Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/hNJp5w43tXh3heyUu41XWd3uLP4.roa
File: hNJp5w43tXh3heyUu41XWd3uLP4.roa (raw, json)
Hash identifier: hWRINvheIN9WV+05sZn97ermDNhL4to4lEvxoYQ/UGs=
Subject key identifier: 84:D2:69:E7:0E:37:B5:78:77:85:EC:94:BB:8D:57:59:DD:EE:2C:FE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484216A2E54121B430096DE3B216AA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/hNJp5w43tXh3heyUu41XWd3uLP4.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201152
IP address blocks: 201.49.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:42:16:a2:e5:41:21:b4:30:09:6d:e3:b2:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84d269e70e37b5787785ec94bb8d5759ddee2cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:e4:9a:8f:7d:b5:ed:49:c6:2b:bb:a5:7e:
44:90:03:9d:c5:40:bc:c5:8f:4f:e2:05:3a:19:3e:
97:77:4b:67:0d:ee:23:48:50:5e:19:e3:bb:d8:28:
61:92:c4:61:90:84:88:a8:a1:24:76:81:e8:51:08:
54:be:b6:96:e7:0f:b8:1c:65:6f:bd:1e:36:a9:b5:
57:27:2c:3c:6f:ef:7e:e5:16:23:2b:d2:b1:6c:5f:
b1:6e:a3:7b:4e:2d:2d:9f:ef:b1:20:b2:5b:bb:a5:
b5:18:b9:a5:24:af:83:79:51:9a:35:c4:0e:45:ec:
54:b8:a6:5d:6a:00:59:74:39:ab:d2:5c:1c:31:30:
58:8d:70:a3:67:39:14:38:38:b8:5d:d3:0b:ba:f7:
1f:3f:3a:4b:58:f5:f8:32:42:36:c4:2b:5b:30:c9:
0c:15:be:c3:3e:df:bf:94:f5:19:84:d7:ae:37:b8:
8e:ca:7c:e1:50:dc:b1:65:d3:a4:d4:ee:de:f2:9b:
81:af:0d:2f:c4:44:c0:78:ed:a7:10:a9:c5:78:02:
59:14:7d:30:79:d9:bc:f8:18:bb:37:f8:97:40:04:
11:3b:2d:89:fd:2b:c6:e3:af:f2:8c:d1:52:ae:fe:
37:d1:6c:60:a1:71:01:b9:58:e1:1e:02:1a:ad:83:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:69:E7:0E:37:B5:78:77:85:EC:94:BB:8D:57:59:DD:EE:2C:FE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/hNJp5w43tXh3heyUu41XWd3uLP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.188.0/24
Signature Algorithm: sha256WithRSAEncryption
84:54:d9:63:3a:29:78:44:00:24:5b:6e:74:fb:a1:a2:3b:43:
b3:a2:25:be:4c:ea:3f:c1:1b:67:7f:e4:56:89:d3:17:11:87:
0a:10:3e:b3:f3:9d:a1:77:34:9b:83:2e:3c:73:42:73:54:33:
f4:8f:bd:4a:18:49:8f:74:00:f1:52:6c:76:92:45:50:9d:ef:
cb:34:72:7b:54:23:40:fb:94:7e:fe:56:b1:02:f3:81:c8:ad:
7e:37:93:e9:2f:d7:21:b5:1e:ad:7e:69:8b:a0:22:f3:10:9a:
20:c1:18:5e:35:07:6d:40:e9:2d:b5:8c:8d:17:46:0e:83:e3:
15:2b:7b:e0:bc:17:09:7d:0a:7c:7f:a5:ca:12:6b:53:40:79:
f6:18:fb:f6:90:b2:f9:1d:bf:a5:37:36:32:56:55:35:b2:a3:
e6:5a:49:b2:71:fa:1e:3d:b2:16:1d:b8:87:7a:a6:30:bb:d2:
79:1d:30:da:fa:a8:3a:a8:48:46:01:07:9e:67:c0:93:e5:6f:
e4:de:a3:e1:30:e2:56:26:82:37:55:e6:2b:a2:7d:5b:b0:69:
df:b6:3b:48:be:66:01:df:14:a3:1b:ed:da:4f:ad:e2:21:ab:
0f:b7:77:ed:0d:3c:9b:2f:59:ce:ae:e3:4f:d1:0f:8b:cd:84:
40:59:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:40 2025 by rpki-client