Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa
File: hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa (raw, json)
Hash identifier: gFxs6hHw3FxfMImk+yNCzFI6L94MQhx1psEtxtAsjbw=
Subject key identifier: 85:BB:7B:59:CC:01:A8:1A:0F:5B:AA:C1:B8:32:10:DD:23:59:9B:37
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019421443B5006617E92EB07CBD72E9ADE44
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8680
IP address blocks: 5.253.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3b:50:06:61:7e:92:eb:07:cb:d7:2e:9a:de:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85bb7b59cc01a81a0f5baac1b83210dd23599b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:bf:e8:ec:db:83:48:f1:66:cb:07:3d:fd:
da:ac:be:e3:81:36:43:b4:88:ce:72:24:56:2b:f7:
62:a6:12:5e:90:a6:e1:b8:19:97:af:f8:1d:41:4c:
08:5c:48:9e:9f:ee:60:59:24:d3:ea:b8:42:0f:ce:
3a:fa:27:82:87:bd:8c:75:d1:85:66:a9:93:66:ae:
81:dd:1e:95:46:6d:1a:43:7f:50:4d:0a:fd:50:04:
97:d1:2d:d7:49:72:63:20:9d:ec:e1:6f:62:ea:56:
db:2b:7f:4d:79:b1:1f:39:ce:9a:18:50:cc:30:cc:
43:49:29:b9:41:c0:95:b4:e9:63:b0:4a:40:20:63:
2a:41:ff:6f:38:18:d2:d9:73:a0:66:11:67:0f:ca:
7f:90:df:8b:a9:77:89:64:a3:a6:9d:74:c0:33:d4:
04:14:5b:db:56:e3:f1:c2:9a:cb:dd:73:d4:03:cd:
c8:7c:83:08:bd:df:de:7b:37:27:5f:87:b9:b7:ba:
c8:4a:7b:f6:a7:a0:bd:84:4d:37:58:ad:bc:1c:a3:
08:14:77:dd:4a:ac:b2:d0:a8:9a:6a:ac:4a:fb:27:
4d:ab:6d:e5:a3:8a:d3:03:32:cd:67:6b:45:2c:1e:
5a:f2:9a:94:3a:9c:ef:d4:0c:9b:09:ce:fe:14:03:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:7B:59:CC:01:A8:1A:0F:5B:AA:C1:B8:32:10:DD:23:59:9B:37
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.76.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:08:e2:6d:5a:22:92:6c:f7:06:c7:f1:c8:6c:2e:3d:a6:9e:
fd:83:ad:18:06:97:ba:d5:71:a0:ef:5f:22:db:66:11:cc:88:
6c:98:eb:a2:79:83:0e:3f:6e:a0:af:ae:6d:fd:c1:1d:7d:d4:
b3:af:34:ae:99:6d:43:cb:35:91:69:55:92:d1:d4:78:a2:62:
54:ad:46:98:cd:54:49:cb:9e:e1:aa:2c:b7:14:08:ee:de:2c:
ae:ee:83:3c:f1:e8:6b:a8:fd:2f:28:b0:b4:44:34:e9:78:d6:
0b:b0:9d:0e:28:b7:b6:7d:44:8a:aa:f6:00:52:8f:85:79:d1:
af:45:09:90:6e:de:92:60:b7:1d:f3:c8:4b:bd:17:8c:3d:19:
d5:77:1a:5b:de:d0:4d:29:cf:f1:58:f4:70:f1:bf:e0:1c:4d:
a2:c3:fd:d2:fe:fa:f0:57:95:38:20:32:d1:df:2a:21:0f:c0:
ae:5f:02:ba:ba:f9:a6:59:85:e9:f0:8b:4c:2f:34:87:00:44:
62:c3:23:58:bb:ca:97:1b:05:f0:5f:86:db:94:18:81:f6:7d:
78:78:5e:fa:8a:2e:5e:61:90:fa:75:a8:0d:8b:33:b4:7f:b7:
05:12:b8:42:2c:bb:28:21:9e:73:5d:01:42:61:40:ca:74:c6:
a4:5f:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:19 2025 by rpki-client