Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/HRxI47MJmPRRcZuvobrot8euLTA.roa
File: HRxI47MJmPRRcZuvobrot8euLTA.roa (raw, json)
Hash identifier: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=
Subject key identifier: 1D:1C:48:E3:B3:09:98:F4:51:71:9B:AF:A1:BA:E8:B7:C7:AE:2D:30
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 01942368F24DCB857A91021B7F72579BB93D
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/HRxI47MJmPRRcZuvobrot8euLTA.roa
Signing time: Wed 01 Jan 2025 19:47:47 +0000
ROA not before: Wed 01 Jan 2025 19:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9050
IP address blocks: 89.39.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f2:4d:cb:85:7a:91:02:1b:7f:72:57:9b:b9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jan 1 19:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d1c48e3b30998f451719bafa1bae8b7c7ae2d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:33:5e:2c:69:7a:22:e7:87:5f:90:89:b1:
72:33:c5:e4:85:f7:99:ac:d8:99:e3:68:b0:05:a2:
11:13:c0:2f:3f:94:52:df:e4:43:ab:77:0c:53:5b:
d3:37:8e:41:36:2e:e8:cf:80:fe:f6:2d:89:ca:37:
62:60:1b:b5:7d:bb:10:53:82:36:d5:8a:64:6a:3e:
02:8e:c5:53:7b:98:57:09:50:e3:97:82:82:c9:a1:
d3:c2:f9:05:cd:32:12:3d:74:31:a1:ea:82:39:a8:
f5:92:08:4b:db:29:ba:e9:b7:7b:98:71:38:64:4c:
77:b8:42:20:6c:02:93:c2:6f:6a:3c:1c:01:a9:47:
16:b4:a2:c2:dc:18:33:0a:8a:2a:62:84:bf:bc:87:
e9:c2:a2:52:85:8b:d7:02:fb:24:5a:18:c8:26:50:
25:a5:36:9a:18:05:33:4a:f6:0f:d5:99:f0:3a:f8:
04:37:6b:60:58:43:55:7a:56:0d:5e:68:16:32:8f:
0a:c2:be:94:f9:4f:bb:86:eb:ec:30:9a:ca:24:c5:
7e:2f:c6:04:78:79:c4:12:51:cf:71:28:a3:dd:9b:
43:8b:a5:6e:62:b3:48:0a:3e:0a:ba:10:ee:e4:1d:
f6:b8:05:7c:68:dc:75:d6:b5:44:1b:7f:b4:72:fb:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:48:E3:B3:09:98:F4:51:71:9B:AF:A1:BA:E8:B7:C7:AE:2D:30
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/HRxI47MJmPRRcZuvobrot8euLTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:61:63:33:e3:bd:db:bb:f8:ac:65:e6:c9:e1:9b:06:ad:57:
ec:f9:f9:c4:c3:7e:e3:93:ee:ce:e0:c3:c1:0d:79:96:59:b8:
75:55:d7:db:69:15:a9:a0:dc:f1:3c:2e:f2:61:51:90:70:9d:
f9:92:3c:7d:37:58:d2:5c:c9:65:b7:a3:6c:44:e9:79:f4:86:
06:68:8c:ec:04:e1:cc:a3:6c:e1:bd:c1:2a:a1:9a:38:a3:77:
71:6d:ca:d5:16:7b:4e:6a:b8:d5:8d:20:97:e6:98:6a:8d:cc:
4e:18:4f:96:5b:f6:db:a1:44:25:ca:b9:6d:63:e0:44:4d:2e:
f9:52:c4:33:b3:48:ab:42:a6:32:44:33:b6:77:f3:df:bc:57:
a7:39:03:0e:f4:f3:da:92:30:e2:0e:32:da:35:ff:50:5e:70:
54:c4:76:d3:16:04:32:ee:be:2d:8d:6d:4d:44:55:2e:1c:9e:
18:c3:ea:61:09:bb:40:ce:bd:88:69:f5:22:0a:51:a5:6c:a0:
22:27:4b:7f:14:07:be:0d:ed:ab:38:ff:20:1f:2f:14:08:29:
87:7f:03:41:fe:4f:bf:d6:b1:d6:8f:b6:7e:9f:a6:2f:93:f6:
19:f8:3b:7d:8d:f1:3e:88:44:a4:fb:c9:c7:26:a7:80:30:c2:
a2:ea:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:41 2025 by rpki-client