Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/HjTMoAYNnig_SLdG7cjgafMO6sM.roa
File: HjTMoAYNnig_SLdG7cjgafMO6sM.roa (raw, json)
Hash identifier: vtEs32Udg21ECRrqFxXkvtH2fOMUI8ZhlpPEmcfn7YU=
Subject key identifier: 1E:34:CC:A0:06:0D:9E:28:3F:48:B7:46:ED:C8:E0:69:F3:0E:EA:C3
Certificate issuer: /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Certificate serial: 01941F8C3C373B1B1FFE05098D842FBB61EF
Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/HjTMoAYNnig_SLdG7cjgafMO6sM.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51299
IP address blocks: 185.158.144.0/22 maxlen: 24
194.61.87.0/24 maxlen: 24
2a07:ae00::/31 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:37:3b:1b:1f:fe:05:09:8d:84:2f:bb:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e34cca0060d9e283f48b746edc8e069f30eeac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:62:38:b3:93:a8:38:9f:ea:75:b1:cf:8e:a2:
b7:4c:5b:ee:ec:ee:bf:28:bc:34:5c:2f:ea:88:5d:
50:77:61:cb:0a:e7:ef:e5:4f:b5:c5:43:2c:63:2c:
18:b5:dc:98:dc:45:16:43:c8:ac:04:17:81:59:79:
4b:fb:d4:77:ab:c9:4c:88:c1:dd:dc:b8:37:3e:a7:
b6:3c:ab:3f:5a:2a:89:17:ba:93:ea:3b:98:55:c6:
55:9e:d6:89:73:51:06:76:95:89:d7:3f:9a:fc:a3:
05:ce:28:d5:08:23:16:fc:27:ec:7e:62:9d:40:b3:
92:37:3a:6e:41:03:8a:d0:ef:f3:28:35:f8:b7:e4:
03:f7:d3:8e:c1:fc:5d:9e:97:a5:fd:57:b1:53:bc:
72:73:ab:8b:31:d6:3e:b4:00:1e:f2:15:20:c5:37:
0c:2f:40:57:80:7e:52:93:f1:59:03:61:b4:9c:e5:
a0:ed:bb:c8:09:83:de:23:3f:34:9a:1c:b4:b6:da:
04:98:83:62:9d:cd:20:70:cd:7a:d2:35:43:01:d8:
0e:fb:bb:2b:31:5e:7c:92:80:40:0c:2c:af:f2:97:
21:34:98:c8:21:f1:af:7f:1d:a0:50:1b:5f:52:2b:
fb:ea:29:05:47:12:f4:1f:50:39:b1:55:e0:45:92:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:CC:A0:06:0D:9E:28:3F:48:B7:46:ED:C8:E0:69:F3:0E:EA:C3
X509v3 Authority Key Identifier:
keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/HjTMoAYNnig_SLdG7cjgafMO6sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.144.0/22
194.61.87.0/24
IPv6:
2a07:ae00::/31
Signature Algorithm: sha256WithRSAEncryption
6e:fb:54:a3:c3:53:96:28:58:34:12:53:e8:64:70:be:60:40:
f9:fc:62:2a:b6:f9:70:6c:53:d7:fe:0a:71:61:75:38:9f:71:
84:d4:17:38:a9:0c:16:b4:99:35:37:57:8c:be:de:5a:f5:41:
16:f8:9c:2a:e4:85:cf:98:48:2b:fa:dd:20:42:e5:39:a7:e4:
1d:04:86:6f:63:21:3e:6a:b2:3a:f9:76:a7:44:dc:59:19:4c:
2d:40:b9:5f:e2:c8:cd:7c:95:63:e4:fe:06:bc:ec:77:6a:63:
fc:63:73:21:cf:f5:77:96:6e:f8:f1:ba:87:78:c4:21:f4:49:
45:b4:e3:19:b5:a3:91:5b:91:32:02:be:a9:cb:49:08:14:0e:
78:41:5a:b2:c8:a9:e4:17:03:7e:a9:fa:5e:1b:fd:e9:91:a1:
36:5c:04:30:66:b7:15:16:7d:5c:88:6f:94:93:2d:60:17:07:
c8:f4:08:7d:f5:a3:3c:19:eb:35:3f:3d:8f:6a:ce:f9:91:1a:
a3:5a:69:aa:1a:55:bb:78:0d:ea:54:cf:f5:c3:c8:cc:ce:53:
91:83:8c:13:82:51:85:dd:aa:81:dd:34:ee:85:8c:bf:5b:d7:
3b:53:83:b4:b2:59:1e:7c:e2:03:16:ab:3f:3d:1f:47:e2:a2:
fc:77:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:50 2025 by rpki-client