Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HU5_SrYlacU4Kw4Jeu9iBop3bJg.roa
File: HU5_SrYlacU4Kw4Jeu9iBop3bJg.roa (raw, json)
Hash identifier: vRZHTUJMOtd2J6EhkxWOp+cP8/pW7on+NHofYXtE/lM=
Subject key identifier: 1D:4E:7F:4A:B6:25:69:C5:38:2B:0E:09:7A:EF:62:06:8A:77:6C:98
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0365CD26
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HU5_SrYlacU4Kw4Jeu9iBop3bJg.roa
Signing time: Fri 25 Mar 2022 10:13:01 +0000
ROA not before: Fri 25 Mar 2022 10:13:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 91.245.216.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57003302 (0x365cd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Mar 25 10:13:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d4e7f4ab62569c5382b0e097aef62068a776c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:84:b5:e1:17:27:41:45:79:bc:6a:31:b8:
a9:91:45:bc:af:ef:1c:d0:d7:f6:28:65:14:ff:a5:
ef:a2:cf:5d:44:2c:c7:93:40:22:12:b1:8b:3b:09:
a9:65:b5:a6:e8:53:d3:31:25:af:1d:0d:95:a2:51:
42:0c:bc:ab:09:ce:be:eb:ed:5a:e2:ea:aa:8b:ca:
b1:bf:44:d6:cd:ce:69:1e:de:03:bd:2a:c2:77:e5:
e7:3c:53:9d:9f:3a:79:e4:84:fc:92:98:d4:e1:65:
f5:2a:b1:54:77:91:ee:9b:ab:02:1d:e4:c0:bc:31:
da:2e:d6:12:71:ed:5a:c4:23:5a:70:d1:92:b4:dc:
92:93:c6:04:8d:1b:9c:b9:8d:8a:11:47:1a:9b:06:
c1:b9:03:bc:85:f8:d6:67:0d:ce:38:02:db:81:10:
6c:bd:69:56:19:b2:99:ce:7b:56:73:02:dd:cd:c9:
72:5c:12:b6:3b:91:ae:c9:fa:13:24:5b:a1:92:aa:
fd:6d:72:2a:56:50:3e:f5:c7:75:e1:bf:f5:ea:83:
98:40:27:cd:61:c5:eb:58:0c:3c:90:3c:2f:da:2c:
53:b3:f6:21:16:8c:87:e8:eb:f7:08:b8:bd:84:e5:
81:f6:aa:c0:ed:8e:aa:8c:f8:79:c1:a8:5f:9d:e7:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:7F:4A:B6:25:69:C5:38:2B:0E:09:7A:EF:62:06:8A:77:6C:98
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/HU5_SrYlacU4Kw4Jeu9iBop3bJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.216.0/23
94.26.64.0/23
Signature Algorithm: sha256WithRSAEncryption
77:2f:1b:f1:ca:0e:10:8d:2b:16:b7:54:a4:cc:66:5c:9a:1d:
ec:48:f9:d8:f5:a6:06:8f:f4:54:0d:b7:e6:cd:6d:87:01:3b:
06:f2:33:e5:5b:fe:20:a9:d4:d4:65:55:b1:b5:1b:02:7f:87:
1c:9e:c4:23:60:7f:50:97:1f:38:77:e0:01:f0:c6:3a:f9:ce:
8b:d6:e2:91:34:eb:70:b8:18:76:8e:46:3b:21:34:05:01:cc:
2e:ef:ec:2b:eb:1a:89:dc:2d:48:17:77:cd:8a:f8:92:9d:09:
c2:13:0a:26:d2:df:bc:1e:7b:2d:b2:20:51:ec:69:02:37:83:
8d:60:99:29:15:46:1c:b0:d7:40:f7:d9:6b:88:dd:20:a5:ca:
46:a5:b9:ca:ab:15:1c:b7:e7:2b:10:3a:b7:e4:40:ef:a7:3c:
e6:55:9b:4d:98:8d:d6:31:91:d8:dd:a4:7a:4e:01:04:e5:f1:
b9:aa:df:74:06:8d:9e:5b:c8:e9:63:54:65:6a:21:cb:9b:3f:
13:fe:23:cf:87:33:ff:0c:e2:f5:04:91:32:e5:f5:48:2b:22:
4e:e5:6b:a5:b7:8d:56:a1:1f:81:d7:da:02:91:ec:55:10:b9:
f3:12:7e:89:11:87:8f:b5:9a:19:4e:88:46:88:ce:fd:2a:31:
c5:70:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:59:01 2025 by rpki-client