Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/hYR6rq77HQceE2IcxPUKLad5kL4.roa
File: hYR6rq77HQceE2IcxPUKLad5kL4.roa (raw, json)
Hash identifier: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=
Subject key identifier: 85:84:7A:AE:AE:FB:1D:07:1E:13:62:1C:C4:F5:0A:2D:A7:79:90:BE
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 01941F8C09F8FB0899B92D357CD1414F8E67
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/hYR6rq77HQceE2IcxPUKLad5kL4.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51561
IP address blocks: 193.161.9.0/24 maxlen: 24
193.161.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:f8:fb:08:99:b9:2d:35:7c:d1:41:4f:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85847aaeaefb1d071e13621cc4f50a2da77990be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:8d:5f:df:b2:8f:7a:5a:18:73:07:f5:ec:
6d:14:ce:5e:c8:f6:de:9d:f5:1f:39:c0:3a:e5:f9:
fc:cc:00:d0:ba:02:a8:7d:43:01:95:f5:7a:f8:ef:
9a:92:85:24:87:93:95:df:e8:21:f6:90:52:65:37:
36:5c:1c:83:9f:f1:c6:67:f4:39:62:b2:85:94:32:
b5:9d:41:a5:8f:3c:2a:c4:1f:0d:6d:16:50:8e:88:
81:bb:42:51:85:dd:83:13:51:90:ea:e3:66:96:fc:
cd:8f:a0:19:5e:c1:d8:ba:3a:88:c8:cf:92:9c:cc:
4a:00:61:70:39:39:56:e5:74:09:ec:9d:e8:18:3a:
7e:f2:da:6a:94:a4:95:40:62:2e:eb:8a:00:87:95:
24:fb:f6:67:7a:31:21:7c:b6:ad:62:8c:e4:24:e9:
f5:ed:dc:80:cb:39:08:c0:39:3b:d1:01:28:29:a7:
01:b8:ea:c2:c3:d0:e2:b9:13:20:23:8a:fa:5c:de:
4c:1c:f1:e2:4d:82:4f:dd:64:48:ca:3f:8b:cb:03:
55:6e:e9:ba:e1:de:8b:53:e5:ad:6d:fa:82:77:12:
33:df:44:dd:56:32:e1:fd:10:9a:cd:83:6e:72:16:
ed:88:70:f7:2c:66:fd:87:85:83:f2:69:f8:4a:10:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:84:7A:AE:AE:FB:1D:07:1E:13:62:1C:C4:F5:0A:2D:A7:79:90:BE
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/hYR6rq77HQceE2IcxPUKLad5kL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.9.0-193.161.10.255
Signature Algorithm: sha256WithRSAEncryption
07:74:3d:a6:96:bd:30:3b:6d:8f:68:f7:a1:f8:3b:8a:3c:c8:
50:94:41:48:ba:c0:f7:27:33:ac:a0:81:76:bd:96:02:b7:a2:
05:78:91:43:8f:e5:45:e4:24:1d:b4:b7:a6:fa:6f:d1:08:9d:
d3:bc:23:43:e4:ea:95:d2:b9:03:a3:93:15:b6:7c:fd:f7:1c:
6a:b3:b0:4e:24:75:49:04:fb:b2:89:83:89:b2:e9:03:43:33:
ac:74:aa:be:62:a6:a8:e6:67:e2:d7:63:42:7e:28:5d:25:8b:
7d:2a:38:50:ca:76:ce:2a:da:99:88:b1:a5:24:93:62:1c:e4:
86:eb:a3:02:08:d9:3c:1f:b2:8a:e3:a5:21:85:dc:2d:59:e4:
a6:9a:b4:f1:61:3a:2c:65:71:db:24:d9:82:f9:98:69:aa:4e:
a5:3f:b4:9b:e2:44:b2:9c:f7:c4:84:95:09:7d:bb:f6:f3:ea:
72:8a:61:4f:79:6f:a4:55:1a:46:cf:81:07:de:03:7d:f2:5f:
d5:0c:96:04:79:f5:9d:9c:1a:9f:48:71:9e:4c:79:ce:40:03:
de:fe:ec:58:ab:32:b6:dc:07:27:13:f0:ab:ae:7f:26:16:24:
41:64:52:58:5e:27:3d:7e:8d:17:4f:e8:04:12:2c:83:6c:72:
bf:57:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:33:09 2025 by rpki-client