Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/haML-aesPdHDrfKfNJ4GEsc_gPQ.roa
File: haML-aesPdHDrfKfNJ4GEsc_gPQ.roa (raw, json)
Hash identifier: /PovY2vwBA2lMcdVZ631+GF0OPyYkLCFUcs9P6/i2kg=
Subject key identifier: 85:A3:0B:F9:A7:AC:3D:D1:C3:AD:F2:9F:34:9E:06:12:C7:3F:80:F4
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 0194228E2132A841CF45255E0CBF9D880BB7
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/haML-aesPdHDrfKfNJ4GEsc_gPQ.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203698
IP address blocks: 185.12.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:21:32:a8:41:cf:45:25:5e:0c:bf:9d:88:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85a30bf9a7ac3dd1c3adf29f349e0612c73f80f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:28:fc:13:19:88:fa:fd:15:59:3b:c8:cf:
88:bc:97:e5:e0:89:46:e9:96:0d:72:3d:a7:fa:30:
a9:86:6f:b2:ff:25:96:ac:6f:06:2c:c0:f2:60:77:
e5:34:2b:c5:4d:ca:a3:a4:e0:82:9f:23:47:36:99:
82:55:df:26:55:a7:34:3c:3e:c3:97:23:73:04:83:
fe:38:f9:d8:89:a7:fe:67:b7:33:44:78:ba:db:d7:
e0:51:90:f0:5b:23:9b:ae:07:d8:8c:51:d2:79:14:
b6:d7:aa:57:f7:bb:18:8a:c7:74:17:0d:57:8e:90:
1b:75:ad:d2:c1:c4:0e:ec:76:4e:d0:86:d8:a4:2c:
4b:d4:c0:9d:6a:01:83:5d:3d:e1:17:ce:10:c2:9a:
e2:6f:6b:42:be:e2:26:2a:43:ac:a6:0f:fa:7c:2b:
07:04:5b:e8:56:56:3d:99:0d:87:3e:cf:88:b7:c6:
50:b7:11:7f:44:ce:29:24:79:aa:5d:f3:93:1d:2c:
80:f6:13:72:45:1e:db:7c:33:3e:bc:26:1f:76:cc:
2c:f6:a4:2b:54:77:b8:f4:6e:f5:94:54:b7:e3:ad:
dd:56:73:16:b2:87:ac:f9:fd:e9:9c:c6:d4:f2:b6:
4f:a9:c4:95:3c:d8:fa:48:ba:55:3c:80:a3:45:48:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:0B:F9:A7:AC:3D:D1:C3:AD:F2:9F:34:9E:06:12:C7:3F:80:F4
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/haML-aesPdHDrfKfNJ4GEsc_gPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:60:ec:c5:b2:9e:2b:a3:51:41:11:d6:c6:e8:9e:e9:c6:6c:
1d:f7:82:ab:38:b9:30:59:ed:1a:a4:fd:0a:36:c8:05:2e:1b:
08:20:56:e8:83:18:14:12:19:44:3b:64:65:d3:8a:85:39:8b:
ec:47:96:16:81:a0:08:a2:45:15:ec:21:d9:61:c8:1e:4b:c4:
10:51:19:d6:ac:d6:94:b6:5b:90:5a:46:21:d1:5d:d8:2e:85:
89:26:cc:26:08:39:4f:34:63:e3:26:f1:4c:4c:7b:cf:43:2e:
3b:4c:21:50:3d:c7:bf:be:77:db:c9:ad:c5:d5:a6:82:8c:8e:
16:61:2a:2a:6b:33:34:31:63:13:51:ec:83:28:01:bb:5e:17:
4e:4a:3f:70:81:9c:cf:0f:89:7c:20:e8:b3:ff:1b:ed:f9:21:
b9:42:4c:bb:44:fd:fc:f3:bf:84:18:5e:1c:d8:5a:61:f1:3d:
c0:5e:41:24:33:2c:80:70:a1:b8:95:b3:04:e3:e3:27:ba:e1:
b4:d0:1f:b1:b8:01:3a:45:97:ec:cf:3c:9c:e9:e0:d6:a0:59:
4e:32:72:dd:62:a0:70:29:40:ca:52:01:1e:59:14:12:5d:dc:
cd:28:a8:0e:d2:da:e7:d4:cf:17:52:40:5f:ee:47:d1:6d:40:
0c:f5:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:05 2025 by rpki-client