Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/huajeoOGBr4ReLrebA2G8UXRXYA.roa
File: huajeoOGBr4ReLrebA2G8UXRXYA.roa (raw, json)
Hash identifier: C5z95b339+AgDf9rlbYeFBGblfwVTd4iteCzB6mEDcg=
Subject key identifier: 86:E6:A3:7A:83:86:06:BE:11:78:BA:DE:6C:0D:86:F1:45:D1:5D:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570950E515AEC168F415C3DC0D70D2263
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/huajeoOGBr4ReLrebA2G8UXRXYA.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31133
IP address blocks: 92.38.42.0/24 maxlen: 24
92.38.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0e:51:5a:ec:16:8f:41:5c:3d:c0:d7:0d:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86e6a37a838606be1178bade6c0d86f145d15d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:cc:cd:32:ec:ec:3e:67:aa:15:e5:e9:e2:
c1:b6:62:2d:a3:b8:b9:63:a3:c2:fa:c6:22:ba:4d:
5f:3a:e7:82:20:f3:61:9a:c4:e6:8b:83:57:96:d1:
97:00:b6:dd:e3:6c:d7:df:7c:d9:10:43:12:a2:1b:
57:16:ed:64:c5:d9:20:48:49:2c:69:f7:02:b0:1c:
30:3f:01:43:cd:13:fb:f0:5f:d5:2b:d9:58:81:b5:
a3:d9:1c:b2:88:4d:09:df:b0:27:74:a3:4c:39:5a:
25:f1:31:6b:dc:7b:89:a3:79:89:de:6d:51:04:93:
63:fc:eb:8b:a8:75:fb:78:07:3b:f4:58:9c:eb:e2:
1c:99:ea:fe:a3:be:4d:9f:ce:e4:77:dc:a8:34:df:
43:2a:17:c5:c9:42:85:2e:e2:b6:ca:59:fb:54:8e:
e5:cd:41:5d:cf:aa:e9:fa:51:9f:3c:ad:88:77:65:
c5:5f:67:1f:f7:dc:f0:8c:4c:c2:42:70:15:72:fc:
51:a8:a0:43:ba:29:a0:a5:f8:ae:24:c6:ba:ce:93:
1f:b7:7c:c5:2b:7b:e3:d2:3e:9c:11:79:bd:28:54:
ae:80:c4:8a:58:81:07:0d:36:59:80:75:88:cf:bb:
5e:53:f1:fd:42:98:f9:14:8e:5c:33:f4:f3:60:77:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E6:A3:7A:83:86:06:BE:11:78:BA:DE:6C:0D:86:F1:45:D1:5D:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/huajeoOGBr4ReLrebA2G8UXRXYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.42.0/24
92.38.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:93:57:26:36:e7:e0:37:34:d4:1e:10:45:c9:4d:34:65:47:
e5:c5:c2:df:4d:e9:92:2f:5c:e8:f7:cb:fc:77:57:2f:12:c1:
9f:40:b6:32:a5:64:b6:c0:4c:31:d9:2d:10:40:ce:53:17:12:
2e:34:ca:5a:bf:b1:c4:06:c4:24:ce:24:40:33:9b:1d:ab:b1:
30:f7:ea:21:cf:a7:31:5e:79:09:cc:48:3e:30:cb:67:1c:55:
71:8a:fd:6f:ac:b3:2a:25:e1:70:0d:59:1f:e5:e4:8f:c0:e5:
3b:9d:b7:65:fb:b4:c4:b9:69:64:30:b5:dd:9a:df:11:bb:71:
c8:3d:07:7b:fc:21:84:e6:7c:2b:9b:39:bc:1f:a7:04:ff:1b:
a0:91:0c:3a:a4:dd:6f:08:7d:50:10:fe:4d:c9:68:9e:20:38:
a2:61:15:76:62:1f:95:b0:f9:41:e9:32:c0:73:e4:f6:7a:35:
21:60:82:fc:17:50:ed:99:b6:ff:65:53:f5:4e:95:ee:06:db:
1e:31:11:df:97:f0:28:0f:65:d1:64:0e:31:5e:56:36:fc:0a:
4e:0e:d9:d4:fa:92:36:43:eb:f2:9a:d5:c8:d3:cf:c2:4d:bd:
5e:00:e9:94:c1:49:6b:a5:a6:9a:67:cf:17:01:4b:63:1d:0a:
67:1b:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:43 2025 by rpki-client