Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/hbr99Zmk2_Lv78Z-prPRuJYJGlY.roa
File: hbr99Zmk2_Lv78Z-prPRuJYJGlY.roa (raw, json)
Hash identifier: v5PxdDzdixg2V+CmLbnHAVW0bXtAk7Pkdv00liwSQYo=
Subject key identifier: 85:BA:FD:F5:99:A4:DB:F2:EF:EF:C6:7E:A6:B3:D1:B8:96:09:1A:56
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018C2716E7A2DDDFCF24B26245F9BC72838D
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/hbr99Zmk2_Lv78Z-prPRuJYJGlY.roa
Signing time: Fri 01 Dec 2023 20:34:21 +0000
ROA not before: Fri 01 Dec 2023 20:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199152
IP address blocks: 94.247.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:27:16:e7:a2:dd:df:cf:24:b2:62:45:f9:bc:72:83:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Dec 1 20:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85bafdf599a4dbf2efefc67ea6b3d1b896091a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:a2:c0:5e:cf:52:0e:a8:7a:b3:29:c4:50:
6c:83:b5:96:81:08:ac:c2:1c:00:b9:e8:5e:48:a3:
c0:1b:19:61:c7:57:af:72:f1:44:ba:f6:09:c9:99:
cb:f2:6a:d5:1e:ce:12:dd:c8:09:ee:d5:8f:73:75:
11:f4:a1:47:01:96:cc:47:07:e4:c1:ee:75:02:11:
26:9e:62:7c:56:88:55:9e:66:7a:4f:51:81:83:67:
ae:cd:49:43:6e:01:db:31:28:3f:29:e1:14:fd:98:
cd:d0:bb:27:0b:7a:ae:91:f0:a5:77:57:93:38:ba:
33:13:bc:f5:f2:d0:14:62:6c:57:9c:ec:6c:ba:d2:
be:48:02:a4:d4:44:4a:d5:ec:e6:37:09:fa:de:86:
2f:11:5c:4a:0d:f5:22:c6:b4:3d:05:23:0a:66:53:
5d:68:d5:d8:a7:2e:93:23:5e:5f:35:ca:3d:c9:9b:
0d:9e:94:37:10:16:f0:73:de:25:cc:4e:09:eb:62:
bb:45:32:09:91:b5:9c:59:48:3a:73:c6:bd:de:8d:
3c:33:09:bc:e7:af:56:60:8e:cb:ac:05:eb:a4:4a:
c9:04:7a:be:44:9d:a1:76:c8:a1:7f:15:11:35:c2:
8d:da:40:d8:03:f8:54:5e:92:a9:26:76:87:6c:aa:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:FD:F5:99:A4:DB:F2:EF:EF:C6:7E:A6:B3:D1:B8:96:09:1A:56
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/hbr99Zmk2_Lv78Z-prPRuJYJGlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.137.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e7:75:fe:18:07:b8:4a:6e:e1:a3:11:cc:e6:a0:94:70:72:
76:50:6a:ea:59:ae:f7:af:c6:e0:e0:b7:72:bf:93:fd:ff:de:
cd:1b:f3:c7:37:f1:fd:3d:e7:aa:15:b4:70:9d:20:c8:fb:bd:
b3:09:d4:a3:24:be:f1:ab:a9:d6:87:61:53:3b:c7:7d:27:74:
08:b0:97:ea:76:14:ab:43:33:0a:7e:ef:d4:ba:9b:9d:84:67:
f8:4c:26:57:37:74:aa:66:9c:01:11:b9:ac:fa:fa:60:09:8f:
eb:e2:8a:1f:c2:67:7b:4f:7d:67:6a:0f:b3:73:a6:20:6c:29:
e5:32:a3:bb:28:bd:a5:4d:09:26:81:ed:9a:c9:c5:8d:bc:87:
ca:23:48:27:7d:b4:97:8e:7e:58:6a:f8:8a:ac:0d:ef:b7:45:
4e:25:13:c5:7d:c9:47:a3:81:80:29:38:f1:b4:43:55:a0:4f:
c0:94:13:c8:24:50:f9:c6:87:fa:74:20:fd:a6:29:b0:7a:b2:
a3:33:ef:1c:46:76:a0:02:e6:2f:3a:b8:f1:43:65:c4:cd:de:
fe:a0:27:3b:67:1b:f4:9b:7e:98:e0:a2:0a:3f:69:9d:59:c7:
d4:b9:e9:ed:bd:c7:e8:95:8a:9a:62:67:33:9c:39:87:ac:5f:
18:bb:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:59:24 2025 by rpki-client