Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/hdtz_H_fHbely6kVCO0R813Ryuo.roa
File: hdtz_H_fHbely6kVCO0R813Ryuo.roa (raw, json)
Hash identifier: u3XYexaFyAjszbaB8f817tnHB4/IbmM2vSjPiwp9fFA=
Subject key identifier: 85:DB:73:FC:7F:DF:1D:B7:A5:CB:A9:15:08:ED:11:F3:5D:D1:CA:EA
Certificate issuer: /CN=e87024d9cf6a898b4ba9b29a46110aff4197d913
Certificate serial: 01856E81FE783226D1F6FCD9AE98010F86B6
Authority key identifier: E8:70:24:D9:CF:6A:89:8B:4B:A9:B2:9A:46:11:0A:FF:41:97:D9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HAk2c9qiYtLqbKaRhEK_0GX2RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/hdtz_H_fHbely6kVCO0R813Ryuo.roa
Signing time: Sun 01 Jan 2023 18:04:51 +0000
ROA not before: Sun 01 Jan 2023 18:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9136
IP address blocks: 92.118.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:fe:78:32:26:d1:f6:fc:d9:ae:98:01:0f:86:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87024d9cf6a898b4ba9b29a46110aff4197d913
Validity
Not Before: Jan 1 18:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85db73fc7fdf1db7a5cba91508ed11f35dd1caea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:d4:a3:fb:c5:56:1d:c7:18:8f:64:1a:c0:
fb:39:7c:88:9a:3d:b5:4f:ee:76:5b:39:cf:ca:7e:
ca:93:4f:b4:ee:fa:de:d8:70:f1:c6:5e:c3:bd:c9:
d6:be:50:90:00:69:93:b4:18:99:b3:b9:84:6b:bd:
97:45:49:b5:ca:10:04:67:80:10:a4:c8:a5:b1:48:
48:3f:22:5b:ee:4d:3d:cb:d7:ba:2a:47:f4:77:bd:
da:bf:56:71:ef:9d:f8:aa:9d:73:05:1f:1d:f9:60:
6e:c4:cd:ab:fc:95:2b:65:e7:fd:63:d7:40:0a:49:
23:59:57:ce:9f:30:cd:a7:a6:40:a5:1f:41:46:67:
1d:39:a0:15:ba:69:71:a0:00:32:6f:81:b1:c1:ca:
42:4a:81:e0:63:03:e8:64:c5:37:34:a0:6b:a5:b7:
f6:26:34:ff:a1:20:1d:d7:17:97:29:f4:7d:65:03:
6b:5c:a7:cf:75:f8:f7:e3:55:e1:57:bc:d8:e6:ce:
0d:42:7f:00:85:9a:de:2b:3d:f1:ab:50:bb:7d:1d:
53:aa:f7:17:a3:ef:1d:3b:3f:e9:d8:27:fa:10:f3:
ee:18:40:93:19:67:9d:09:48:94:1b:99:98:4c:19:
f3:2e:01:91:d2:9f:d5:fe:c2:ff:78:77:16:14:e5:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:73:FC:7F:DF:1D:B7:A5:CB:A9:15:08:ED:11:F3:5D:D1:CA:EA
X509v3 Authority Key Identifier:
keyid:E8:70:24:D9:CF:6A:89:8B:4B:A9:B2:9A:46:11:0A:FF:41:97:D9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HAk2c9qiYtLqbKaRhEK_0GX2RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/hdtz_H_fHbely6kVCO0R813Ryuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/6HAk2c9qiYtLqbKaRhEK_0GX2RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.192.0/22
Signature Algorithm: sha256WithRSAEncryption
26:e4:e1:5f:01:a8:3d:cf:fb:13:90:da:65:6a:93:42:b3:78:
56:9a:cd:bf:95:d4:2d:25:a2:f6:3f:8e:99:c5:e9:5b:84:ff:
02:fc:8b:3b:93:c2:97:e1:fb:9e:82:08:44:43:8b:d4:5f:e9:
26:3f:dc:9a:a3:1a:da:b0:fe:ab:21:3e:0c:17:e6:89:18:15:
a2:e0:b0:cd:82:a4:ea:7e:a5:5d:a0:70:e3:33:89:fe:0d:b9:
ff:ac:83:b4:33:3f:11:9a:06:94:49:ee:23:6e:ba:ef:fd:02:
dd:07:d5:53:00:f9:7e:d3:23:d8:79:98:64:6a:72:0f:62:5b:
46:d7:b7:68:96:a9:ee:33:ba:0d:d7:fb:76:f8:38:f3:6d:8a:
30:23:f8:4e:4f:e4:e6:d9:64:b8:0c:ba:7f:7c:16:14:56:1e:
ee:4d:fa:58:f8:84:b3:15:86:a4:a3:63:26:94:10:f4:d2:b5:
a8:21:b4:f4:d4:b2:12:25:3a:ed:71:bf:44:45:a2:4f:fa:c4:
38:89:f2:aa:0f:fc:e2:31:f9:65:1e:f3:b7:4a:f3:97:d9:4e:
ba:5c:99:6a:ef:61:a3:8d:eb:b1:ac:86:67:33:63:97:9f:46:
f2:91:96:71:03:df:70:bc:dc:99:9a:2e:4b:50:2b:e3:4d:29:
1a:bf:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:46:10 2025 by rpki-client