Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/hkpjjAx2DE4nxJX8muiagvMf5-U.roa
File: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (raw, json)
Hash identifier: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=
Subject key identifier: 86:4A:63:8C:0C:76:0C:4E:27:C4:95:FC:9A:E8:9A:82:F3:1F:E7:E5
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0194266B943B8AAC1A154149F26ED1CCC22D
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/hkpjjAx2DE4nxJX8muiagvMf5-U.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47516
IP address blocks: 45.143.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:94:3b:8a:ac:1a:15:41:49:f2:6e:d1:cc:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=864a638c0c760c4e27c495fc9ae89a82f31fe7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:a5:bb:f3:2e:8d:51:c9:73:40:46:ae:c9:
a1:83:b1:98:3c:18:5c:4c:e9:4c:54:58:12:dc:6a:
42:1e:12:f9:c5:0c:d7:58:22:8f:11:29:fc:5d:3d:
9d:0b:02:8a:8a:7c:9b:c9:50:4e:b7:38:c2:56:d4:
be:1f:43:65:bf:67:02:7a:67:9d:90:05:cd:7d:68:
0d:36:f6:8d:34:71:72:d1:b1:99:fd:d1:0e:5c:a7:
c6:f0:7d:97:ef:41:a9:9c:39:78:31:c4:e3:27:c4:
e7:58:0e:b7:1c:39:58:be:78:13:a0:8e:1a:3c:17:
37:c5:f3:ce:6f:9e:4b:aa:53:24:8a:b6:ac:6f:7a:
38:af:5f:3c:6e:05:50:26:09:57:32:8b:3b:58:70:
3b:51:c5:1c:cc:ae:13:da:8f:99:53:0d:c6:c6:e8:
1e:63:dd:30:b1:8d:cf:ab:bf:56:2f:3b:40:e3:2a:
de:7d:0f:ff:e5:b0:ac:4a:8c:78:79:0a:80:a9:de:
32:b3:cd:54:e0:6a:70:8c:46:fe:33:5f:53:3b:ec:
1f:92:2b:ef:c0:df:42:72:b2:f8:dc:4e:33:c6:69:
07:34:3d:76:8d:f6:56:35:8b:d2:5e:e7:63:9c:f8:
02:b2:39:e2:3a:aa:20:fc:fb:a3:3b:e3:6b:6f:c7:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:63:8C:0C:76:0C:4E:27:C4:95:FC:9A:E8:9A:82:F3:1F:E7:E5
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/hkpjjAx2DE4nxJX8muiagvMf5-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.4.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2a:68:c6:ea:b7:46:7e:4e:eb:f1:fd:57:39:ac:b5:e0:64:
3a:13:f2:1b:ed:40:41:f6:fa:9e:aa:51:85:44:72:bd:0f:26:
93:4f:cd:48:11:6e:75:77:94:52:82:38:1a:ad:1b:36:40:14:
e0:5e:ef:b9:61:af:bc:40:77:6e:98:b1:c5:70:4d:4e:2f:72:
87:e8:82:99:4f:01:38:0b:55:cc:9c:ed:2e:5c:d0:05:fd:41:
f0:a0:2b:97:64:a3:3f:82:21:d6:44:12:b7:0e:24:c4:16:ef:
ee:d5:fa:23:eb:43:40:0f:2c:75:41:7e:bd:7d:37:d7:0a:2e:
30:e5:72:4d:69:fc:3e:6c:82:27:6e:3b:2f:21:87:8c:65:fe:
39:71:6b:c8:64:22:e0:85:b4:34:21:04:a2:a8:d9:4e:57:f9:
7e:04:9e:60:af:97:53:b0:56:2d:a1:e9:bb:f3:b5:f5:85:bd:
da:49:e6:b3:f9:eb:b7:1a:df:d3:a9:5a:4f:35:2a:34:22:c8:
12:bb:1d:11:27:f8:1c:e0:04:39:01:57:f8:f9:5b:55:bd:6c:
32:75:1e:9c:2d:9b:6c:81:d4:c6:c3:64:91:5b:d5:45:d0:d0:
5a:70:c4:a0:79:c5:6f:b8:1a:55:79:c2:10:b0:ab:d0:2f:36:
8d:d8:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:27 2025 by rpki-client