Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa
File: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (raw, json)
Hash identifier: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=
Subject key identifier: 1F:3A:CE:88:D8:39:20:66:EF:C5:A6:3A:10:9B:5A:15:38:8F:C0:97
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019425221BE10EDDE6506AC7F802F16EAAB3
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56381
IP address blocks: 141.98.136.0/24 maxlen: 24
2a09:11c0::/48 maxlen: 48
2a09:11c0:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1b:e1:0e:dd:e6:50:6a:c7:f8:02:f1:6e:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f3ace88d8392066efc5a63a109b5a15388fc097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:4e:2d:79:6a:7e:3e:ab:d2:61:bb:8d:84:
d9:dd:c9:95:7c:19:0d:88:e6:9f:e6:c8:1c:61:9c:
ec:e5:30:1a:b7:48:39:fe:1d:48:e0:87:1a:75:d5:
d7:83:4d:b4:2d:1f:a3:83:0d:93:ba:4e:16:06:85:
b2:c5:ee:bb:33:a3:70:63:48:c2:49:82:52:2f:b6:
57:50:ed:e9:8d:e3:b6:29:08:0b:54:4a:b7:79:c4:
c4:a3:d3:b2:6a:5f:86:ef:91:7c:2b:02:e3:bf:ac:
25:f4:d2:c9:37:26:7e:09:4f:51:34:6e:4a:fb:bd:
1d:b9:bf:ef:07:84:c5:34:04:46:ef:7e:2e:0a:e5:
7b:87:09:47:e9:28:af:8d:d7:9f:59:60:bc:df:7d:
4e:64:ed:b3:5d:d8:12:ab:b1:b2:b6:57:df:4f:e4:
19:b9:74:95:30:68:41:31:10:70:e8:e6:44:94:8e:
44:3a:ad:a2:c8:ae:a0:33:c8:19:d3:17:0b:cc:89:
1e:0e:60:44:68:05:46:cd:a0:26:5c:98:9b:78:0c:
5b:49:b6:03:d8:89:5a:b0:26:bd:87:17:ee:70:8e:
45:67:60:ce:8b:d7:6f:0e:c2:d2:5a:6e:c2:09:f7:
b1:a4:ec:d0:bb:10:9c:93:42:97:c0:fb:97:4b:33:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3A:CE:88:D8:39:20:66:EF:C5:A6:3A:10:9B:5A:15:38:8F:C0:97
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.136.0/24
IPv6:
2a09:11c0::/48
2a09:11c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
2d:a9:bc:7f:55:96:bc:64:a8:c7:28:18:11:3c:ed:80:a0:58:
01:cc:36:af:59:65:43:30:58:11:a2:0c:cf:15:92:c7:d4:d5:
ac:0d:30:ca:4e:30:69:6c:d0:2c:9c:44:65:ca:03:b8:cd:8f:
76:98:2a:2e:c0:9f:81:07:91:f3:52:8c:fc:82:f9:03:1f:bf:
3e:aa:e7:eb:6b:f4:9b:83:91:33:ea:06:6c:7a:8c:b2:3a:04:
52:28:40:51:0e:fb:f4:38:8a:57:04:f1:9a:ba:d0:75:86:65:
47:e8:52:74:11:eb:8f:dd:af:cd:b3:ed:49:eb:c3:32:09:c0:
39:cb:bc:17:3f:0e:3e:f7:98:b3:36:72:98:ba:df:c6:9e:45:
86:50:80:9a:1c:0f:6a:f2:3c:ee:38:5e:81:48:f3:84:20:c6:
bf:57:a7:5b:9d:a9:c3:67:56:ac:29:b5:70:e3:fe:51:8c:ac:
68:49:0f:55:ad:16:13:f0:8b:fd:65:93:4e:f0:c9:12:0e:99:
57:d8:39:b4:d3:80:5b:f8:57:52:66:b6:11:d1:4a:a4:a8:fc:
ba:12:3f:75:fa:83:31:83:bc:f1:0c:a8:a5:a3:83:39:e5:ed:
7a:a8:28:11:c8:15:2d:bf:73:25:0f:17:c9:fa:1d:7b:c4:93:
77:7b:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:51:45 2025 by rpki-client