Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hipalaF2qEcDq6Edxd4GUOn6MbA.roa
File: hipalaF2qEcDq6Edxd4GUOn6MbA.roa (raw, json)
Hash identifier: i82FBQqi2m/8dIfbOLD5qroddiBTLaI5hHN5cATVITg=
Subject key identifier: 86:2A:5A:95:A1:76:A8:47:03:AB:A1:1D:C5:DE:06:50:E9:FA:31:B0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222063EF29DD8BA362CCDEBCABE8C4C1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hipalaF2qEcDq6Edxd4GUOn6MbA.roa
Signing time: Wed 01 Jan 2025 13:48:55 +0000
ROA not before: Wed 01 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 185.238.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:63:ef:29:dd:8b:a3:62:cc:de:bc:ab:e8:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=862a5a95a176a84703aba11dc5de0650e9fa31b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:20:f9:98:3e:3c:6e:39:9e:93:b7:b7:5a:
e2:7c:2d:e1:2f:65:1b:f5:f0:d0:31:5e:cf:62:28:
16:ee:c7:62:69:a4:d8:ac:c1:a6:dd:4e:e4:2d:58:
23:20:f8:5a:d9:46:d3:48:bb:1f:36:55:45:7b:f1:
7c:8b:ac:af:52:e7:b3:5d:35:db:47:da:26:6f:30:
78:1c:9e:fb:ed:a5:3b:68:d5:68:a1:f7:26:10:e3:
dc:62:d5:e7:13:c4:32:bb:eb:d2:46:c6:9a:1a:c1:
45:3a:81:b6:a6:c1:d7:ae:77:a9:b9:05:21:c9:14:
ee:73:25:1a:39:ec:0e:99:2f:d6:51:46:e4:fb:fb:
97:5b:b5:2e:97:7c:c6:ab:e7:8f:ea:81:06:8e:3b:
b6:80:37:75:86:68:58:52:fa:88:ef:d1:d9:35:e5:
86:91:26:0d:d3:cd:0d:b0:9d:97:d6:f6:03:7c:6a:
7f:33:d9:40:6c:16:4d:9b:21:4d:5e:d2:fb:f5:a7:
a5:a1:62:7d:1a:4f:20:e8:71:74:4e:88:69:b0:c5:
a8:35:ec:c2:1b:99:70:33:c6:d5:c0:de:5d:23:cf:
e6:f9:d6:50:10:bf:01:8c:c5:75:26:41:65:d9:d5:
dd:c9:da:bb:95:a3:5c:d0:dd:d1:33:98:9e:45:14:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2A:5A:95:A1:76:A8:47:03:AB:A1:1D:C5:DE:06:50:E9:FA:31:B0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hipalaF2qEcDq6Edxd4GUOn6MbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.229.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e9:a9:67:40:db:7f:2a:c9:ed:78:62:c0:af:a3:e0:f2:c8:
8a:26:c1:0a:41:e6:9b:94:76:ce:66:6f:7d:80:be:ab:f1:c3:
93:ab:c4:1f:9f:b2:74:c6:3a:e2:14:6d:1b:99:9f:e7:48:a4:
b5:58:3e:72:52:1b:3b:57:14:26:3f:6d:64:26:ca:8f:1d:a9:
9e:bd:48:56:06:5b:ec:c3:b1:dd:6f:f5:56:c7:41:94:5a:5c:
46:4f:f4:2b:01:a6:af:20:d8:e8:97:6f:47:0f:cb:d0:62:0d:
01:fe:56:e8:63:44:ea:05:dd:5c:d6:17:f8:28:0b:d9:c4:ea:
de:1d:bf:8e:1d:3d:83:a8:98:b6:d7:fe:b7:b0:6b:ca:a1:82:
2c:19:7e:a2:23:2d:15:9c:90:1e:57:4e:58:b2:59:80:7c:73:
60:3b:c1:40:a0:e5:92:3a:cb:a7:9d:9a:a7:88:07:63:3e:9a:
b5:da:ee:af:a2:74:2e:96:8d:22:d2:d2:e6:4f:9a:a9:e5:f3:
48:d9:d8:4a:29:f3:82:e0:03:93:dc:15:e9:d8:29:8c:b1:b5:
51:c8:15:c2:da:2b:3e:9a:95:92:a5:71:8c:85:5a:da:eb:04:
b8:df:ca:28:86:1f:ce:94:4f:a5:78:7f:f1:00:11:c5:28:0f:
38:0c:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:08 2025 by rpki-client