Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/HpYep1gyuglubkg27rH0_NPEYfk.roa
File: HpYep1gyuglubkg27rH0_NPEYfk.roa (raw, json)
Hash identifier: eknsEEDWFIUmysvI1SqfOomMLn1u1uKJE0YncED6Hxo=
Subject key identifier: 1E:96:1E:A7:58:32:BA:09:6E:6E:48:36:EE:B1:F4:FC:D3:C4:61:F9
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 019421445BE1B93502EED688EB6AC5E27542
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/HpYep1gyuglubkg27rH0_NPEYfk.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5580
IP address blocks: 185.47.227.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:e1:b9:35:02:ee:d6:88:eb:6a:c5:e2:75:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e961ea75832ba096e6e4836eeb1f4fcd3c461f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:55:4a:54:91:68:8b:d5:ee:9b:c7:18:0f:
de:5e:e0:0e:dd:da:2b:bf:55:74:0a:e9:bf:d7:77:
29:01:00:6a:3b:fd:87:af:2f:b1:e1:c3:42:0d:45:
99:43:2f:fa:33:41:ae:5e:41:56:97:0c:96:35:38:
6d:8e:fa:62:52:e6:e4:86:22:d4:b2:0f:47:30:92:
17:78:37:79:90:3f:23:42:25:5a:a8:7b:09:74:bf:
fe:b6:b6:70:f4:44:ac:59:86:3e:94:cb:fb:26:d7:
3a:cd:8c:d8:bc:90:0a:2e:fe:ee:1c:f1:8f:be:0f:
e8:f0:7a:0f:8a:9f:4e:cc:24:91:c4:d0:30:7d:46:
40:f3:9e:dc:f8:ab:99:6c:df:b1:96:dd:c8:2b:39:
5a:84:93:74:31:19:67:9c:61:34:e9:67:ef:81:f9:
eb:e0:b9:b1:ae:69:40:1f:3d:30:d7:56:41:44:ca:
18:b4:17:ef:61:56:cb:df:88:e5:d1:cd:9f:d8:bd:
23:af:e1:78:28:1f:0e:c4:22:15:9e:5b:13:5a:25:
d3:4d:ae:ed:b8:f0:b2:2b:89:69:ac:fc:1b:75:54:
a1:17:4f:e7:b3:d7:7d:57:c7:68:a8:9f:24:f9:8f:
b2:d1:b3:c0:eb:e3:51:a9:31:c7:24:24:4d:ba:a6:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:96:1E:A7:58:32:BA:09:6E:6E:48:36:EE:B1:F4:FC:D3:C4:61:F9
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/HpYep1gyuglubkg27rH0_NPEYfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.227.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9c:e2:a8:21:47:04:93:90:ae:eb:0a:32:fb:7a:5e:48:50:
92:60:cb:49:fe:da:28:65:af:d8:81:b5:0b:03:b4:66:35:1b:
bc:f7:f0:27:6a:ff:ba:c2:4e:25:22:f6:ad:af:a1:98:72:d5:
d7:98:e2:87:69:52:12:fb:af:e1:7e:00:28:1d:69:43:0b:1d:
da:42:68:21:0e:e7:2e:2a:4c:7f:84:5c:54:7b:8a:cb:d8:ae:
5b:31:ef:a1:7a:fc:eb:92:0e:46:0a:99:f5:7d:37:1a:02:bd:
88:dd:37:21:0d:64:12:05:b7:98:d9:84:b9:5f:19:84:58:ee:
c0:78:b7:cc:fc:3f:b5:ad:bc:01:98:af:0c:5e:b7:e3:64:6b:
2b:37:bf:29:07:01:36:92:b5:32:60:f5:5f:97:44:fe:c7:d1:
82:3c:ca:5f:48:4e:60:81:2e:90:80:43:55:02:ab:67:43:69:
69:d5:79:dc:69:5f:a9:14:09:d2:0b:e6:ce:99:6e:f3:d5:90:
51:7c:35:89:a9:e3:68:59:c2:66:05:87:23:0e:b3:4f:0b:dc:
8b:6a:79:5b:32:7a:d4:38:d7:23:31:db:44:bf:88:8d:0c:59:
93:69:5a:84:8b:5e:2e:45:b1:7c:71:d5:94:71:9c:c0:33:36:
d3:db:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:01 2025 by rpki-client