Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/hgq-3QFFzN187B-65tYpaJQwwz8.roa
File: hgq-3QFFzN187B-65tYpaJQwwz8.roa (raw, json)
Hash identifier: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=
Subject key identifier: 86:0A:BE:DD:01:45:CC:DD:7C:EC:1F:BA:E6:D6:29:68:94:30:C3:3F
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0194244537C70526B6092511050156172C7A
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/hgq-3QFFzN187B-65tYpaJQwwz8.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 193.160.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:37:c7:05:26:b6:09:25:11:05:01:56:17:2c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=860abedd0145ccdd7cec1fbae6d629689430c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:70:03:67:24:73:1e:28:41:32:2f:7c:bb:
52:79:e7:a6:33:a0:83:ef:6e:eb:1c:15:e7:3a:0f:
b5:70:a2:09:4c:56:a6:b2:74:89:bf:53:ce:88:c1:
b0:09:79:07:00:1e:21:ca:d6:cb:f9:79:cb:88:33:
96:ab:d0:7e:b7:62:08:39:ba:27:a2:f5:fa:c4:57:
7f:c2:96:b8:a6:5a:af:39:87:9c:25:20:00:0a:40:
74:2d:2e:2a:8a:c9:75:25:3b:6c:3e:89:90:77:65:
cd:d3:ae:a0:c2:27:75:f2:77:2a:21:53:12:6a:9d:
f0:b3:39:25:30:90:cd:2b:26:37:7d:4e:f5:4e:eb:
59:35:71:d5:f4:3d:4f:eb:56:77:3b:fc:12:17:cd:
6f:e1:cb:e5:56:cd:09:3d:ed:2c:a8:62:17:a3:ab:
bf:c9:44:23:f9:41:36:a2:93:b7:26:70:50:0c:f1:
0f:59:45:53:34:c7:d1:17:c6:7c:71:a3:a1:bc:3e:
9a:3c:26:33:a1:08:af:74:13:00:77:6b:01:8c:e1:
27:7e:e8:50:b5:aa:3f:9b:f6:27:30:38:d3:76:d8:
ac:48:5f:1d:c3:a7:41:3d:c6:7a:cc:88:5c:e6:0c:
31:2c:89:eb:46:4a:40:11:8e:ac:35:b7:bf:c1:44:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0A:BE:DD:01:45:CC:DD:7C:EC:1F:BA:E6:D6:29:68:94:30:C3:3F
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/hgq-3QFFzN187B-65tYpaJQwwz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.76.0/22
Signature Algorithm: sha256WithRSAEncryption
15:5f:cc:f9:7f:dd:66:4f:f5:72:bc:66:9e:e6:df:2c:e8:d2:
07:a4:ca:4e:b1:f8:de:c6:5d:ca:5f:60:9c:ab:6d:61:4d:79:
7c:fd:7b:bd:de:a3:17:02:4f:6b:43:93:ef:38:d9:0e:c5:d7:
99:ca:10:45:b6:fa:66:e0:dd:0a:f0:79:7e:09:2c:87:bb:ed:
e1:c2:45:1b:b2:87:b9:90:c0:ef:ca:f5:2b:22:48:56:8e:b0:
4a:2b:13:96:f4:26:cd:98:a8:4b:97:56:99:9d:ca:00:66:a7:
d0:9c:15:22:26:4b:a2:dd:02:96:cd:31:00:b6:d3:c6:fb:57:
c1:b2:61:f3:05:ae:e8:47:f6:9c:b7:16:e5:d1:94:9f:4e:ac:
30:d1:18:02:c7:54:bc:56:eb:f7:eb:7e:01:0a:ff:32:c7:a2:
3b:79:12:d0:df:74:a6:cb:56:f0:f3:07:14:4c:3e:76:13:b7:
30:10:a4:ba:f1:e7:8c:03:4b:3d:3f:3b:53:29:8d:1b:4a:04:
9e:e3:c0:94:d2:10:e1:6a:7e:0a:17:f4:a8:18:b3:c6:bd:31:
eb:27:66:bb:c1:9b:9b:4d:a0:a8:56:22:33:58:49:33:d6:1c:
98:45:34:27:6e:48:e8:49:23:59:97:0b:af:9c:1d:ef:00:43:
5b:ad:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:59 2025 by rpki-client