Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/hmXcXnYwK1sBbk-u4c5Buh-nyr0.roa
File: hmXcXnYwK1sBbk-u4c5Buh-nyr0.roa (raw, json)
Hash identifier: Kn7me6rRWzaawLvLvXJbywNx0UtjlhMesQxlmeizfng=
Subject key identifier: 86:65:DC:5E:76:30:2B:5B:01:6E:4F:AE:E1:CE:41:BA:1F:A7:CA:BD
Certificate issuer: /CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Certificate serial: 100330FD
Authority key identifier: A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/hmXcXnYwK1sBbk-u4c5Buh-nyr0.roa
Signing time: Sat 01 Jan 2022 00:54:11 +0000
ROA not before: Sat 01 Jan 2022 00:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 147.171.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268644605 (0x100330fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Validity
Not Before: Jan 1 00:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8665dc5e76302b5b016e4faee1ce41ba1fa7cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:ff:e9:1b:14:2e:fb:45:e0:4e:28:84:14:
2c:e9:be:5d:ce:eb:d2:81:a2:37:da:a9:69:c8:8c:
30:1b:cd:63:e9:3e:61:55:12:5c:db:ae:7f:3e:43:
2b:a8:f7:98:66:eb:59:0c:b9:d3:6e:1e:76:ef:fe:
5a:84:aa:d1:8d:f1:0c:7f:f3:52:81:08:87:b7:c4:
0b:1f:a2:81:ae:b0:cd:d0:96:65:8c:90:9b:31:4c:
43:1f:c5:4c:49:c1:29:db:41:1b:1a:0d:25:01:5e:
75:a3:ef:32:82:7f:48:0a:b5:bb:03:ac:33:2b:2e:
7f:2d:c7:ca:4d:72:a1:cd:b8:c0:c7:a4:0c:05:d2:
5f:85:9f:88:de:64:e6:44:2d:03:e5:c8:24:27:48:
02:fb:3e:8a:62:85:97:1d:ee:8c:6f:bf:6d:eb:80:
18:79:b9:ed:16:bd:50:e0:81:66:c3:fd:a7:d3:8f:
c2:c3:ae:5e:29:49:71:99:21:80:66:22:87:d4:95:
0e:08:c5:9c:cb:6b:6b:5f:f3:22:be:b2:de:5f:94:
4a:8a:34:19:62:b2:4d:45:aa:1a:7a:cb:c7:0b:35:
47:30:63:ed:fc:2d:d5:16:4c:9a:15:77:dd:12:b3:
c0:a4:ab:e5:36:92:0a:0e:ed:c9:8e:3a:e1:7f:6a:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:65:DC:5E:76:30:2B:5B:01:6E:4F:AE:E1:CE:41:BA:1F:A7:CA:BD
X509v3 Authority Key Identifier:
keyid:A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/hmXcXnYwK1sBbk-u4c5Buh-nyr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/pMG7EBqBS54u6CZPgTUqW_Ly0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:40:ae:4b:f8:e0:55:e0:d4:09:7d:7d:ce:bc:92:1b:1d:98:
8b:5e:56:e4:54:f7:4c:b3:3c:25:a2:a5:eb:29:22:13:09:cb:
51:a8:d4:c0:77:76:06:bd:ec:dd:9a:3b:92:c9:17:49:fd:73:
b9:3a:40:b4:ea:87:b9:31:d5:93:68:53:df:b0:49:0f:0b:47:
52:34:73:08:03:86:33:0b:1e:2f:44:db:71:6a:5f:31:0d:17:
d7:ca:d1:b2:62:93:5b:f0:ea:df:9f:61:ce:4d:30:ba:a6:0d:
e3:97:02:b2:03:de:45:b0:2a:6b:89:47:55:59:07:be:ff:45:
05:15:a2:bf:00:01:62:82:09:3f:5c:7d:9a:8f:7f:ed:e4:90:
40:8e:74:35:ea:ed:6f:fa:b2:3a:ac:b1:d0:e8:99:21:91:64:
5b:ea:31:2f:d6:9e:96:58:3d:92:89:ab:98:23:8e:22:5c:5b:
9a:9a:6d:59:69:39:a7:76:1f:4a:bf:4b:61:45:b2:e2:2b:0f:
71:1b:84:17:d3:04:11:4a:6c:50:17:cc:49:de:ad:80:e8:67:
01:ed:5f:9b:1b:bd:04:b6:aa:a8:4d:5d:a7:73:8d:14:85:38:
27:da:0c:db:62:70:e4:90:36:24:26:d4:b6:4a:e1:9e:7c:ff:
36:83:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:16 2025 by rpki-client