Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hl_dnGP3ijDlPH5essujPlf-0no.roa
File: Hl_dnGP3ijDlPH5essujPlf-0no.roa (raw, json)
Hash identifier: bg90beNkWj9romiQd1p7/XCEzvqZ/Kxvtn5Uu0xKFnQ=
Subject key identifier: 1E:5F:DD:9C:63:F7:8A:30:E5:3C:7E:5E:B2:CB:A3:3E:57:FE:D2:7A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095ACB9D88B02E354C1CA60130F1E9A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hl_dnGP3ijDlPH5essujPlf-0no.roa
Signing time: Mon 02 Jan 2023 03:45:35 +0000
ROA not before: Mon 02 Jan 2023 03:45:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209213
IP address blocks: 92.253.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:ac:b9:d8:8b:02:e3:54:c1:ca:60:13:0f:1e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e5fdd9c63f78a30e53c7e5eb2cba33e57fed27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:91:88:79:35:d9:02:6f:00:06:8e:65:56:
17:76:a8:b3:23:29:e7:d2:9f:99:71:fa:4b:86:04:
57:16:d9:67:d6:06:52:a9:06:0f:2c:d1:7c:f7:70:
ad:18:37:eb:f9:31:3a:fe:3b:ac:bf:1c:42:d6:9d:
05:0e:2b:0e:5b:0f:82:89:4b:44:8e:ea:0f:fc:00:
7f:fc:26:f0:ea:aa:1e:67:3d:ff:98:2d:4b:87:db:
83:ed:8f:48:16:7c:40:55:7e:d9:5f:26:da:5c:a2:
94:17:6a:39:c0:d1:cb:de:7b:73:7f:fc:d6:49:c6:
b0:10:92:47:df:73:6b:61:54:52:51:3f:2f:3e:12:
ac:2e:c5:9a:34:28:6a:6d:be:9d:da:90:cb:14:72:
6b:1b:5e:1c:7e:85:4a:fa:dc:0d:8b:12:e2:c4:33:
a4:64:3b:9f:fb:f7:a1:63:e4:87:05:a0:50:f7:92:
40:b3:3b:51:69:7c:b9:78:cc:d7:ba:67:d0:c1:a1:
49:3e:59:da:83:0e:fc:7d:be:22:a4:58:ee:c1:8e:
94:74:ff:e1:b0:e1:56:05:ee:b3:68:8a:05:d9:6f:
05:ef:8d:48:3f:ec:d6:00:e0:b8:e6:a8:d7:cd:46:
60:c5:50:ae:92:ce:a0:c4:1c:0a:3b:cf:5d:66:8e:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:DD:9C:63:F7:8A:30:E5:3C:7E:5E:B2:CB:A3:3E:57:FE:D2:7A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Hl_dnGP3ijDlPH5essujPlf-0no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:07:3e:b4:0a:9f:81:23:9c:df:c0:15:3f:86:40:2d:7f:56:
0d:9e:27:9e:af:17:01:fd:78:58:2b:1b:2e:4a:96:ea:c6:a3:
43:5b:07:c6:a5:2c:a7:9c:82:fd:9a:59:4a:55:dc:89:d2:d9:
30:1a:02:95:a0:b6:a6:7b:bd:0c:15:7e:00:ff:f1:cf:d6:f6:
70:2f:6f:09:79:9d:39:cb:6c:96:cc:4a:8a:2a:d1:9e:d7:0b:
3f:a7:27:3b:db:0f:30:c5:fe:fa:30:62:d3:a4:ae:68:6f:f3:
b6:ab:c4:34:9a:ce:f4:d6:02:2f:29:c5:23:ff:62:cf:c8:bd:
73:6d:b6:a3:33:3f:99:67:41:94:80:3c:7b:5a:5b:90:c6:7f:
28:b8:24:32:04:0e:50:f7:2d:dc:7c:e1:c5:c1:77:d6:a7:a4:
00:fe:67:6e:6a:4e:f0:ba:f7:5b:ac:91:25:37:bc:29:b0:66:
f1:55:62:e4:03:7e:7d:62:52:4b:53:a1:c0:99:9f:e5:64:80:
5b:10:2d:79:da:af:bf:b6:48:fd:72:fa:38:77:47:ff:df:31:
2c:e1:6d:17:90:e6:62:4b:0a:66:6e:3f:e7:a1:6c:b0:72:99:
fd:fa:47:34:0d:29:d4:8b:4a:d5:88:7f:29:23:eb:b1:cc:e2:
bc:c5:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:37 2025 by rpki-client