Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa
File: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (raw, json)
Hash identifier: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=
Subject key identifier: 86:60:D3:64:E1:0C:42:8D:85:B2:03:19:D9:B1:F9:1D:D5:36:BF:22
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019473B96A04F74E5B067411B5EE088CD82F
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa
Signing time: Fri 17 Jan 2025 10:05:18 +0000
ROA not before: Fri 17 Jan 2025 10:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 130.115.0.0/16 maxlen: 24
145.5.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:b9:6a:04:f7:4e:5b:06:74:11:b5:ee:08:8c:d8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jan 17 10:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8660d364e10c428d85b20319d9b1f91dd536bf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:e2:85:a2:95:63:05:37:db:31:c2:a5:4e:
a6:d6:61:dc:38:1f:9d:ab:f7:93:6c:3e:77:9e:e7:
77:c3:7e:37:bf:d9:f6:01:59:29:fe:9b:80:01:62:
da:a0:a8:5c:67:f3:b3:31:2b:a3:0c:82:03:1f:32:
1c:a4:43:bc:1c:b2:ca:0e:d3:d9:eb:8f:5c:dc:18:
0b:88:7e:90:f7:a2:c6:cb:72:35:44:01:70:b8:76:
c7:86:83:06:d5:c5:bf:fb:35:7b:c1:b5:52:7c:e9:
fe:ea:8b:da:7b:34:2e:64:de:67:52:c5:65:9e:3d:
2d:09:44:6b:bb:d2:0d:99:cc:0b:b0:0f:72:be:7f:
60:e3:25:a9:1c:1b:02:10:eb:a3:79:33:7a:da:16:
ef:d6:f9:97:f2:e0:f4:30:0c:6b:bf:db:f4:1f:85:
83:80:98:db:6b:93:3b:da:50:c5:95:fa:df:25:c2:
ae:0c:5a:8f:c7:9a:18:67:4e:f0:9b:87:bb:95:c1:
1a:9e:b9:fc:d1:fd:a5:4e:91:d4:ce:48:d3:b3:fa:
7d:66:2c:3f:29:08:14:1b:9b:59:5b:1c:09:5e:48:
d0:53:19:62:c4:3f:6b:74:da:54:52:43:f3:cd:67:
85:74:7e:6c:52:4f:18:88:dc:4c:e8:ee:3a:ac:5f:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:60:D3:64:E1:0C:42:8D:85:B2:03:19:D9:B1:F9:1D:D5:36:BF:22
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.0.0/16
145.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:f8:db:61:ca:47:e6:b6:1d:ce:2c:44:f3:25:f6:cc:85:e6:
d2:b2:8d:ac:c7:eb:a6:b7:b6:4c:d5:de:92:1e:77:92:74:12:
c1:56:a8:86:fe:a3:88:f9:6f:53:b5:11:c7:cc:f1:d5:ee:a3:
cf:48:5e:e6:3c:24:14:f3:ba:d8:e2:b4:94:4f:8a:0a:6b:4a:
be:f3:3e:68:80:53:71:ba:d3:8c:81:07:fa:27:84:8c:9e:72:
3c:8c:ba:ca:2c:4c:1a:76:c1:23:df:8a:d1:c0:e5:45:ea:1c:
2a:fa:5b:4e:5a:69:39:40:be:7e:fc:b4:26:af:42:be:7a:2a:
3c:72:fd:79:dd:d4:b2:57:a6:9a:76:17:91:a8:e3:51:6d:c2:
2a:2b:49:57:3d:b7:53:22:a8:fa:4f:da:3f:0f:90:3d:64:a5:
b7:15:a3:ee:84:e3:fe:e7:ab:01:fe:74:ab:c2:06:b9:88:e5:
4c:73:1f:27:e7:b3:c2:8f:51:8f:da:d2:d2:ed:28:50:82:9a:
50:66:1f:46:2f:8c:df:46:c1:25:06:01:89:c0:a2:73:24:b4:
35:a9:a3:f7:ce:8f:fd:21:6c:89:07:86:9a:9c:be:e7:f8:93:
fa:f6:1f:8a:02:9b:7a:1f:d4:15:9c:c5:c9:0f:fb:e4:af:3f:
6f:61:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:31 2025 by rpki-client