Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/HFuTsAaQKossZYATTz-p-c6jBeU.roa
File: HFuTsAaQKossZYATTz-p-c6jBeU.roa (raw, json)
Hash identifier: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=
Subject key identifier: 1C:5B:93:B0:06:90:2A:8B:2C:65:80:13:4F:3F:A9:F9:CE:A3:05:E5
Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial: 01942143DD57DB01C0244977CB4397C1C936
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/HFuTsAaQKossZYATTz-p-c6jBeU.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 195.182.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:dd:57:db:01:c0:24:49:77:cb:43:97:c1:c9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c5b93b006902a8b2c6580134f3fa9f9cea305e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:11:51:64:a2:a2:81:6e:de:25:13:48:55:
5c:9d:c6:99:21:7d:b0:9d:7a:2a:cc:24:0a:e2:ea:
44:c0:2c:3e:c8:cf:d5:2b:55:2d:62:e9:ba:2e:f1:
c2:6f:c2:82:da:5c:fb:90:a0:a2:fd:e0:ff:a8:b0:
92:e8:ba:f1:b1:3f:7b:2e:ad:68:dd:99:b0:25:b9:
08:86:ae:05:a0:79:a2:c5:3f:0e:06:c0:ac:c1:27:
15:57:ba:62:cb:ff:63:17:b2:66:d5:f9:10:aa:17:
a2:87:81:6e:e4:93:b1:04:3e:82:8c:04:18:2f:82:
6c:e2:7f:07:85:d9:4b:57:f7:67:c3:e7:af:83:60:
9d:f4:eb:6b:77:cf:55:01:7c:1f:5d:e8:7a:80:22:
ca:45:f7:9a:6f:a3:3d:02:79:84:7d:98:a5:ae:24:
4c:f9:ba:64:df:8d:dc:db:ea:84:86:e6:dc:d7:fc:
72:39:23:09:88:b8:a6:05:41:9e:81:2b:94:e0:88:
0e:57:5c:dd:00:86:99:19:61:be:12:7a:a4:88:e3:
65:5d:b4:08:37:de:e2:b7:a2:1b:5a:34:b3:38:17:
b0:f7:01:a8:15:f3:54:08:11:31:82:ad:61:75:2d:
60:b7:2f:14:b8:c1:48:9d:d1:9c:28:50:9b:8a:68:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:93:B0:06:90:2A:8B:2C:65:80:13:4F:3F:A9:F9:CE:A3:05:E5
X509v3 Authority Key Identifier:
keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/HFuTsAaQKossZYATTz-p-c6jBeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a4:ef:fc:88:cc:27:0a:5b:a6:a8:76:77:ea:3e:79:42:e1:
64:be:85:0f:c4:a2:38:1a:97:a0:6b:c7:24:ad:a5:9e:fc:39:
8d:93:4c:9a:36:ba:f1:d5:25:fa:e8:e5:17:12:51:ac:eb:1a:
d3:b5:fe:a2:d6:5c:55:ed:71:e6:ee:b0:42:25:89:bb:dc:25:
6a:c3:c1:e5:8b:2b:b9:13:60:a2:f3:0c:ad:ef:c7:11:e2:42:
76:de:72:41:bd:4f:ba:65:85:01:40:a7:2d:bd:01:30:20:ed:
67:8a:bd:cb:98:22:83:c0:99:0a:69:3b:ba:56:74:ba:2e:10:
3c:94:07:7f:21:57:ca:fb:9d:ae:53:b9:53:d2:18:1b:09:9d:
fa:97:38:6a:1c:61:c4:53:ef:25:74:f8:d3:62:d4:c7:10:6a:
77:48:03:86:ce:bf:dd:1e:36:25:9b:dd:12:6b:ba:f1:c8:39:
31:77:d8:56:84:d3:7d:81:de:a3:58:2a:f4:c1:c1:37:a7:bf:
f3:90:c9:17:37:a9:59:5c:72:81:82:aa:a3:a5:b4:c6:aa:be:
89:1a:43:53:38:85:8d:40:be:7f:34:4b:34:ac:0e:37:b1:85:
c7:75:13:a9:29:01:e2:bf:b9:9d:36:4f:ae:e6:64:8f:bc:07:
0b:bc:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:26 2025 by rpki-client