Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/hbtj6CF5ATphPB8ha5QNA2RuOXc.roa
File: hbtj6CF5ATphPB8ha5QNA2RuOXc.roa (raw, json)
Hash identifier: ULetXSoItsRUcqWt5Esb1d9eydi/7yToHxWBZA6BsyE=
Subject key identifier: 85:BB:63:E8:21:79:01:3A:61:3C:1F:21:6B:94:0D:03:64:6E:39:77
Certificate issuer: /CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Certificate serial: 059F32C6
Authority key identifier: B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/hbtj6CF5ATphPB8ha5QNA2RuOXc.roa
Signing time: Sat 01 Jan 2022 01:53:31 +0000
ROA not before: Sat 01 Jan 2022 01:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197444
IP address blocks: 81.25.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94319302 (0x59f32c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Validity
Not Before: Jan 1 01:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85bb63e82179013a613c1f216b940d03646e3977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:65:c2:c1:d4:3b:b7:65:3c:b1:c0:52:c8:
73:81:4c:c1:d0:bd:77:3a:6f:bd:67:54:01:7a:c9:
5d:b3:4d:fd:b8:68:4d:ca:49:84:b1:7f:51:de:c1:
fe:a8:92:49:40:cf:3a:4f:16:dc:cf:e7:d5:d8:60:
66:62:2d:f9:27:50:8b:51:78:60:c2:d7:2a:f5:52:
c2:19:19:5d:69:11:3c:eb:61:6f:ff:21:cb:d9:b0:
cf:22:d4:46:83:d9:fb:bd:9c:92:b5:42:5f:d4:e7:
d2:0d:42:74:ca:1c:4d:41:9b:c1:07:69:98:c1:ce:
4d:f5:0c:be:5c:de:fa:43:e2:d1:7b:96:51:e3:53:
b0:96:e1:af:54:1d:71:29:f6:3f:49:64:74:9a:b3:
9a:4d:61:9a:56:ac:87:be:c8:8a:0e:be:cd:7d:c1:
bf:73:a9:fe:02:e8:0d:fd:93:66:c6:93:0a:d6:b3:
da:0b:69:90:22:ca:12:3a:27:9f:2c:a6:80:af:5e:
13:57:1d:8f:79:bb:da:8b:7e:53:58:b4:48:58:58:
bd:79:2d:c0:73:51:7a:7e:6a:b0:01:6a:95:7a:60:
2a:1c:cb:a8:6e:49:a6:1a:a4:02:02:5f:90:71:bd:
84:4c:8c:63:df:54:10:4e:b9:e6:08:92:4c:13:1c:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:63:E8:21:79:01:3A:61:3C:1F:21:6B:94:0D:03:64:6E:39:77
X509v3 Authority Key Identifier:
keyid:B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/hbtj6CF5ATphPB8ha5QNA2RuOXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.21.0/24
Signature Algorithm: sha256WithRSAEncryption
15:92:78:3b:36:8f:31:5c:b0:e3:0a:16:81:ea:26:be:87:28:
b5:74:cb:49:13:69:d5:13:42:f8:38:6f:56:af:08:a7:72:60:
9d:11:a9:95:d9:20:c1:9c:85:6d:2c:c3:fa:31:cf:05:8c:9a:
51:08:4f:c6:5c:4c:44:db:a7:57:0d:bb:6d:dd:be:f3:21:07:
6b:a4:25:6c:c5:61:bb:7a:6d:dd:71:39:5d:0a:56:c7:18:19:
d9:9f:75:6a:a4:c7:50:b7:cb:db:68:65:c4:93:37:57:68:d4:
eb:02:3b:06:f1:95:10:4a:e8:6e:d5:f8:a5:f9:50:36:9b:fd:
72:44:1c:00:65:2d:66:7b:c1:29:61:f8:65:38:8d:01:e9:76:
6f:cb:c6:ac:0a:89:fa:d5:f5:30:91:06:eb:26:eb:bd:66:ba:
84:88:af:35:20:3b:02:88:30:a2:b1:bc:72:e7:90:67:ca:c4:
9b:fb:00:e8:9a:16:a7:49:3c:0a:e9:42:8d:47:45:dd:ee:4c:
7a:69:42:42:eb:b7:a3:77:70:2f:32:5a:38:e0:2c:ba:14:bc:
b4:06:1d:85:be:cb:98:19:34:63:37:3a:b5:8d:1c:e5:e6:d4:
85:96:9e:1e:10:d9:56:a4:14:74:5d:8c:28:69:d3:b1:ce:96:
24:3a:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:18 2025 by rpki-client