Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa
File: HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa (raw, json)
Hash identifier: hj+XgnyJ0Da4wSkZgTsnnXr4WcLVInfl1QD5sz921GI=
Subject key identifier: 1E:D5:8F:92:CF:2B:7B:CC:13:F9:07:34:A7:FD:AF:1A:1F:10:78:C4
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0195671452DC6F5B93487D3F70CDFBEA1AF6
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa
Signing time: Wed 05 Mar 2025 16:12:19 +0000
ROA not before: Wed 05 Mar 2025 16:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 144.56.7.0/24 maxlen: 24
144.56.9.0/24 maxlen: 24
144.56.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:14:52:dc:6f:5b:93:48:7d:3f:70:cd:fb:ea:1a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 5 16:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ed58f92cf2b7bcc13f90734a7fdaf1a1f1078c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:87:a4:08:e0:f3:3c:ed:cc:40:50:55:72:
33:8d:d6:ef:b8:40:a7:81:3b:04:c5:42:37:3a:15:
77:98:91:25:54:d2:74:72:f2:90:b9:e0:a5:5f:89:
ca:e6:79:04:8a:7e:d2:7b:72:28:34:ce:6e:ef:8e:
bc:1f:2f:9d:0a:7b:c4:5c:72:4e:a4:40:18:8f:1b:
77:13:8b:94:fc:6f:9c:5f:fd:5f:14:2c:5d:04:04:
b4:99:f0:6f:a3:9d:6f:3c:8c:a6:9a:ee:d4:f7:eb:
f3:69:42:94:8c:82:7b:56:16:3f:44:2d:08:78:87:
9a:88:9b:1d:e7:50:3a:77:ab:54:76:81:43:df:ce:
62:90:db:43:5d:2f:91:cc:b1:df:b1:5a:06:8c:b2:
c6:8d:9d:f4:14:4f:c7:d9:aa:57:2d:db:67:b1:c0:
e9:27:8d:44:e7:6b:cf:43:45:b6:49:0d:1b:b1:5a:
f1:ab:a5:4c:4e:11:5d:41:fd:31:2b:e4:ac:35:e9:
65:85:8d:b5:36:43:76:9a:94:a0:2c:16:69:5f:77:
c3:0b:69:bd:20:8a:63:7a:2a:0a:aa:e3:63:66:eb:
f5:83:d8:b7:3a:88:6a:6c:99:b0:19:1f:fc:64:40:
eb:22:86:e4:a0:2b:e9:37:8c:11:dd:55:e2:98:58:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D5:8F:92:CF:2B:7B:CC:13:F9:07:34:A7:FD:AF:1A:1F:10:78:C4
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.7.0/24
144.56.9.0/24
144.56.12.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c6:b5:ac:29:33:1f:f7:00:07:11:4e:a1:fd:cb:c8:36:ca:
b0:40:b7:00:58:ba:ec:a5:f7:0e:dd:bf:8f:1f:6d:e9:54:b2:
c5:94:d2:62:58:15:33:ac:dc:21:3d:90:2e:12:e0:17:1c:cc:
20:7a:ba:4f:ab:ff:09:6f:50:51:d6:67:d0:55:1e:81:77:21:
92:b5:e7:36:2c:f0:ed:50:43:e9:ae:49:ad:aa:4d:16:09:e0:
26:11:b3:2d:19:8b:99:40:1c:d2:c9:a4:3b:6c:76:e9:a6:26:
50:10:ce:85:67:55:71:b6:bf:fc:c9:0a:34:d1:fe:ed:91:74:
5e:cf:6e:fc:58:ce:42:0a:89:55:be:00:82:a7:5d:fa:73:b5:
46:78:6a:b8:88:c1:a3:c4:38:a1:a1:23:df:1e:b0:3a:88:18:
0f:bd:ca:8a:71:74:a6:3b:99:de:2f:bd:be:cd:fb:b3:b9:be:
5a:aa:37:6e:f3:53:05:0c:70:ec:31:b9:64:a7:78:b9:32:2f:
24:d9:8f:2c:58:1c:71:f2:ed:4b:f4:6a:db:bd:d7:fa:10:54:
57:4b:d7:33:68:7a:5d:45:a4:27:91:18:c0:dd:35:3f:ad:27:
4d:b9:ac:62:a4:c9:9a:4b:66:15:a0:fa:07:86:79:ae:7a:45:
6c:96:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:47:53 2025 by rpki-client