Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/HK9xvyf-EGBJb-q1CLPgz9e62vY.roa
File: HK9xvyf-EGBJb-q1CLPgz9e62vY.roa (raw, json)
Hash identifier: bMq6r0cGjvMhNL1YNEqjW5Bw6AkLADzTH0DizXy1c3Y=
Subject key identifier: 1C:AF:71:BF:27:FE:10:60:49:6F:EA:B5:08:B3:E0:CF:D7:BA:DA:F6
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 01885D8654B0269331F8A19D02B47C1B85D6
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/HK9xvyf-EGBJb-q1CLPgz9e62vY.roa
Signing time: Sat 27 May 2023 14:04:24 +0000
ROA not before: Sat 27 May 2023 14:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.91.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:86:54:b0:26:93:31:f8:a1:9d:02:b4:7c:1b:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: May 27 14:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1caf71bf27fe1060496feab508b3e0cfd7badaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:29:41:8d:1b:28:46:78:24:df:e2:d9:bb:
77:80:50:da:e4:05:83:56:e2:68:76:a8:cf:71:88:
bd:67:cd:d4:81:67:ba:58:bd:4c:16:81:0d:47:64:
79:8f:5c:7d:76:ac:d3:d3:c3:f2:40:77:c1:9b:b0:
ac:12:54:86:f7:d5:08:1d:4c:41:8e:89:2f:3b:89:
3a:18:82:57:fa:98:41:14:2d:dc:20:c4:82:bf:86:
77:80:1f:b2:59:7e:17:60:56:39:dc:4e:ed:99:dd:
6b:a4:73:ed:85:cd:24:70:f6:d5:f5:a0:bf:eb:c8:
2a:f0:c9:41:ac:97:bc:e6:38:66:5e:15:d2:84:ab:
41:cf:8b:82:43:5f:3b:9c:06:b4:a5:57:5c:aa:f5:
a4:48:9f:15:5c:98:fc:ce:e1:f5:0f:56:23:38:1c:
b3:b0:ab:63:51:bf:91:49:60:eb:89:46:19:74:a1:
eb:88:00:22:e2:f2:b7:0d:bc:46:e5:13:af:d2:76:
54:16:8e:21:28:62:24:30:c3:18:dd:5a:23:86:2d:
97:90:f3:6b:59:c0:36:8e:21:35:9d:aa:20:8e:e4:
a4:08:21:a4:0f:16:6b:07:19:1f:1a:a9:24:54:89:
0b:03:12:ff:77:11:81:c3:6a:9f:2b:88:42:d2:45:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:71:BF:27:FE:10:60:49:6F:EA:B5:08:B3:E0:CF:D7:BA:DA:F6
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/HK9xvyf-EGBJb-q1CLPgz9e62vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:99:52:8c:fc:ab:b5:b2:79:84:6c:4d:84:c1:65:d8:72:f9:
e7:78:48:d6:e9:4d:84:4c:88:2c:eb:8d:2e:bc:37:77:38:dd:
a8:51:12:34:99:2c:50:be:45:6e:e4:eb:5d:f8:2b:11:42:32:
ab:14:33:bd:12:e1:9b:e5:f3:86:51:9f:11:dd:b6:8b:cd:0e:
ef:6d:b1:86:67:6b:79:9a:9d:d2:86:d2:11:15:10:41:43:f9:
29:00:d8:3d:92:34:b3:b5:a9:5d:c9:24:aa:47:68:3c:fd:69:
38:1b:c9:e9:82:26:53:26:67:35:f4:16:3a:94:b9:e1:8a:42:
ba:42:ba:8c:b6:a8:03:af:d4:11:4d:de:74:dc:98:e8:81:87:
47:a0:b2:04:8d:f6:75:8c:1b:9b:77:93:ee:2d:05:97:0e:ed:
54:0e:33:4f:54:ef:50:5a:96:ab:75:65:73:6d:16:b9:e0:c5:
21:d4:18:e9:df:ec:66:fd:35:b8:8b:00:99:84:50:ab:cc:1f:
0c:e3:52:49:df:48:86:91:90:8e:10:ec:30:0e:38:96:83:1c:
9a:e7:97:d1:d2:80:04:0b:19:6f:b8:b8:e0:6a:2d:a3:23:30:
9a:a9:db:c6:ad:95:04:06:b7:7e:69:c2:d1:f4:a7:fd:a6:87:
a8:b4:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:24 2025 by rpki-client