Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/HGWBnpYX08vMWUwwLOMJq_k78S0.roa
File: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (raw, json)
Hash identifier: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=
Subject key identifier: 1C:65:81:9E:96:17:D3:CB:CC:59:4C:30:2C:E3:09:AB:F9:3B:F1:2D
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0194266BC5E787B9DB6CCEA48DC6A26DBF1D
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/HGWBnpYX08vMWUwwLOMJq_k78S0.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39122
IP address blocks: 91.210.232.0/22 maxlen: 22
193.36.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c5:e7:87:b9:db:6c:ce:a4:8d:c6:a2:6d:bf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c65819e9617d3cbcc594c302ce309abf93bf12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:f4:09:5b:28:57:92:5f:00:02:61:7b:72:
1a:d0:3f:0c:7d:88:49:7c:f9:9e:0e:a5:28:08:69:
aa:2a:40:0b:8c:93:a6:88:84:bd:f3:dd:81:80:5f:
38:19:7e:e2:f9:bf:a9:ef:c0:78:ce:94:9e:09:c5:
a2:dc:83:4c:32:dd:28:c3:b6:53:30:28:e1:2f:8b:
cd:e8:6c:a9:4d:37:ae:ba:f7:a0:94:50:56:af:c4:
2a:15:c9:7b:dc:df:2e:cd:71:74:0e:54:30:27:bb:
c1:fa:66:62:93:3d:98:c7:4c:35:a7:53:47:97:e6:
d6:77:ce:19:a1:a7:23:d2:21:12:22:19:36:4e:76:
99:b7:93:b0:88:22:d9:26:8b:2b:ee:92:12:d5:88:
ec:a6:a1:ea:2a:66:0a:06:06:5d:60:37:2a:f4:7e:
cc:8e:be:83:47:f7:48:37:35:cf:1c:b4:52:29:8d:
c1:85:4b:0f:a2:d0:ee:d2:f3:75:5a:90:ec:1e:56:
9d:ca:5b:d4:df:15:6a:6d:84:66:a6:97:7a:d9:ba:
9c:72:fa:96:55:30:7b:ae:7a:7b:1e:5f:28:02:ee:
c6:b2:f9:dc:90:13:8d:8c:1b:e6:7d:b5:34:ab:3a:
70:3c:ce:48:a2:fa:c3:69:34:f6:09:3b:a4:13:9d:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:65:81:9E:96:17:D3:CB:CC:59:4C:30:2C:E3:09:AB:F9:3B:F1:2D
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/HGWBnpYX08vMWUwwLOMJq_k78S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.232.0/22
193.36.43.0/24
Signature Algorithm: sha256WithRSAEncryption
39:88:2b:c7:aa:fb:97:06:f2:70:c1:ab:ad:b5:bf:7f:6f:bd:
7f:c6:c6:e8:38:60:7e:35:e3:c1:ae:87:a6:f9:cd:67:48:a8:
b8:3c:5c:4d:f7:bb:6b:9a:e2:42:df:22:8a:a6:f6:0b:82:b6:
fa:86:07:f8:19:29:8a:6e:26:c1:63:d3:6b:3c:1b:91:10:3e:
e8:02:d4:0c:0b:9f:78:53:bd:80:18:6b:02:1a:7a:6f:09:89:
e4:aa:09:52:18:d9:86:e8:e7:99:02:6e:6d:0a:34:41:de:b2:
4f:e1:33:c1:0e:ce:dc:c9:b6:0e:b2:34:6c:74:18:0b:fa:65:
54:f9:b6:42:eb:62:be:fe:8c:7c:a7:4a:b5:d4:0d:97:d5:5a:
6f:c8:84:0a:d3:0b:64:0d:e5:b2:7b:32:6f:95:dc:52:1c:f3:
69:76:bf:f1:ae:9a:66:48:8d:a0:59:c0:1b:20:c1:99:48:25:
7b:5f:26:27:45:fc:d6:a6:26:39:16:c6:07:ae:a2:b0:0c:25:
4b:9c:81:11:7b:d6:d5:cf:5a:da:41:26:85:ae:85:a5:f1:ff:
e5:3e:eb:77:95:80:b3:65:3f:b7:7a:2c:77:74:d5:24:99:c4:
58:38:0d:ae:41:b9:94:d2:1b:9e:ae:5c:37:4c:bc:09:e7:a7:
92:4a:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:13:43 2025 by rpki-client