Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HGN0YDxLlWH0hdQo7P49QTEOCW8.roa
File: HGN0YDxLlWH0hdQo7P49QTEOCW8.roa (raw, json)
Hash identifier: Poy8NdNGZ7kFGgmiigiiWEKPQdIH2npFokzoCLEqans=
Subject key identifier: 1C:63:74:60:3C:4B:95:61:F4:85:D4:28:EC:FE:3D:41:31:0E:09:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019509F67B2497BE24ECD8B686CF166AA73C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HGN0YDxLlWH0hdQo7P49QTEOCW8.roa
Signing time: Sat 15 Feb 2025 14:15:03 +0000
ROA not before: Sat 15 Feb 2025 14:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 217.60.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:f6:7b:24:97:be:24:ec:d8:b6:86:cf:16:6a:a7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 15 14:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c6374603c4b9561f485d428ecfe3d41310e096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:6a:90:91:b0:0f:3a:fd:27:82:6c:2c:33:
8d:a3:7f:81:8f:9e:96:f3:b1:81:bb:ba:2c:71:13:
12:7a:fa:24:8f:43:21:93:bf:c0:58:c9:c3:10:d2:
42:ce:5d:6f:51:46:c3:ed:af:94:da:67:74:27:f8:
7b:e7:85:b9:44:6f:89:95:3a:a6:fa:f3:c4:78:f2:
d9:77:69:cb:8e:76:61:fd:93:91:ec:28:47:19:8a:
42:22:92:21:c1:6a:b0:a7:0e:83:32:ca:57:b2:a1:
3b:2d:1f:f0:b1:38:a3:ed:76:9a:f3:5b:2c:8e:b3:
cf:bc:c5:58:c5:a8:5a:9e:0f:56:71:d5:fa:8d:6d:
ed:bf:eb:15:29:9c:19:3e:22:5b:5a:19:a0:16:d9:
22:f2:03:0c:04:48:f9:0f:82:10:85:fe:93:e4:5d:
d0:51:e1:fb:8b:ed:40:7b:34:84:0d:e8:d7:cb:7c:
4c:86:f3:79:c2:14:f5:87:18:ef:71:63:7c:42:b3:
ff:50:43:04:8e:59:d8:5b:bf:84:7a:ac:2e:11:39:
41:4c:b4:b2:eb:da:cc:07:24:82:2f:4c:7d:3a:4c:
7b:03:92:9a:b7:01:89:de:1d:11:ca:48:95:58:3e:
b2:2e:15:3b:c7:c7:d6:ae:f3:40:93:13:85:2e:74:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:74:60:3C:4B:95:61:F4:85:D4:28:EC:FE:3D:41:31:0E:09:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HGN0YDxLlWH0hdQo7P49QTEOCW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:89:8f:33:de:9f:9a:46:57:43:81:d7:4c:22:f6:ab:f5:7c:
61:8e:0b:55:5f:e4:c2:ec:56:7b:05:d6:79:6a:9d:3d:6e:eb:
fb:3f:38:ad:8d:9c:a0:31:5c:1f:f1:cd:ce:8e:b0:dd:1b:28:
36:7b:e0:00:6b:8d:5e:40:86:96:13:83:99:b8:a6:0b:cc:2f:
97:e3:33:80:70:b3:a2:16:65:ee:71:39:b0:d1:e8:6c:b0:01:
14:65:6a:40:9d:fa:c0:11:6b:ce:c8:3a:5a:8f:e4:99:7b:03:
87:75:3a:fc:7c:fc:a2:d7:d2:87:b7:fc:f6:89:de:27:d1:4e:
30:96:9d:51:12:e6:9b:04:b4:db:88:8f:aa:e0:96:d6:29:89:
38:e0:74:75:9a:8a:55:b1:f1:52:3c:e0:6e:cb:d0:f4:96:9f:
36:00:f2:dd:30:65:f1:2e:49:27:99:7e:b1:14:38:c8:02:6a:
df:5b:93:50:05:ed:a7:4d:79:8a:8c:89:93:23:4e:e5:4a:e1:
ed:64:a6:74:b0:a3:88:df:c2:7c:64:0a:70:f6:cf:c3:24:2b:
1a:a4:24:d5:84:e2:1d:b6:f1:bb:f5:15:da:29:c1:2e:f3:36:
4f:7b:6f:9c:e9:87:92:73:52:55:60:6d:66:47:d7:a0:59:b9:
27:c5:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:45 2025 by rpki-client