Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/HiKOjaGmDxpi59kezYj2Aw_UxJE.roa
File: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (raw, json)
Hash identifier: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=
Subject key identifier: 1E:22:8E:8D:A1:A6:0F:1A:62:E7:D9:1E:CD:88:F6:03:0F:D4:C4:91
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0194244492AE21B9A53A39B72C344264FBF9
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/HiKOjaGmDxpi59kezYj2Aw_UxJE.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202563
IP address blocks: 94.240.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:92:ae:21:b9:a5:3a:39:b7:2c:34:42:64:fb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e228e8da1a60f1a62e7d91ecd88f6030fd4c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:52:3d:11:40:f2:4d:c0:be:60:5c:19:79:
05:94:d3:8f:40:d7:a5:0f:d3:a3:9a:f0:60:0f:32:
87:c2:45:fb:6d:15:05:26:ef:7a:ab:98:f7:4f:92:
fe:4f:61:57:ae:f7:f2:f0:4f:c5:65:d3:2a:5b:72:
a4:5c:f5:f7:51:34:46:8b:59:3a:0a:50:7c:45:12:
b9:54:d3:c7:c7:89:70:b2:62:28:b2:4a:ae:a9:ec:
37:c3:91:fb:c0:78:21:3e:77:60:54:71:98:9a:64:
7e:be:a7:db:cb:61:a1:57:da:da:24:d8:90:2f:57:
ed:c2:35:93:3a:f6:2d:49:1c:4a:fb:c4:cb:80:e7:
53:3d:a1:b5:32:c1:d0:4c:5c:8c:8d:de:95:b6:a3:
6f:4e:ad:4d:9e:07:ba:14:35:c2:b8:56:56:3a:13:
b1:62:b5:92:9c:0a:0f:83:78:a8:fb:9f:85:7d:88:
f5:02:7c:7e:83:da:0b:69:51:95:96:45:d7:64:b9:
ab:10:46:0e:1c:b7:00:fd:77:99:4b:9f:c8:18:2c:
ca:bd:d9:e9:83:23:a1:96:42:c0:d5:f3:25:b0:95:
4c:24:46:e4:aa:13:41:99:d7:7a:fb:50:41:3b:be:
fd:6f:64:df:ac:00:a3:ce:1f:9f:a7:6c:e3:15:7b:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:22:8E:8D:A1:A6:0F:1A:62:E7:D9:1E:CD:88:F6:03:0F:D4:C4:91
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/HiKOjaGmDxpi59kezYj2Aw_UxJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.15.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1f:61:bd:c1:ca:95:1f:7c:49:1e:c0:c2:b9:0e:ff:a0:79:
ef:35:5d:57:27:34:a9:7b:54:42:39:df:b6:b0:a4:64:5b:74:
a2:63:ec:dd:3c:9f:a1:91:45:15:71:90:83:b7:59:01:62:2b:
d7:64:63:24:66:35:aa:fd:2e:a8:a1:01:38:33:84:4b:f9:1f:
13:e5:ea:ea:14:d6:41:9c:24:31:62:f7:6b:4c:22:a5:64:ab:
41:8a:16:d7:8c:6f:bd:f7:fd:e7:7d:c8:81:6e:f6:45:f6:bb:
01:d8:da:05:f7:85:ae:28:f9:23:91:9f:57:5a:8f:50:b0:b8:
d3:a7:7c:23:61:a8:af:31:0c:8e:b7:ed:25:0b:16:8e:0a:f8:
90:14:02:90:b9:0d:c4:40:7a:5b:eb:11:de:95:b4:31:3f:3e:
ae:d2:d6:b9:71:90:75:0b:22:df:e7:8f:43:fa:17:88:e2:c2:
e9:bf:7a:9c:6a:f3:fb:e0:18:38:ba:48:eb:70:1d:ef:7a:89:
b9:1c:3c:9c:aa:8f:c0:e6:74:89:bc:5e:5a:b8:9c:74:3c:7e:
f7:d0:75:00:98:a5:29:ea:e8:65:77:57:40:92:06:a7:43:b2:
17:a6:8e:78:3a:76:10:fb:9e:2f:83:df:e9:5b:41:d4:35:f3:
51:95:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:10 2025 by rpki-client