Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HP87nTqnqXLZB9SfNsCTKzHldb8.roa
File: HP87nTqnqXLZB9SfNsCTKzHldb8.roa (raw, json)
Hash identifier: tJDob9XMk09YqQmO1f8Q5voo8oKhF7Mg3B/DHKsGwaY=
Subject key identifier: 1C:FF:3B:9D:3A:A7:A9:72:D9:07:D4:9F:36:C0:93:2B:31:E5:75:BF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236994A6BDA576AE929A45ABCBE20F21
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HP87nTqnqXLZB9SfNsCTKzHldb8.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42616
IP address blocks: 89.33.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:94:a6:bd:a5:76:ae:92:9a:45:ab:cb:e2:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cff3b9d3aa7a972d907d49f36c0932b31e575bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:ce:39:2b:56:3e:18:94:47:06:de:1d:7b:
cd:0e:52:94:f0:36:8f:ca:06:58:27:ec:24:59:06:
e6:eb:fd:27:3c:f7:c1:05:be:75:98:6c:ca:0f:6b:
fc:ce:10:26:89:ab:6c:3d:72:14:74:ef:9b:8b:d8:
7d:4e:61:94:4c:2a:78:98:ae:3f:3b:02:10:d6:4d:
b4:85:f8:44:65:15:83:65:a5:e9:fd:84:b2:df:55:
c7:c2:1d:27:a1:2f:30:3a:60:e6:73:1c:a1:d0:24:
e9:08:40:db:8f:4c:6c:1d:68:c8:40:a3:2d:5a:22:
a5:1e:22:36:66:27:53:8f:a7:97:17:13:48:bf:95:
c2:a6:0a:e5:2c:70:3b:a2:8c:d5:36:8e:c6:a5:90:
8b:50:82:cd:69:51:61:90:ea:ae:4e:a6:1c:67:49:
9e:86:fb:f9:ff:b0:e8:ee:99:34:b3:01:42:0d:d3:
52:fd:f4:06:99:b0:b2:d6:f1:f7:e7:1e:f3:5c:d7:
a6:4a:64:e9:e4:8f:98:af:ca:08:06:8c:19:f0:d7:
34:01:ff:00:22:2e:aa:89:56:7f:fb:7d:45:4c:ac:
f0:a9:c8:69:5f:4d:f6:4c:d2:e3:a3:a7:b6:c8:19:
1d:d9:93:98:34:d5:4e:11:f1:14:4c:d1:ba:42:da:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FF:3B:9D:3A:A7:A9:72:D9:07:D4:9F:36:C0:93:2B:31:E5:75:BF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HP87nTqnqXLZB9SfNsCTKzHldb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.105.0/24
Signature Algorithm: sha256WithRSAEncryption
05:df:57:bf:f0:70:07:93:fd:13:16:bd:8a:75:f7:a9:70:19:
c3:49:a7:64:14:e9:22:9c:fe:77:e3:7e:63:39:34:6e:6e:25:
40:a3:69:2a:db:a2:32:3c:7d:b6:5e:c2:52:5f:bb:d4:2d:23:
3e:4d:ee:26:18:dc:47:a3:9c:4f:07:a3:fb:95:dc:5c:1e:ac:
10:ee:c0:eb:04:5a:09:98:c4:87:8e:47:16:cf:e2:af:09:f2:
74:b9:9f:e0:1c:42:eb:a2:1e:aa:39:58:0a:cc:21:49:c5:c0:
83:eb:ba:09:b5:49:a7:0d:eb:8f:3a:57:ff:ca:b4:30:b6:43:
da:f8:39:8b:e7:ac:4e:b9:7a:d1:12:36:d2:c9:8b:55:ba:12:
7c:de:5e:56:c5:1e:71:a9:fd:a7:c1:97:2b:d2:c9:b0:25:42:
f5:7c:bb:8f:12:46:15:cc:99:6d:7c:94:82:d6:f8:7d:3c:67:
10:ac:6d:69:e2:a0:1d:8d:89:67:69:ca:9f:d9:bc:7a:9a:4a:
84:b8:98:f8:41:24:b0:ad:96:95:98:56:91:f2:e5:ea:c1:e5:
78:5a:cc:87:b6:46:75:08:82:dc:2a:92:cc:fb:fa:6e:4d:e2:
af:a3:b6:08:25:e8:3b:cc:e1:23:f2:45:f7:68:cb:6a:2f:e0:
0c:10:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:49 2025 by rpki-client