Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/HXNtGUG7X3S4W42pDamC4qxMdGo.roa
File: HXNtGUG7X3S4W42pDamC4qxMdGo.roa (raw, json)
Hash identifier: TzCBb1kjCYo1jFyYemBNSysr8qwA4uMmT9bNWJpTYY4=
Subject key identifier: 1D:73:6D:19:41:BB:5F:74:B8:5B:8D:A9:0D:A9:82:E2:AC:4C:74:6A
Certificate issuer: /CN=a7bac61750ea2fc833f029809fe563a1142c813e
Certificate serial: 05E4CC6F
Authority key identifier: A7:BA:C6:17:50:EA:2F:C8:33:F0:29:80:9F:E5:63:A1:14:2C:81:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7rGF1DqL8gz8CmAn-VjoRQsgT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/HXNtGUG7X3S4W42pDamC4qxMdGo.roa
Signing time: Sat 01 Jan 2022 09:00:44 +0000
ROA not before: Sat 01 Jan 2022 09:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43915
IP address blocks: 195.244.2.0/23 maxlen: 23
195.242.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98880623 (0x5e4cc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bac61750ea2fc833f029809fe563a1142c813e
Validity
Not Before: Jan 1 09:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d736d1941bb5f74b85b8da90da982e2ac4c746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:26:9a:c8:4d:88:62:c0:90:73:25:12:25:
3e:69:8e:da:4f:b2:29:7d:dc:04:f9:30:8a:fe:ef:
ef:c3:62:1a:d5:a0:90:6a:3e:b3:e9:e4:42:17:ad:
ea:01:e1:28:55:13:75:33:0c:8c:fd:85:cc:37:38:
46:a8:bb:58:82:7f:b5:cb:b7:a1:27:e3:03:47:84:
6d:68:08:5c:9e:09:e1:c7:af:43:92:21:d3:5a:17:
0e:3d:65:7a:52:d5:81:36:89:4b:56:81:3b:ce:25:
94:39:03:99:25:12:91:c8:f3:db:77:1c:46:d6:59:
3c:25:19:54:76:c4:d6:28:98:da:80:01:7f:01:f3:
e6:7b:be:c2:d3:33:69:eb:53:cc:a9:c8:41:ce:81:
56:96:ec:1f:b9:39:ed:7b:73:08:68:a1:64:d7:26:
4f:12:7b:4f:46:23:bb:e7:67:65:1f:28:d5:50:66:
20:45:25:7e:a2:84:80:aa:6a:08:3e:25:64:8a:dc:
38:b8:b8:f6:46:b1:ce:e8:bb:ff:90:84:c7:e8:86:
26:5b:e1:ad:a3:07:e5:c3:cc:e7:e9:83:c6:88:ac:
53:7b:bc:54:3a:db:6e:7b:0a:c8:27:d3:37:5b:39:
06:4e:da:ff:0e:04:8f:72:f3:57:6a:6c:31:28:5d:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:6D:19:41:BB:5F:74:B8:5B:8D:A9:0D:A9:82:E2:AC:4C:74:6A
X509v3 Authority Key Identifier:
keyid:A7:BA:C6:17:50:EA:2F:C8:33:F0:29:80:9F:E5:63:A1:14:2C:81:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7rGF1DqL8gz8CmAn-VjoRQsgT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/HXNtGUG7X3S4W42pDamC4qxMdGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df99a1-86b3-46ab-bce4-941692ecb6d6/1/p7rGF1DqL8gz8CmAn-VjoRQsgT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.148.0/23
195.244.2.0/23
Signature Algorithm: sha256WithRSAEncryption
56:f7:38:3e:38:c0:0d:cf:2d:c7:cc:5a:dd:12:b6:13:8b:c3:
a6:94:7e:a5:5c:4b:58:36:f4:59:6e:33:33:fc:40:ea:c9:82:
6f:1b:16:29:67:80:f8:f6:8c:73:a4:06:b5:15:b5:57:7e:bf:
62:b1:3f:7e:62:cd:05:d3:52:72:d9:e9:41:31:56:e5:70:7b:
7c:e1:d5:48:b3:13:ff:06:bb:93:de:7f:0f:41:33:8b:7a:4d:
01:8b:f0:70:91:2d:ef:0b:c1:73:78:48:c0:db:56:66:fa:32:
75:6a:7e:4c:4f:94:6c:5f:16:8e:fd:19:95:2c:64:1a:68:55:
45:09:2a:1d:cd:43:1c:20:8f:29:48:65:5a:ef:01:ab:8d:dd:
12:ae:1b:54:36:0c:39:c1:2e:6e:e4:cb:2a:a7:7e:f8:c1:1c:
8e:61:59:a4:86:80:36:b7:2b:cb:fa:1d:55:af:69:cf:c6:37:
75:7a:7e:b9:6f:f5:6b:c8:8a:60:e3:be:52:0d:25:dc:bd:2a:
3d:77:71:d0:fb:c8:28:51:24:5b:4f:fb:e6:95:f7:84:b3:ea:
31:67:08:f0:a1:a6:7a:fc:a2:a0:5d:5e:f8:5d:10:68:ff:85:
bd:1c:b4:fb:e4:e6:e8:74:c2:ad:7f:40:fe:e5:df:49:7e:99:
05:61:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:49 2025 by rpki-client