Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/HYeDmbdQhvQkQGQQjytVT5KaIk0.roa
File: HYeDmbdQhvQkQGQQjytVT5KaIk0.roa (raw, json)
Hash identifier: gUo2OrQBZcWScCEhPqgX5mozISY2y0CI2WMSkoRlQ8Y=
Subject key identifier: 1D:87:83:99:B7:50:86:F4:24:40:64:10:8F:2B:55:4F:92:9A:22:4D
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 019425223CDCCC664A41CDA3CDD68793B4C1
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/HYeDmbdQhvQkQGQQjytVT5KaIk0.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43422
IP address blocks: 159.101.244.0/22 maxlen: 22
159.101.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3c:dc:cc:66:4a:41:cd:a3:cd:d6:87:93:b4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d878399b75086f4244064108f2b554f929a224d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:bd:fd:2e:c8:7c:0d:86:a9:38:36:02:db:
6f:14:fb:c1:9f:b8:a9:c0:dd:3e:b5:19:41:c9:17:
9a:45:08:dc:89:3f:54:d4:61:34:83:2e:33:f7:73:
8d:14:e2:9d:95:01:db:d7:58:99:c9:fe:d0:e7:34:
70:75:d1:d8:54:7d:27:68:b3:27:16:ea:5b:a1:64:
c3:bf:f0:83:18:31:7b:57:a2:14:18:2c:b6:bf:38:
de:dc:1a:92:56:80:3a:2f:bc:ab:dd:0d:fb:36:d5:
47:85:f6:81:51:bd:2b:99:60:2e:1f:91:40:c7:50:
b3:75:cf:b1:12:27:6b:f4:73:f5:65:5d:e4:f0:8b:
41:08:18:b6:4b:e6:b9:c8:3e:c3:69:b9:59:fa:a5:
01:91:0c:a7:9d:4c:60:8b:77:90:54:9d:35:a0:28:
4f:ba:0a:c1:fe:c9:1b:e4:d0:ab:02:bc:64:45:85:
28:41:05:03:3d:43:f6:0f:68:65:a8:99:56:ea:5f:
11:fb:2b:6a:8a:60:36:8a:ed:7d:78:84:3c:ca:6d:
74:47:19:6e:5a:8f:14:6b:9c:17:ca:d5:05:55:1f:
1e:57:4c:26:8c:2b:78:58:82:4b:dd:6c:69:ba:c2:
47:06:12:ed:78:29:e7:3e:66:20:d0:58:20:1e:ac:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:87:83:99:B7:50:86:F4:24:40:64:10:8F:2B:55:4F:92:9A:22:4D
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/HYeDmbdQhvQkQGQQjytVT5KaIk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.244.0-159.101.251.255
Signature Algorithm: sha256WithRSAEncryption
a2:37:aa:f3:50:87:c0:55:bc:3e:ba:06:93:4a:76:a7:ac:cb:
45:d0:f0:b7:98:fa:c5:7f:2d:c5:68:c0:f4:bc:d2:79:c1:c2:
8c:0b:c3:74:5c:4c:86:d5:f0:c8:53:da:f8:65:9b:2a:31:4b:
e4:1f:45:47:32:72:ff:37:e1:81:72:2a:ee:91:9c:16:b2:5c:
40:43:f5:ea:4d:0c:8b:57:6a:44:f1:dc:c1:95:36:1c:8c:35:
c5:85:1d:5c:06:6c:72:86:e5:42:d9:19:07:d8:6a:54:e9:1f:
ed:d1:52:38:3d:69:ba:4b:1f:ca:94:0d:19:a2:a6:b8:9e:ef:
fb:60:7a:cc:f7:4e:f1:68:64:a5:e1:85:dd:1a:1f:ad:0a:40:
ba:3a:c9:c9:73:d9:47:7c:fb:d3:6b:76:52:76:8c:57:d4:e7:
27:47:b3:47:be:bf:4b:a8:dc:c7:47:25:06:e4:f6:40:d1:6a:
50:71:99:fa:e0:56:e1:1c:3c:52:b3:23:16:b0:83:29:3a:74:
83:df:5d:ff:07:0f:b2:b1:99:4d:63:24:b3:40:d6:bd:e9:0a:
03:67:60:e6:82:d2:1a:51:44:19:59:54:3e:d7:c9:a7:f0:f7:
37:8c:c0:92:53:9a:b1:2e:b1:f7:b8:d9:7f:57:6a:13:9e:a8:
12:69:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:16 2025 by rpki-client