Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HhCJt_jUxAplSsm5-Ov4vD4x3bs.roa
File: HhCJt_jUxAplSsm5-Ov4vD4x3bs.roa (raw, json)
Hash identifier: OplVjM7P+lv+jNELJOUXAeYh2QDWTNxhOacRJQMY7vM=
Subject key identifier: 1E:10:89:B7:F8:D4:C4:0A:65:4A:C9:B9:F8:EB:F8:BC:3E:31:DD:BB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2761E0D0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HhCJt_jUxAplSsm5-Ov4vD4x3bs.roa
Signing time: Sat 01 Jan 2022 16:07:53 +0000
ROA not before: Sat 01 Jan 2022 16:07:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24758
IP address blocks: 92.38.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660725968 (0x2761e0d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e1089b7f8d4c40a654ac9b9f8ebf8bc3e31ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:59:5e:e6:51:7e:3c:16:a4:42:f6:0d:18:
b5:35:bb:db:86:63:50:60:49:98:2d:e0:43:32:80:
e5:0d:d5:00:79:d5:ed:b0:25:61:4a:5d:7a:22:da:
6c:79:99:d8:58:e7:25:4c:d6:6d:87:88:49:a4:d5:
5e:33:cb:f0:48:48:49:36:99:6d:b3:bc:08:b7:29:
9c:8b:40:de:a3:a6:6f:93:6c:97:31:7d:7e:6f:88:
88:21:2c:f8:06:32:2e:27:fc:e9:f2:65:88:78:f6:
fb:42:0d:14:a9:cd:9e:89:6e:fb:cf:aa:46:0e:1b:
8f:94:f1:9a:ce:08:f9:6a:a2:0b:9c:42:f5:cb:23:
6a:85:74:1e:3c:8d:f9:76:29:68:8d:88:c5:a2:59:
bd:83:76:9c:e8:ac:c0:03:27:3b:a6:7a:bd:05:da:
79:b6:5b:45:85:0b:95:06:fc:db:ed:60:56:10:21:
86:00:f0:5a:2b:2f:25:fe:b5:df:1e:19:d8:a5:31:
4e:bc:da:0a:24:3f:f6:d1:f8:42:3b:8b:6f:cd:dd:
01:3d:23:6d:5e:0d:19:ad:a1:aa:13:30:8e:19:09:
47:42:e8:33:55:71:9e:83:9e:cb:39:97:80:cf:fb:
4f:ca:3d:35:3f:a7:23:d9:8b:ad:ff:0e:85:0d:49:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:89:B7:F8:D4:C4:0A:65:4A:C9:B9:F8:EB:F8:BC:3E:31:DD:BB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HhCJt_jUxAplSsm5-Ov4vD4x3bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.8.0/21
Signature Algorithm: sha256WithRSAEncryption
27:9a:e0:eb:a5:a3:80:ed:89:da:87:07:e2:26:57:1b:9a:24:
ea:15:5d:c3:60:72:8f:5f:a7:ed:6c:6c:5e:23:9a:9d:f4:48:
4b:c7:5b:3c:b0:ce:3c:42:3a:dd:f8:22:11:c3:c8:46:ea:c7:
b6:98:3c:43:25:cd:59:81:17:49:a8:cf:10:64:c5:a4:ea:50:
c0:39:dc:f4:4c:ce:ac:9e:d7:13:eb:96:31:c6:1f:05:a5:5d:
76:a1:25:30:da:9c:27:57:6a:6f:e7:25:f1:d4:b5:91:ad:06:
d5:6b:70:40:ac:32:f1:71:82:c0:08:25:22:70:a4:3c:6e:1c:
8e:ea:99:b6:ba:88:a9:c7:c7:75:64:bb:42:c8:a7:7c:13:69:
43:91:22:ac:f1:6e:62:64:7b:cf:10:3d:8a:4b:eb:59:4a:88:
c3:30:74:14:98:75:28:70:dd:a0:d9:a6:62:df:29:59:0c:2a:
b5:58:b3:4d:0b:83:76:23:10:2d:1f:89:75:71:11:c1:3b:64:
76:a9:cd:88:9d:9a:3e:70:08:d7:de:81:bf:5c:53:84:74:a0:
98:30:d6:e9:21:29:10:30:16:0b:f2:03:6f:aa:e6:e9:c6:b6:
b7:5f:72:e9:8d:43:62:03:0a:2c:c2:88:d2:fe:3f:1e:2d:2d:
97:5d:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:28 2025 by rpki-client