Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/hrzG3JzEmL660Sa58nART0mfLhA.roa
File: hrzG3JzEmL660Sa58nART0mfLhA.roa (raw, json)
Hash identifier: B4BqpX2Kgtl/tBTguoVKS3y20goU6DCS1JX2D+V5tJY=
Subject key identifier: 86:BC:C6:DC:9C:C4:98:BE:BA:D1:26:B9:F2:70:11:4F:49:9F:2E:10
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0186DA427342E0A0738398F541CCAD4CD36D
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/hrzG3JzEmL660Sa58nART0mfLhA.roa
Signing time: Mon 13 Mar 2023 09:17:13 +0000
ROA not before: Mon 13 Mar 2023 09:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 91.234.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:42:73:42:e0:a0:73:83:98:f5:41:cc:ad:4c:d3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Mar 13 09:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86bcc6dc9cc498bebad126b9f270114f499f2e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:d6:ed:6a:37:ec:e6:27:95:91:1b:88:d4:
56:56:9d:e7:4f:30:6a:b7:1e:cb:0e:a9:dc:14:0d:
6f:fc:16:56:25:60:6b:15:49:65:bd:01:fb:38:42:
da:20:4b:d7:c1:ee:b3:cb:5b:5e:c4:7c:83:5b:50:
bc:50:30:69:b3:fa:b1:8e:ae:eb:27:b3:ce:38:b4:
2e:16:c3:61:a7:ec:0a:67:81:03:c7:41:e4:89:e5:
fa:00:0d:ca:b3:51:46:1c:3c:77:34:65:1b:03:6a:
04:5f:8b:15:8e:d5:82:65:54:85:63:39:25:c7:c0:
b0:f0:56:97:07:1f:d3:dc:6b:c2:e9:c5:40:bb:a4:
1b:7e:d5:9a:bc:9d:79:c3:82:d8:a6:46:18:ab:48:
d5:57:7d:44:df:4d:12:54:6e:c2:a9:bf:c8:75:b5:
a2:4e:8a:ce:e9:08:62:c4:51:30:68:97:c8:29:c5:
9e:62:02:92:25:56:df:5e:61:bf:62:20:6c:2a:f7:
98:57:e8:54:2c:1e:22:ec:99:f2:e6:55:74:9b:c0:
3e:30:48:0b:15:40:8b:67:bc:ec:89:4f:70:90:84:
f1:75:f2:34:bc:83:8e:4c:81:4e:6e:d6:b5:dc:4e:
f0:52:b0:87:b7:6a:f1:5f:41:a8:fb:fd:d6:fb:cb:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:C6:DC:9C:C4:98:BE:BA:D1:26:B9:F2:70:11:4F:49:9F:2E:10
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/hrzG3JzEmL660Sa58nART0mfLhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:40:34:f9:57:e2:51:3f:3a:7f:1b:ac:ad:38:2b:e8:4d:f2:
b0:13:35:d4:42:08:16:ec:00:60:7c:8a:dc:33:9f:da:4a:58:
45:e9:3d:64:c8:d8:74:63:1d:93:a0:6b:f7:3d:80:53:39:d4:
4a:ec:b2:73:02:19:63:ba:ff:6d:5e:6b:95:a7:e3:82:44:3f:
f2:da:cb:d3:fe:f6:17:25:c7:3f:93:ee:48:9a:d3:96:bb:40:
06:9f:ca:26:1d:e2:81:23:80:8c:df:27:2b:b5:24:a4:13:f3:
c2:10:4a:3d:92:52:cb:1a:9e:9c:20:7e:30:05:d2:4c:0e:bc:
d4:fc:34:9f:6f:93:c4:42:0f:ec:53:ac:27:15:88:28:61:12:
f4:8f:1f:bc:85:4d:75:87:48:2e:2b:2a:80:bf:11:8f:b9:ef:
2d:1e:d2:2f:77:d6:5e:33:1f:37:bf:1d:55:e4:8e:c6:c5:02:
8e:ef:f9:47:d4:39:c8:7c:77:4f:10:52:e9:0d:d8:be:fd:d2:
67:27:29:18:28:2b:0f:66:39:6e:3a:e6:b4:31:73:19:4f:36:
38:4d:a2:37:71:48:03:0b:33:9c:3a:54:9c:c8:b0:21:43:29:
f5:38:06:6d:c3:5a:b3:83:4d:21:81:28:04:f8:8c:be:b8:a4:
91:d0:b4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:16 2025 by rpki-client