
Signature Algorithm: sha256WithRSAEncryption
47:eb:7c:60:e4:83:17:2e:9d:22:b3:25:06:d0:b4:dc:a1:97:
a6:d1:87:63:cd:93:6a:3a:ed:d5:31:a1:a2:fe:1d:e2:08:3c:
88:98:42:b4:4a:45:89:02:5d:7c:b1:a7:16:6d:04:10:5d:95:
d2:bc:32:50:e5:f2:b6:31:84:8c:0f:04:c4:7e:d2:ae:45:c1:
6f:bb:14:59:89:bd:64:34:4a:3d:3d:e0:a2:88:1d:22:c6:b2:
9d:40:66:18:d4:7f:36:90:76:a3:e4:21:60:4f:90:a2:4a:63:
3b:f1:7c:5b:66:93:bc:ae:7a:28:60:d7:a6:23:48:54:a8:1d:
66:a3:5a:7d:0a:68:c2:73:d2:0d:db:70:9a:7f:8d:ea:03:c7:
47:49:19:27:81:6e:42:3d:46:08:b7:a9:bb:2a:3a:6a:cf:64:
fa:6e:dc:eb:0c:75:98:48:b2:ad:e9:d6:7d:26:f6:ed:5e:d4:
d6:3f:11:00:84:d7:d2:1f:80:e5:08:88:bc:94:ec:26:0f:0b:
5e:f2:95:74:b9:fc:cd:db:60:54:97:7d:2f:1e:85:a6:bc:17:
4d:fb:4f:af:ee:e0:f7:60:13:0a:40:82:06:56:75:6d:62:18:
a1:da:af:32:19:ba:9e:42:ad:ca:88:a1:de:a8:7c:28:2d:2d:
ae:c3:6e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:38 2025 by rpki-client