Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HduNRyzT2oRCZ1j_BIBado-Rdkg.roa
File: HduNRyzT2oRCZ1j_BIBado-Rdkg.roa (raw, json)
Hash identifier: IY+KWb6flygVQwZtWw6o4EzDS6EM/OeeoPot5P/gPFw=
Subject key identifier: 1D:DB:8D:47:2C:D3:DA:84:42:67:58:FF:04:80:5A:76:8F:91:76:48
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD539393B4DC57A4BD5569B47CB7423
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HduNRyzT2oRCZ1j_BIBado-Rdkg.roa
Signing time: Mon 02 Jan 2023 00:15:22 +0000
ROA not before: Mon 02 Jan 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59735
IP address blocks: 89.46.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:39:39:3b:4d:c5:7a:4b:d5:56:9b:47:cb:74:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ddb8d472cd3da84426758ff04805a768f917648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:30:c7:73:59:64:55:19:fe:8a:91:c9:6a:
37:35:3f:50:04:4c:ab:1d:4c:7d:c2:d8:21:b1:dd:
4f:09:cd:16:97:63:dc:a1:b2:08:26:36:32:69:4b:
49:04:35:90:3a:da:9a:c5:30:9f:ae:30:51:59:37:
9c:a1:99:9e:08:72:11:72:09:21:63:c4:dd:e7:36:
71:88:68:b8:95:36:39:fc:d5:83:fe:d7:7b:f6:bc:
c2:d9:9c:9c:5d:d8:55:a3:da:10:58:23:bd:4f:76:
41:9e:73:da:ef:05:48:da:ea:88:89:40:9a:c8:ca:
44:0a:22:90:ac:4d:ee:18:76:22:39:37:60:74:35:
3e:9c:c2:ba:37:ad:c9:8d:72:49:60:ab:86:65:c8:
57:64:66:e2:3f:52:a0:ee:3f:3e:06:18:d4:0a:22:
7c:94:82:fd:de:89:65:43:1f:0c:0f:d8:06:5c:de:
f9:3c:56:d8:1c:66:65:01:b9:6b:de:4d:2c:79:b8:
36:82:cb:61:7c:99:2e:5a:ca:36:54:21:ad:90:5f:
81:b6:51:ba:e2:56:0b:9c:d7:4b:5a:e1:1f:10:ce:
ad:d3:38:4c:e1:67:f7:d0:21:39:6f:a9:45:bb:5b:
54:bf:84:22:e8:2d:99:20:8e:51:ca:7f:d6:eb:82:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:8D:47:2C:D3:DA:84:42:67:58:FF:04:80:5A:76:8F:91:76:48
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HduNRyzT2oRCZ1j_BIBado-Rdkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:bb:93:ed:87:77:cd:56:22:02:b2:48:58:de:72:43:48:04:
fb:aa:8b:b0:68:5c:fe:9c:28:91:2d:d5:ea:62:2f:e3:44:17:
73:23:fa:e7:1a:b0:e5:da:2b:62:fe:c0:21:1d:32:5a:47:0d:
cb:82:39:8d:0b:e9:43:4f:ef:a9:7e:38:5d:2a:bb:2a:d5:8e:
08:e7:55:63:4d:13:39:8e:d6:63:b7:09:35:d2:c6:11:9d:ea:
32:58:eb:dd:eb:32:99:71:bf:0e:9e:82:1e:3f:88:c1:35:75:
8d:41:35:92:db:47:6c:f8:81:ce:12:96:b7:73:d2:39:ee:9d:
e8:5d:72:e2:ff:48:73:63:5e:d7:ec:70:2e:27:1e:c4:5c:f3:
a3:4d:0a:eb:98:73:91:e4:fd:68:cf:75:5a:76:9e:03:19:87:
d1:fc:42:91:06:83:35:92:57:a5:21:3f:f8:a1:87:c1:af:21:
d4:35:4a:b7:be:ad:91:1f:0e:f4:a2:34:61:3a:88:6d:10:ae:
0c:81:83:62:62:30:1c:3b:d9:81:b6:6e:75:08:5e:ae:bc:1a:
b2:81:a3:95:b4:7c:9d:c8:c0:bf:1e:14:4f:e5:3a:82:07:01:
60:84:90:f3:33:11:47:f6:a6:3e:63:07:0e:6b:b7:d9:16:17:
43:07:f1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:02 2025 by rpki-client