Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HQHZ4a6-rt_ks727XQwRVisbb5I.roa
File: HQHZ4a6-rt_ks727XQwRVisbb5I.roa (raw, json)
Hash identifier: pwILMQdnoFWKoUdDGeoBGUS4+u+Jko6Rh9Ewo794vGQ=
Subject key identifier: 1D:01:D9:E1:AE:BE:AE:DF:E4:B3:BD:BB:5D:0C:11:56:2B:1B:6F:92
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC24A3502378C3BBFB97DA43FBA0B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HQHZ4a6-rt_ks727XQwRVisbb5I.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56534
IP address blocks: 31.148.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c2:4a:35:02:37:8c:3b:bf:b9:7d:a4:3f:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d01d9e1aebeaedfe4b3bdbb5d0c11562b1b6f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:0b:4c:2e:57:90:69:0f:fb:88:dc:8b:41:
40:c1:a7:b7:78:5b:be:7f:29:25:0f:32:80:ef:95:
78:34:b1:79:17:b8:77:73:64:a6:06:8b:e6:e2:85:
dc:50:32:f7:77:d2:48:ca:58:96:26:e9:9a:04:7b:
8f:b9:57:dd:cc:9d:6e:60:6b:ed:32:e1:28:db:31:
d2:58:47:79:ce:73:17:ed:f3:4f:61:d1:aa:8d:98:
dc:ea:56:80:0f:b6:f8:35:43:3c:e6:c8:2d:95:08:
01:3f:44:41:0a:5b:76:ee:8d:8b:ef:34:91:0d:07:
a1:5f:54:18:71:b4:a4:4c:39:d4:e2:f1:01:ce:1b:
e0:cb:c4:dd:d2:8f:c4:7e:11:b6:f5:cb:6d:28:f2:
7a:df:6a:45:12:0c:b6:41:b1:36:02:8c:03:83:8f:
cf:dc:ea:d5:6e:4f:54:3e:21:69:10:c2:24:de:0e:
a9:41:fc:76:e2:5a:38:cd:e6:c7:75:06:fd:69:d3:
08:fb:a4:99:02:a5:c1:1d:e5:43:b8:67:f3:e2:f7:
17:ba:66:93:2e:0d:8c:d6:2c:1f:04:5b:6c:72:5f:
01:92:a5:20:aa:6f:ec:0a:dd:52:8b:4c:a5:2b:1f:
20:6b:45:3c:2b:c7:d4:56:bc:bb:90:9d:26:d6:13:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:D9:E1:AE:BE:AE:DF:E4:B3:BD:BB:5D:0C:11:56:2B:1B:6F:92
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HQHZ4a6-rt_ks727XQwRVisbb5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ba:7a:ea:ec:e0:f7:01:38:c8:e7:f8:a6:c4:2b:f8:a6:4b:
e6:26:df:86:1e:16:cb:7d:ae:86:57:f2:6e:7d:39:1c:1d:4a:
25:c9:4c:5f:0f:53:4e:90:bf:f8:f2:11:e1:85:82:1c:15:ae:
0a:30:82:f8:13:b0:f0:f1:84:82:12:01:1e:2d:a4:97:7a:b5:
7b:c6:1e:78:ee:34:1a:78:ce:52:f8:94:62:90:ab:1f:76:8c:
53:df:81:df:09:2b:9b:51:ee:dd:c2:ea:f1:ae:b5:f2:e0:e0:
dd:e8:a1:da:89:ef:07:8e:bf:e0:b2:60:d5:46:b2:7c:6b:da:
f0:16:da:d5:38:a7:97:3e:4d:18:bd:4d:13:47:c8:44:07:32:
e2:d8:b4:22:41:70:d4:1f:2b:9c:c5:ee:75:ee:5e:91:25:b7:
1f:f9:56:d5:8d:31:f3:9a:0e:26:55:e2:f1:c0:78:d0:53:78:
84:17:bd:05:4b:e6:8a:a5:f5:8f:fb:14:0a:71:63:97:da:eb:
dd:11:75:30:99:f6:0c:a8:91:10:37:62:88:7e:a2:a8:9d:ad:
f4:c5:ce:3e:54:ea:12:9e:4d:31:1e:fb:c1:61:8d:a8:b3:f0:
82:79:a1:b4:79:2a:24:32:15:10:bb:a8:fa:40:4a:cd:6b:b0:
69:16:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:41:30 2025 by rpki-client