Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/hpi8FGXUqFwvyzbspUBbXSR-u5E.roa
File: hpi8FGXUqFwvyzbspUBbXSR-u5E.roa (raw, json)
Hash identifier: D+oqZ2gXKRa2ovM6yrY+DCG9y6qbKxbt+6ZJu7cuVlg=
Subject key identifier: 86:98:BC:14:65:D4:A8:5C:2F:CB:36:EC:A5:40:5B:5D:24:7E:BB:91
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 019423690691A208A38942CE779671BE04E5
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/hpi8FGXUqFwvyzbspUBbXSR-u5E.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53007
IP address blocks: 153.112.195.0/24 maxlen: 24
192.157.16.0/23 maxlen: 23
192.157.16.0/24 maxlen: 24
192.157.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:06:91:a2:08:a3:89:42:ce:77:96:71:be:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8698bc1465d4a85c2fcb36eca5405b5d247ebb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:4e:a4:66:d7:68:85:dc:8b:ee:ed:b7:e2:
d4:1d:2d:32:8e:ca:31:dc:92:44:f9:03:36:a7:40:
c0:93:fa:f1:67:bc:da:b9:f7:0d:f5:a5:43:89:a9:
d5:bb:02:cc:05:69:f3:47:8f:b8:d5:90:51:c0:1a:
7c:2a:a5:94:a0:a1:10:5d:e0:4d:bf:d8:13:70:75:
16:fd:cf:43:15:4b:65:68:6a:41:00:f8:a9:33:2f:
bc:e8:63:a5:15:f6:d1:ce:18:5c:c7:b0:df:0b:23:
98:3a:e8:39:16:ef:4a:99:cb:ef:05:d2:c1:09:26:
01:ef:65:10:7c:6b:f1:e1:48:42:29:3d:2e:9f:6f:
88:b8:f3:67:91:37:b0:a4:43:12:58:80:58:a4:94:
b5:ee:a5:46:cf:68:95:28:8e:25:5a:62:2e:70:8d:
0b:89:aa:6f:b5:d1:33:22:a0:8b:00:44:76:83:48:
15:8f:d4:27:87:db:e0:84:df:68:19:31:3c:00:ed:
a5:3a:bb:64:53:e7:2d:61:9d:79:63:8b:58:60:22:
c4:e8:d2:7a:38:19:5f:54:d8:68:56:bb:74:8e:48:
4e:ec:7d:e4:fc:4e:ed:b4:98:d4:89:c7:6e:06:1e:
a9:51:35:39:d2:19:c4:09:75:8b:62:a9:ae:78:c6:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:BC:14:65:D4:A8:5C:2F:CB:36:EC:A5:40:5B:5D:24:7E:BB:91
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/hpi8FGXUqFwvyzbspUBbXSR-u5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.195.0/24
192.157.16.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b8:c5:a2:52:d4:c0:e4:fb:51:62:ab:13:6f:15:0f:10:d9:
09:40:7e:bd:7c:74:3e:76:db:a6:29:9d:a6:93:67:04:d0:09:
a1:c0:3a:f3:cd:64:5b:f3:1e:3c:3b:73:74:eb:88:d0:fe:4b:
2d:c6:5c:d2:58:8a:fa:51:9f:cb:56:f0:33:51:54:c2:57:99:
38:63:2d:64:33:21:bc:b7:d3:a9:d5:69:74:12:df:a7:77:ea:
bd:e8:1b:0a:39:14:21:8a:01:e4:87:42:f3:74:c3:d7:de:08:
77:a8:71:75:7e:8f:68:9d:db:3e:62:02:e5:40:19:b5:21:fd:
f9:8d:98:4a:ba:6c:3a:26:66:a5:99:2c:a5:c7:ac:49:a1:88:
04:5f:f5:4d:07:ab:c2:91:83:d5:d7:22:80:83:0c:ad:8f:3c:
a3:43:3f:a7:40:4b:be:56:33:3e:23:98:e6:8d:34:37:32:55:
ff:bd:95:4c:03:ce:1b:00:44:e3:ec:2d:d4:9c:4e:e7:65:17:
80:2d:c3:d4:3c:68:5f:19:60:9e:51:5f:3f:e5:11:46:f2:de:
20:dd:19:0c:65:6b:ef:91:cf:58:34:1f:11:50:4c:e3:32:3d:
15:bc:10:df:07:77:3d:72:7a:da:c5:8a:9b:96:b2:7e:6c:f1:
6a:f3:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:39 2025 by rpki-client