Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/HmHeQxMY02gAsBxkDWSIqXAFPWk.roa
File: HmHeQxMY02gAsBxkDWSIqXAFPWk.roa (raw, json)
Hash identifier: yFvd3OyXwMNthaAHqIWMziti5jwnDTnfs9Aruq9ufQU=
Subject key identifier: 1E:61:DE:43:13:18:D3:68:00:B0:1C:64:0D:64:88:A9:70:05:3D:69
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 019423D6D21FCE7EE900ED6C5E6C412E450E
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/HmHeQxMY02gAsBxkDWSIqXAFPWk.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43666
IP address blocks: 91.197.180.0/24 maxlen: 24
91.197.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d2:1f:ce:7e:e9:00:ed:6c:5e:6c:41:2e:45:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e61de431318d36800b01c640d6488a970053d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:3c:04:23:69:09:2f:17:2f:b5:11:d9:15:
7f:d5:b3:28:e1:b1:e9:5e:c3:5d:1d:05:90:6d:80:
d0:f2:12:21:de:12:84:a6:4d:40:95:f0:c8:d2:cf:
8e:34:9b:b7:45:07:51:72:28:77:26:e4:a2:15:13:
40:88:34:c1:52:f2:a8:5c:35:20:1c:b8:52:57:74:
2f:3a:74:05:f2:6d:7c:13:64:44:e8:ac:d0:01:a4:
3d:cb:d7:ba:4e:25:1b:d1:52:e6:53:d6:f2:63:aa:
cd:df:d6:3d:6d:1a:66:b3:da:18:9e:9e:b4:65:40:
aa:cc:39:3a:97:05:7f:17:aa:28:bf:d8:e0:72:3a:
c0:c2:7d:26:1f:73:ca:19:81:37:87:09:30:ca:56:
b6:cb:fc:62:a4:34:9c:31:2f:51:64:c3:42:91:59:
8e:cb:09:2c:72:e4:a8:92:2c:a1:bb:14:1e:36:47:
81:68:a2:81:54:d7:cd:14:1d:bb:94:20:c9:a2:32:
86:db:8b:bf:c2:07:a1:da:8b:f2:4c:15:c3:c1:d7:
60:0e:c9:94:72:8e:88:98:d7:ab:73:1f:7d:74:05:
68:54:58:f2:9f:9f:02:14:51:61:5e:b7:3c:26:9f:
73:29:1d:8a:90:b3:70:66:57:59:b5:dd:b7:ef:8c:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:DE:43:13:18:D3:68:00:B0:1C:64:0D:64:88:A9:70:05:3D:69
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/HmHeQxMY02gAsBxkDWSIqXAFPWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.180.0/24
91.197.182.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:dc:13:64:c1:70:9c:9b:81:bf:e2:01:e9:ea:e8:cd:09:f3:
83:a6:75:fe:6e:fc:c8:73:11:73:21:8b:73:06:34:6a:ab:55:
53:ab:fe:9d:9f:e0:f1:82:43:49:b3:be:47:1a:30:4f:f2:81:
b0:ea:18:53:0b:56:96:6f:94:ac:43:8e:9c:c2:12:ee:3d:e1:
4d:e8:cd:5c:3d:5c:67:ac:0e:2a:22:8f:db:1d:7e:0d:0a:22:
7c:05:e9:78:58:41:a9:a1:97:a3:3a:1b:f2:39:aa:c5:6b:6b:
07:e3:00:5e:f1:6f:01:68:60:d6:30:d1:78:4a:ef:e7:2f:0f:
77:8e:e3:7a:91:67:49:b4:d1:6c:44:d9:98:7c:e1:af:de:65:
27:c2:4c:ec:61:bb:8b:40:08:84:a7:e4:75:7d:3b:c3:b7:7e:
79:55:16:5d:e7:f1:f7:56:4c:44:63:0b:1d:c7:ea:59:22:9e:
ad:32:73:a9:05:67:01:e4:23:eb:1b:29:4e:7b:7d:f7:25:49:
52:33:e5:93:8d:78:4c:47:57:fa:83:68:ea:3b:a9:e2:76:be:
56:c0:c9:e7:4b:33:04:4e:16:01:dc:41:12:11:db:ba:1c:46:
a5:21:c4:ad:f0:6e:57:de:2f:03:98:ed:c6:62:df:aa:04:33:
f8:ec:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:21 2025 by rpki-client